./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bfd8ca9d9dda86f57445168715d124831c95b647e7c1b1093bb129b0384cce9e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 07:21:28,490 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 07:21:28,491 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 07:21:28,505 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 07:21:28,505 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 07:21:28,506 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 07:21:28,507 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 07:21:28,508 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 07:21:28,509 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 07:21:28,509 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 07:21:28,510 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 07:21:28,510 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 07:21:28,511 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 07:21:28,511 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 07:21:28,512 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 07:21:28,513 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 07:21:28,513 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 07:21:28,514 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 07:21:28,515 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 07:21:28,516 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 07:21:28,517 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 07:21:28,518 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 07:21:28,519 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 07:21:28,519 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 07:21:28,521 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 07:21:28,521 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 07:21:28,522 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 07:21:28,522 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 07:21:28,522 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 07:21:28,523 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 07:21:28,523 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 07:21:28,524 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 07:21:28,524 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 07:21:28,525 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 07:21:28,525 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 07:21:28,525 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 07:21:28,526 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 07:21:28,526 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 07:21:28,526 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 07:21:28,527 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 07:21:28,527 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 07:21:28,528 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-12-14 07:21:28,542 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 07:21:28,542 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 07:21:28,549 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 07:21:28,550 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 07:21:28,550 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 07:21:28,550 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 07:21:28,550 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 07:21:28,551 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 07:21:28,551 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 07:21:28,551 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 07:21:28,551 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 07:21:28,551 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 07:21:28,551 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 07:21:28,551 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 07:21:28,551 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 07:21:28,551 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 07:21:28,552 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 07:21:28,552 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 07:21:28,552 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-14 07:21:28,552 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-14 07:21:28,552 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 07:21:28,553 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 07:21:28,553 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-14 07:21:28,553 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 07:21:28,553 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 07:21:28,553 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 07:21:28,553 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-12-14 07:21:28,553 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-12-14 07:21:28,553 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-12-14 07:21:28,554 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 07:21:28,554 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-12-14 07:21:28,554 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 07:21:28,554 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 07:21:28,554 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 07:21:28,554 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 07:21:28,554 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 07:21:28,554 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 07:21:28,555 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 07:21:28,555 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 07:21:28,555 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 07:21:28,555 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 07:21:28,555 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 07:21:28,555 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bfd8ca9d9dda86f57445168715d124831c95b647e7c1b1093bb129b0384cce9e [2022-12-14 07:21:28,721 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 07:21:28,742 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 07:21:28,744 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 07:21:28,746 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 07:21:28,746 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 07:21:28,747 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i [2022-12-14 07:21:31,347 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 07:21:31,521 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 07:21:31,522 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/sv-benchmarks/c/array-memsafety/cstrcat-alloca-2.i [2022-12-14 07:21:31,532 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/data/dfd93c27f/cc3404b9dc5d458abb3d0d1c2faab58d/FLAGfa2035d80 [2022-12-14 07:21:31,546 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/data/dfd93c27f/cc3404b9dc5d458abb3d0d1c2faab58d [2022-12-14 07:21:31,548 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 07:21:31,550 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 07:21:31,551 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 07:21:31,551 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 07:21:31,555 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 07:21:31,555 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 07:21:31" (1/1) ... [2022-12-14 07:21:31,557 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@146b9ceb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31, skipping insertion in model container [2022-12-14 07:21:31,557 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 07:21:31" (1/1) ... [2022-12-14 07:21:31,564 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 07:21:31,596 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 07:21:31,781 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 07:21:31,789 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 07:21:31,815 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 07:21:31,831 INFO L208 MainTranslator]: Completed translation [2022-12-14 07:21:31,831 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31 WrapperNode [2022-12-14 07:21:31,831 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 07:21:31,832 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 07:21:31,832 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 07:21:31,832 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 07:21:31,837 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31" (1/1) ... [2022-12-14 07:21:31,845 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31" (1/1) ... [2022-12-14 07:21:31,860 INFO L138 Inliner]: procedures = 117, calls = 16, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 94 [2022-12-14 07:21:31,860 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 07:21:31,860 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 07:21:31,860 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 07:21:31,860 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 07:21:31,867 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31" (1/1) ... [2022-12-14 07:21:31,867 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31" (1/1) ... [2022-12-14 07:21:31,869 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31" (1/1) ... [2022-12-14 07:21:31,869 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31" (1/1) ... [2022-12-14 07:21:31,872 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31" (1/1) ... [2022-12-14 07:21:31,875 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31" (1/1) ... [2022-12-14 07:21:31,876 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31" (1/1) ... [2022-12-14 07:21:31,876 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31" (1/1) ... [2022-12-14 07:21:31,878 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 07:21:31,878 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 07:21:31,878 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 07:21:31,879 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 07:21:31,879 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31" (1/1) ... [2022-12-14 07:21:31,884 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 07:21:31,891 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:21:31,902 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 07:21:31,904 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 07:21:31,937 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-12-14 07:21:31,937 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-12-14 07:21:31,937 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-12-14 07:21:31,938 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-12-14 07:21:31,938 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 07:21:31,938 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 07:21:32,015 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 07:21:32,016 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 07:21:32,173 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 07:21:32,216 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 07:21:32,216 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-12-14 07:21:32,219 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 07:21:32 BoogieIcfgContainer [2022-12-14 07:21:32,219 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 07:21:32,221 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 07:21:32,222 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 07:21:32,225 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 07:21:32,225 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 07:21:31" (1/3) ... [2022-12-14 07:21:32,225 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1f1bbfeb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 07:21:32, skipping insertion in model container [2022-12-14 07:21:32,225 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 07:21:31" (2/3) ... [2022-12-14 07:21:32,226 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1f1bbfeb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 07:21:32, skipping insertion in model container [2022-12-14 07:21:32,226 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 07:21:32" (3/3) ... [2022-12-14 07:21:32,227 INFO L112 eAbstractionObserver]: Analyzing ICFG cstrcat-alloca-2.i [2022-12-14 07:21:32,240 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 07:21:32,241 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 15 error locations. [2022-12-14 07:21:32,273 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 07:21:32,278 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@43807bc, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 07:21:32,278 INFO L358 AbstractCegarLoop]: Starting to check reachability of 15 error locations. [2022-12-14 07:21:32,281 INFO L276 IsEmpty]: Start isEmpty. Operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:32,285 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-12-14 07:21:32,285 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:32,286 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-12-14 07:21:32,286 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:32,290 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:32,290 INFO L85 PathProgramCache]: Analyzing trace with hash 147851, now seen corresponding path program 1 times [2022-12-14 07:21:32,297 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:32,297 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [182991264] [2022-12-14 07:21:32,297 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:32,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:32,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:32,448 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:32,449 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:32,449 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [182991264] [2022-12-14 07:21:32,450 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [182991264] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:32,450 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:21:32,450 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-12-14 07:21:32,452 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [427127276] [2022-12-14 07:21:32,453 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:32,456 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 07:21:32,457 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:32,487 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 07:21:32,488 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 07:21:32,490 INFO L87 Difference]: Start difference. First operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:32,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:32,542 INFO L93 Difference]: Finished difference Result 33 states and 37 transitions. [2022-12-14 07:21:32,543 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 07:21:32,544 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-12-14 07:21:32,544 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:32,549 INFO L225 Difference]: With dead ends: 33 [2022-12-14 07:21:32,549 INFO L226 Difference]: Without dead ends: 31 [2022-12-14 07:21:32,550 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 07:21:32,553 INFO L413 NwaCegarLoop]: 27 mSDtfsCounter, 1 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:32,553 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 41 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:21:32,565 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2022-12-14 07:21:32,573 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 31. [2022-12-14 07:21:32,574 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 16 states have (on average 2.125) internal successors, (34), 30 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:32,574 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 34 transitions. [2022-12-14 07:21:32,575 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 34 transitions. Word has length 3 [2022-12-14 07:21:32,575 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:32,575 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 34 transitions. [2022-12-14 07:21:32,575 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:32,576 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 34 transitions. [2022-12-14 07:21:32,576 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 07:21:32,576 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:32,576 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 07:21:32,576 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 07:21:32,576 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:32,577 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:32,577 INFO L85 PathProgramCache]: Analyzing trace with hash 4583106, now seen corresponding path program 1 times [2022-12-14 07:21:32,577 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:32,577 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [82173861] [2022-12-14 07:21:32,577 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:32,577 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:32,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:32,735 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:32,736 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:32,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [82173861] [2022-12-14 07:21:32,736 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [82173861] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:32,736 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:21:32,736 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 07:21:32,736 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2119150705] [2022-12-14 07:21:32,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:32,737 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 07:21:32,738 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:32,738 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 07:21:32,738 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 07:21:32,738 INFO L87 Difference]: Start difference. First operand 31 states and 34 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:32,764 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:32,764 INFO L93 Difference]: Finished difference Result 29 states and 32 transitions. [2022-12-14 07:21:32,764 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 07:21:32,764 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 07:21:32,765 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:32,765 INFO L225 Difference]: With dead ends: 29 [2022-12-14 07:21:32,765 INFO L226 Difference]: Without dead ends: 29 [2022-12-14 07:21:32,765 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 07:21:32,766 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 27 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:32,767 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 14 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:21:32,767 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-12-14 07:21:32,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-12-14 07:21:32,769 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 16 states have (on average 2.0) internal successors, (32), 28 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:32,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 32 transitions. [2022-12-14 07:21:32,769 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 32 transitions. Word has length 4 [2022-12-14 07:21:32,769 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:32,770 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 32 transitions. [2022-12-14 07:21:32,770 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:32,770 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 32 transitions. [2022-12-14 07:21:32,770 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 07:21:32,770 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:32,770 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 07:21:32,770 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 07:21:32,771 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:32,771 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:32,771 INFO L85 PathProgramCache]: Analyzing trace with hash 4583107, now seen corresponding path program 1 times [2022-12-14 07:21:32,771 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:32,771 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2027970692] [2022-12-14 07:21:32,771 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:32,772 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:32,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:32,926 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:32,926 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:32,926 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2027970692] [2022-12-14 07:21:32,926 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2027970692] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:32,926 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:21:32,926 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 07:21:32,926 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [438759686] [2022-12-14 07:21:32,927 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:32,927 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 07:21:32,927 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:32,927 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 07:21:32,927 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-12-14 07:21:32,927 INFO L87 Difference]: Start difference. First operand 29 states and 32 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:33,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:33,023 INFO L93 Difference]: Finished difference Result 55 states and 61 transitions. [2022-12-14 07:21:33,023 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 07:21:33,023 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 07:21:33,024 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:33,024 INFO L225 Difference]: With dead ends: 55 [2022-12-14 07:21:33,024 INFO L226 Difference]: Without dead ends: 55 [2022-12-14 07:21:33,025 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-12-14 07:21:33,026 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 87 mSDsluCounter, 24 mSDsCounter, 0 mSdLazyCounter, 58 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 37 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 58 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:33,026 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 37 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 58 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 07:21:33,027 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-12-14 07:21:33,029 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 31. [2022-12-14 07:21:33,029 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:33,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-12-14 07:21:33,030 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 4 [2022-12-14 07:21:33,030 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:33,030 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-12-14 07:21:33,031 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:33,031 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-12-14 07:21:33,031 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 07:21:33,031 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:33,031 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 07:21:33,031 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 07:21:33,032 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:33,032 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:33,032 INFO L85 PathProgramCache]: Analyzing trace with hash 142164286, now seen corresponding path program 1 times [2022-12-14 07:21:33,032 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:33,032 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1600653024] [2022-12-14 07:21:33,033 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:33,033 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:33,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:33,077 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:33,077 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:33,077 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1600653024] [2022-12-14 07:21:33,077 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1600653024] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:33,077 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:21:33,077 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 07:21:33,078 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1913290831] [2022-12-14 07:21:33,078 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:33,078 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 07:21:33,078 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:33,079 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 07:21:33,079 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 07:21:33,079 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:33,104 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:33,104 INFO L93 Difference]: Finished difference Result 29 states and 33 transitions. [2022-12-14 07:21:33,105 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 07:21:33,105 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 07:21:33,105 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:33,105 INFO L225 Difference]: With dead ends: 29 [2022-12-14 07:21:33,106 INFO L226 Difference]: Without dead ends: 29 [2022-12-14 07:21:33,106 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 07:21:33,107 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 24 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:33,107 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 14 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:21:33,108 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-12-14 07:21:33,110 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-12-14 07:21:33,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 18 states have (on average 1.8333333333333333) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:33,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-12-14 07:21:33,111 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 5 [2022-12-14 07:21:33,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:33,111 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-12-14 07:21:33,111 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:33,111 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-12-14 07:21:33,112 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 07:21:33,112 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:33,112 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 07:21:33,112 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-14 07:21:33,112 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:33,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:33,113 INFO L85 PathProgramCache]: Analyzing trace with hash 142164287, now seen corresponding path program 1 times [2022-12-14 07:21:33,113 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:33,113 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2009528073] [2022-12-14 07:21:33,113 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:33,113 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:33,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:33,267 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:33,267 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:33,267 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2009528073] [2022-12-14 07:21:33,267 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2009528073] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:33,267 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:21:33,267 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 07:21:33,267 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1387987493] [2022-12-14 07:21:33,268 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:33,268 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 07:21:33,268 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:33,268 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 07:21:33,268 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=18, Unknown=0, NotChecked=0, Total=30 [2022-12-14 07:21:33,268 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:33,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:33,343 INFO L93 Difference]: Finished difference Result 50 states and 56 transitions. [2022-12-14 07:21:33,343 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 07:21:33,344 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 07:21:33,344 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:33,344 INFO L225 Difference]: With dead ends: 50 [2022-12-14 07:21:33,344 INFO L226 Difference]: Without dead ends: 50 [2022-12-14 07:21:33,345 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-12-14 07:21:33,346 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 122 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:33,346 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 30 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 07:21:33,347 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-12-14 07:21:33,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 31. [2022-12-14 07:21:33,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 20 states have (on average 1.8) internal successors, (36), 30 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:33,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 36 transitions. [2022-12-14 07:21:33,350 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 36 transitions. Word has length 5 [2022-12-14 07:21:33,350 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:33,350 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 36 transitions. [2022-12-14 07:21:33,350 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:33,350 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 36 transitions. [2022-12-14 07:21:33,351 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 07:21:33,351 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:33,351 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 07:21:33,351 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 07:21:33,351 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:33,352 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:33,352 INFO L85 PathProgramCache]: Analyzing trace with hash 142166373, now seen corresponding path program 1 times [2022-12-14 07:21:33,352 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:33,352 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [498882387] [2022-12-14 07:21:33,352 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:33,352 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:33,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:33,398 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:33,399 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:33,399 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [498882387] [2022-12-14 07:21:33,399 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [498882387] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:33,399 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:21:33,399 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 07:21:33,399 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [155432084] [2022-12-14 07:21:33,399 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:33,400 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 07:21:33,400 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:33,400 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 07:21:33,400 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-12-14 07:21:33,400 INFO L87 Difference]: Start difference. First operand 31 states and 36 transitions. Second operand has 4 states, 4 states have (on average 1.25) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:33,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:33,421 INFO L93 Difference]: Finished difference Result 31 states and 35 transitions. [2022-12-14 07:21:33,421 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 07:21:33,422 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 07:21:33,422 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:33,422 INFO L225 Difference]: With dead ends: 31 [2022-12-14 07:21:33,422 INFO L226 Difference]: Without dead ends: 31 [2022-12-14 07:21:33,422 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-12-14 07:21:33,423 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 30 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 18 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 18 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 18 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:33,423 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 41 Invalid, 18 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:21:33,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2022-12-14 07:21:33,424 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 31. [2022-12-14 07:21:33,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 20 states have (on average 1.75) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:33,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-12-14 07:21:33,425 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 5 [2022-12-14 07:21:33,425 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:33,425 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-12-14 07:21:33,425 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:33,425 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-12-14 07:21:33,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 07:21:33,426 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:33,426 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-12-14 07:21:33,426 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-14 07:21:33,426 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:33,426 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:33,426 INFO L85 PathProgramCache]: Analyzing trace with hash 109471665, now seen corresponding path program 1 times [2022-12-14 07:21:33,426 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:33,426 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [630306051] [2022-12-14 07:21:33,427 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:33,427 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:33,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:33,582 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:33,582 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:33,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [630306051] [2022-12-14 07:21:33,582 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [630306051] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:21:33,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [530967250] [2022-12-14 07:21:33,582 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:33,582 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:33,582 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:21:33,583 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:21:33,584 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 07:21:33,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:33,638 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 20 conjunts are in the unsatisfiable core [2022-12-14 07:21:33,643 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:21:33,735 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:33,742 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 07:21:33,749 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 07:21:33,862 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:33,862 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:21:33,983 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:21:33,991 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:33,992 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [530967250] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:21:33,992 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1933833258] [2022-12-14 07:21:34,010 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-12-14 07:21:34,010 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:21:34,014 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:21:34,019 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:21:34,019 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:21:34,099 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:34,102 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:34,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:21:34,179 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:34,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:34,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:34,308 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:21:34,651 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '515#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_#t~nondet13#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet13#1|)) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:21:34,651 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:21:34,651 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:21:34,651 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 11 [2022-12-14 07:21:34,651 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [547558888] [2022-12-14 07:21:34,651 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:21:34,652 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-12-14 07:21:34,652 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:34,652 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-12-14 07:21:34,652 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2022-12-14 07:21:34,653 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:34,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:34,926 INFO L93 Difference]: Finished difference Result 76 states and 85 transitions. [2022-12-14 07:21:34,926 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-14 07:21:34,926 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 07:21:34,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:34,927 INFO L225 Difference]: With dead ends: 76 [2022-12-14 07:21:34,927 INFO L226 Difference]: Without dead ends: 76 [2022-12-14 07:21:34,927 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 4 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2022-12-14 07:21:34,928 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 218 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 218 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:34,928 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [218 Valid, 110 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 07:21:34,929 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2022-12-14 07:21:34,930 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 27. [2022-12-14 07:21:34,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 18 states have (on average 1.6666666666666667) internal successors, (30), 26 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:34,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 30 transitions. [2022-12-14 07:21:34,931 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 30 transitions. Word has length 6 [2022-12-14 07:21:34,931 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:34,931 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 30 transitions. [2022-12-14 07:21:34,931 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:34,931 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 30 transitions. [2022-12-14 07:21:34,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 07:21:34,931 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:34,932 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1] [2022-12-14 07:21:34,937 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 07:21:35,132 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:35,133 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:35,133 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:35,133 INFO L85 PathProgramCache]: Analyzing trace with hash -819015331, now seen corresponding path program 1 times [2022-12-14 07:21:35,133 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:35,133 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [758047652] [2022-12-14 07:21:35,133 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:35,133 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:35,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:35,318 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:35,318 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:35,318 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [758047652] [2022-12-14 07:21:35,318 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [758047652] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:21:35,319 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [105929131] [2022-12-14 07:21:35,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:35,319 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:35,319 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:21:35,320 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:21:35,321 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 07:21:35,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:35,367 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 18 conjunts are in the unsatisfiable core [2022-12-14 07:21:35,368 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:21:35,403 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 07:21:35,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 07:21:35,530 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:35,530 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:21:35,650 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:35,650 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [105929131] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:21:35,650 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [394957949] [2022-12-14 07:21:35,651 INFO L159 IcfgInterpreter]: Started Sifa with 6 locations of interest [2022-12-14 07:21:35,651 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:21:35,652 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:21:35,652 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:21:35,652 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:21:35,686 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:35,688 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:35,689 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:21:35,737 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:35,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:35,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:35,865 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:21:36,331 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '683#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet15#1| 127) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet15#1|)) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:21:36,331 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:21:36,331 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:21:36,331 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-12-14 07:21:36,331 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [280549222] [2022-12-14 07:21:36,331 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:21:36,331 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-12-14 07:21:36,331 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:36,332 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-12-14 07:21:36,332 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=112, Invalid=350, Unknown=0, NotChecked=0, Total=462 [2022-12-14 07:21:36,332 INFO L87 Difference]: Start difference. First operand 27 states and 30 transitions. Second operand has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:36,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:36,540 INFO L93 Difference]: Finished difference Result 46 states and 51 transitions. [2022-12-14 07:21:36,540 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 07:21:36,540 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 07:21:36,541 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:36,541 INFO L225 Difference]: With dead ends: 46 [2022-12-14 07:21:36,541 INFO L226 Difference]: Without dead ends: 46 [2022-12-14 07:21:36,541 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 142 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=156, Invalid=444, Unknown=0, NotChecked=0, Total=600 [2022-12-14 07:21:36,542 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 288 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 104 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 104 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:36,542 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [288 Valid, 58 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 104 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 07:21:36,542 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-12-14 07:21:36,543 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 25. [2022-12-14 07:21:36,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 24 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:36,544 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 28 transitions. [2022-12-14 07:21:36,544 INFO L78 Accepts]: Start accepts. Automaton has 25 states and 28 transitions. Word has length 7 [2022-12-14 07:21:36,544 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:36,544 INFO L495 AbstractCegarLoop]: Abstraction has 25 states and 28 transitions. [2022-12-14 07:21:36,544 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:36,544 INFO L276 IsEmpty]: Start isEmpty. Operand 25 states and 28 transitions. [2022-12-14 07:21:36,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-12-14 07:21:36,545 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:36,545 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:21:36,549 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 07:21:36,746 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:36,746 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:36,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:36,747 INFO L85 PathProgramCache]: Analyzing trace with hash 380393185, now seen corresponding path program 1 times [2022-12-14 07:21:36,747 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:36,748 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [391978927] [2022-12-14 07:21:36,748 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:36,748 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:36,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:37,055 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:37,055 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:37,056 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [391978927] [2022-12-14 07:21:37,056 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [391978927] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:21:37,056 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1908852286] [2022-12-14 07:21:37,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:37,056 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:37,056 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:21:37,057 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:21:37,058 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 07:21:37,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:37,104 INFO L263 TraceCheckSpWp]: Trace formula consists of 81 conjuncts, 11 conjunts are in the unsatisfiable core [2022-12-14 07:21:37,105 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:21:37,206 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:37,206 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 07:21:37,206 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1908852286] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:37,206 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 07:21:37,207 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 10 [2022-12-14 07:21:37,207 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1490737343] [2022-12-14 07:21:37,207 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:37,207 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-12-14 07:21:37,207 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:37,208 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-14 07:21:37,208 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=99, Unknown=0, NotChecked=0, Total=132 [2022-12-14 07:21:37,208 INFO L87 Difference]: Start difference. First operand 25 states and 28 transitions. Second operand has 7 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:37,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:37,273 INFO L93 Difference]: Finished difference Result 25 states and 28 transitions. [2022-12-14 07:21:37,274 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-14 07:21:37,274 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-12-14 07:21:37,274 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:37,274 INFO L225 Difference]: With dead ends: 25 [2022-12-14 07:21:37,274 INFO L226 Difference]: Without dead ends: 25 [2022-12-14 07:21:37,274 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=47, Invalid=135, Unknown=0, NotChecked=0, Total=182 [2022-12-14 07:21:37,275 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 59 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 59 SdHoareTripleChecker+Valid, 9 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:37,275 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [59 Valid, 9 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:21:37,276 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25 states. [2022-12-14 07:21:37,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25 to 24. [2022-12-14 07:21:37,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 17 states have (on average 1.588235294117647) internal successors, (27), 23 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:37,278 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 27 transitions. [2022-12-14 07:21:37,278 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 27 transitions. Word has length 8 [2022-12-14 07:21:37,278 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:37,278 INFO L495 AbstractCegarLoop]: Abstraction has 24 states and 27 transitions. [2022-12-14 07:21:37,278 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:37,278 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 27 transitions. [2022-12-14 07:21:37,278 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-12-14 07:21:37,279 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:37,279 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:21:37,285 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 07:21:37,479 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:37,480 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:37,481 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:37,482 INFO L85 PathProgramCache]: Analyzing trace with hash -1092711654, now seen corresponding path program 1 times [2022-12-14 07:21:37,482 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:37,482 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [549056094] [2022-12-14 07:21:37,483 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:37,483 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:37,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:37,606 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:37,606 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:37,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [549056094] [2022-12-14 07:21:37,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [549056094] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:37,607 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:21:37,608 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 07:21:37,608 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [259126783] [2022-12-14 07:21:37,608 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:37,609 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 07:21:37,609 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:37,610 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 07:21:37,610 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 07:21:37,610 INFO L87 Difference]: Start difference. First operand 24 states and 27 transitions. Second operand has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:37,649 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:37,649 INFO L93 Difference]: Finished difference Result 23 states and 26 transitions. [2022-12-14 07:21:37,649 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 07:21:37,650 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-12-14 07:21:37,650 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:37,650 INFO L225 Difference]: With dead ends: 23 [2022-12-14 07:21:37,650 INFO L226 Difference]: Without dead ends: 23 [2022-12-14 07:21:37,650 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 07:21:37,651 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 29 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 11 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:37,651 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 11 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:21:37,652 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23 states. [2022-12-14 07:21:37,653 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23 to 23. [2022-12-14 07:21:37,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 17 states have (on average 1.5294117647058822) internal successors, (26), 22 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:37,654 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 26 transitions. [2022-12-14 07:21:37,654 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 26 transitions. Word has length 9 [2022-12-14 07:21:37,654 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:37,654 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 26 transitions. [2022-12-14 07:21:37,654 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:37,654 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 26 transitions. [2022-12-14 07:21:37,654 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-12-14 07:21:37,655 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:37,655 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:21:37,655 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-12-14 07:21:37,655 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:37,655 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:37,655 INFO L85 PathProgramCache]: Analyzing trace with hash -1092711653, now seen corresponding path program 1 times [2022-12-14 07:21:37,655 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:37,656 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1208114660] [2022-12-14 07:21:37,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:37,656 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:37,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:37,838 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:37,838 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:37,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1208114660] [2022-12-14 07:21:37,838 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1208114660] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:21:37,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1889140547] [2022-12-14 07:21:37,838 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:37,838 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:37,839 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:21:37,839 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:21:37,840 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-12-14 07:21:37,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:37,890 INFO L263 TraceCheckSpWp]: Trace formula consists of 109 conjuncts, 20 conjunts are in the unsatisfiable core [2022-12-14 07:21:37,891 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:21:37,904 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 07:21:37,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 07:21:37,953 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:37,953 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:21:37,998 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:37,998 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1889140547] provided 1 perfect and 1 imperfect interpolant sequences [2022-12-14 07:21:37,999 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-12-14 07:21:37,999 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6, 5] total 12 [2022-12-14 07:21:37,999 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [700383174] [2022-12-14 07:21:37,999 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:37,999 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 07:21:37,999 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:37,999 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 07:21:38,000 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=48, Invalid=108, Unknown=0, NotChecked=0, Total=156 [2022-12-14 07:21:38,000 INFO L87 Difference]: Start difference. First operand 23 states and 26 transitions. Second operand has 6 states, 5 states have (on average 1.8) internal successors, (9), 6 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:38,057 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:38,057 INFO L93 Difference]: Finished difference Result 26 states and 29 transitions. [2022-12-14 07:21:38,057 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 07:21:38,057 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.8) internal successors, (9), 6 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-12-14 07:21:38,057 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:38,058 INFO L225 Difference]: With dead ends: 26 [2022-12-14 07:21:38,058 INFO L226 Difference]: Without dead ends: 26 [2022-12-14 07:21:38,058 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 46 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=65, Invalid=145, Unknown=0, NotChecked=0, Total=210 [2022-12-14 07:21:38,059 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 43 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:38,059 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 17 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:21:38,059 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26 states. [2022-12-14 07:21:38,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26 to 24. [2022-12-14 07:21:38,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 18 states have (on average 1.5) internal successors, (27), 23 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:38,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 27 transitions. [2022-12-14 07:21:38,061 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 27 transitions. Word has length 9 [2022-12-14 07:21:38,061 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:38,061 INFO L495 AbstractCegarLoop]: Abstraction has 24 states and 27 transitions. [2022-12-14 07:21:38,061 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.8) internal successors, (9), 6 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:38,061 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 27 transitions. [2022-12-14 07:21:38,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 07:21:38,062 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:38,062 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:21:38,066 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-12-14 07:21:38,262 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:38,263 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:38,263 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:38,263 INFO L85 PathProgramCache]: Analyzing trace with hash -2123877708, now seen corresponding path program 1 times [2022-12-14 07:21:38,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:38,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [154763649] [2022-12-14 07:21:38,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:38,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:38,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:38,612 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:38,612 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:38,612 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [154763649] [2022-12-14 07:21:38,612 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [154763649] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:21:38,612 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1115653087] [2022-12-14 07:21:38,612 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:38,613 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:38,613 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:21:38,613 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:21:38,614 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-12-14 07:21:38,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:38,664 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 31 conjunts are in the unsatisfiable core [2022-12-14 07:21:38,665 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:21:38,758 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:38,798 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:21:38,800 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:21:38,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 07:21:38,814 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:38,814 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:21:38,836 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-12-14 07:21:38,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-12-14 07:21:38,989 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:38,989 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1115653087] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:21:38,989 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1604612527] [2022-12-14 07:21:38,991 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 07:21:38,991 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:21:38,991 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:21:38,991 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:21:38,991 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:21:39,024 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:39,026 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:39,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:21:39,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:21:39,129 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:39,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:39,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:39,248 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:21:39,248 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:21:39,313 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:21:40,240 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1100#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:21:40,240 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:21:40,240 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:21:40,240 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 9, 9] total 22 [2022-12-14 07:21:40,241 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1197219496] [2022-12-14 07:21:40,241 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:21:40,241 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-12-14 07:21:40,241 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:40,241 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-12-14 07:21:40,242 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=112, Invalid=818, Unknown=0, NotChecked=0, Total=930 [2022-12-14 07:21:40,242 INFO L87 Difference]: Start difference. First operand 24 states and 27 transitions. Second operand has 22 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 22 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:40,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:40,669 INFO L93 Difference]: Finished difference Result 54 states and 58 transitions. [2022-12-14 07:21:40,669 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-14 07:21:40,669 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 22 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 07:21:40,669 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:40,669 INFO L225 Difference]: With dead ends: 54 [2022-12-14 07:21:40,669 INFO L226 Difference]: Without dead ends: 54 [2022-12-14 07:21:40,670 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 278 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=257, Invalid=1303, Unknown=0, NotChecked=0, Total=1560 [2022-12-14 07:21:40,670 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 283 mSDsluCounter, 92 mSDsCounter, 0 mSdLazyCounter, 263 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 283 SdHoareTripleChecker+Valid, 98 SdHoareTripleChecker+Invalid, 265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 263 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:40,670 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [283 Valid, 98 Invalid, 265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 263 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 07:21:40,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2022-12-14 07:21:40,672 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 30. [2022-12-14 07:21:40,672 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 24 states have (on average 1.4166666666666667) internal successors, (34), 29 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:40,672 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 34 transitions. [2022-12-14 07:21:40,672 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 34 transitions. Word has length 11 [2022-12-14 07:21:40,672 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:40,672 INFO L495 AbstractCegarLoop]: Abstraction has 30 states and 34 transitions. [2022-12-14 07:21:40,672 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 1.3636363636363635) internal successors, (30), 22 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:40,672 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 34 transitions. [2022-12-14 07:21:40,673 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-12-14 07:21:40,673 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:40,673 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:21:40,677 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2022-12-14 07:21:40,874 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2022-12-14 07:21:40,875 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:40,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:40,876 INFO L85 PathProgramCache]: Analyzing trace with hash -1415700970, now seen corresponding path program 1 times [2022-12-14 07:21:40,877 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:40,877 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1351009524] [2022-12-14 07:21:40,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:40,878 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:40,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:40,948 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:21:40,948 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:40,948 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1351009524] [2022-12-14 07:21:40,948 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1351009524] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:40,948 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:21:40,948 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 07:21:40,949 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [981642706] [2022-12-14 07:21:40,949 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:40,949 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 07:21:40,949 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:40,949 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 07:21:40,950 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 07:21:40,950 INFO L87 Difference]: Start difference. First operand 30 states and 34 transitions. Second operand has 5 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:40,981 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:40,981 INFO L93 Difference]: Finished difference Result 29 states and 33 transitions. [2022-12-14 07:21:40,981 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 07:21:40,982 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-12-14 07:21:40,982 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:40,982 INFO L225 Difference]: With dead ends: 29 [2022-12-14 07:21:40,982 INFO L226 Difference]: Without dead ends: 29 [2022-12-14 07:21:40,982 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-14 07:21:40,982 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 33 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 39 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 39 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:40,983 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 17 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 39 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:21:40,983 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-12-14 07:21:40,984 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-12-14 07:21:40,984 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 24 states have (on average 1.375) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:40,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-12-14 07:21:40,984 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 12 [2022-12-14 07:21:40,984 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:40,984 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-12-14 07:21:40,985 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.0) internal successors, (12), 5 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:40,985 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-12-14 07:21:40,985 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-12-14 07:21:40,985 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:40,985 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:21:40,985 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-12-14 07:21:40,986 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:40,986 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:40,986 INFO L85 PathProgramCache]: Analyzing trace with hash -1415700969, now seen corresponding path program 1 times [2022-12-14 07:21:40,986 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:40,986 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [517147008] [2022-12-14 07:21:40,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:40,986 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:40,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:41,054 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:21:41,055 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:41,055 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [517147008] [2022-12-14 07:21:41,055 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [517147008] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:41,055 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:21:41,055 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-14 07:21:41,055 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [231161463] [2022-12-14 07:21:41,055 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:41,055 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 07:21:41,056 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:41,056 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 07:21:41,056 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-12-14 07:21:41,056 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 6 states, 5 states have (on average 2.4) internal successors, (12), 6 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:41,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:41,111 INFO L93 Difference]: Finished difference Result 44 states and 52 transitions. [2022-12-14 07:21:41,112 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 07:21:41,112 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.4) internal successors, (12), 6 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-12-14 07:21:41,112 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:41,112 INFO L225 Difference]: With dead ends: 44 [2022-12-14 07:21:41,112 INFO L226 Difference]: Without dead ends: 44 [2022-12-14 07:21:41,113 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2022-12-14 07:21:41,113 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 34 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 68 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:41,113 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 29 Invalid, 68 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:21:41,114 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44 states. [2022-12-14 07:21:41,114 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44 to 31. [2022-12-14 07:21:41,115 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 26 states have (on average 1.3461538461538463) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:41,115 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-12-14 07:21:41,115 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 12 [2022-12-14 07:21:41,115 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:41,115 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-12-14 07:21:41,115 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.4) internal successors, (12), 6 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:41,115 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-12-14 07:21:41,116 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-12-14 07:21:41,116 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:41,116 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:21:41,116 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-12-14 07:21:41,116 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:41,116 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:41,116 INFO L85 PathProgramCache]: Analyzing trace with hash 1621931090, now seen corresponding path program 2 times [2022-12-14 07:21:41,117 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:41,117 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [909805954] [2022-12-14 07:21:41,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:41,117 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:41,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:41,247 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:41,247 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:41,247 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [909805954] [2022-12-14 07:21:41,247 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [909805954] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:21:41,247 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [338025565] [2022-12-14 07:21:41,247 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:21:41,247 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:41,248 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:21:41,248 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:21:41,249 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-12-14 07:21:41,312 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-12-14 07:21:41,312 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:21:41,314 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 29 conjunts are in the unsatisfiable core [2022-12-14 07:21:41,315 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:21:41,326 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 07:21:41,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 07:21:41,344 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:41,377 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:21:41,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-12-14 07:21:41,430 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 07:21:41,430 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:21:41,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-12-14 07:21:41,501 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-12-14 07:21:41,554 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 07:21:41,554 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [338025565] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:21:41,554 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1371273127] [2022-12-14 07:21:41,555 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 07:21:41,555 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:21:41,556 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:21:41,556 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:21:41,556 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:21:41,592 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:41,594 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:41,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:21:41,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:21:41,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:41,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:41,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:41,812 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:21:41,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:21:41,912 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:21:42,595 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1451#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:21:42,596 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:21:42,596 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:21:42,596 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5, 5] total 15 [2022-12-14 07:21:42,596 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [812231081] [2022-12-14 07:21:42,596 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:21:42,596 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-12-14 07:21:42,596 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:42,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-12-14 07:21:42,597 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=109, Invalid=491, Unknown=0, NotChecked=0, Total=600 [2022-12-14 07:21:42,597 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 16 states, 15 states have (on average 2.2) internal successors, (33), 16 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:42,797 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:42,798 INFO L93 Difference]: Finished difference Result 58 states and 64 transitions. [2022-12-14 07:21:42,798 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-12-14 07:21:42,798 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 15 states have (on average 2.2) internal successors, (33), 16 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-12-14 07:21:42,798 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:42,798 INFO L225 Difference]: With dead ends: 58 [2022-12-14 07:21:42,798 INFO L226 Difference]: Without dead ends: 58 [2022-12-14 07:21:42,799 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 200 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=175, Invalid=755, Unknown=0, NotChecked=0, Total=930 [2022-12-14 07:21:42,799 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 90 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 186 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 191 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 186 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:42,800 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 69 Invalid, 191 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 186 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 07:21:42,800 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-12-14 07:21:42,801 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 33. [2022-12-14 07:21:42,802 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 28 states have (on average 1.3571428571428572) internal successors, (38), 32 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:42,802 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 38 transitions. [2022-12-14 07:21:42,802 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 38 transitions. Word has length 13 [2022-12-14 07:21:42,802 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:42,802 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 38 transitions. [2022-12-14 07:21:42,802 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 15 states have (on average 2.2) internal successors, (33), 16 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:42,802 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 38 transitions. [2022-12-14 07:21:42,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-12-14 07:21:42,803 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:42,803 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:21:42,807 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-12-14 07:21:43,003 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-12-14 07:21:43,005 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr12REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:43,006 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:43,006 INFO L85 PathProgramCache]: Analyzing trace with hash -937057050, now seen corresponding path program 1 times [2022-12-14 07:21:43,006 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:43,006 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1987449573] [2022-12-14 07:21:43,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:43,007 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:43,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:43,081 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:43,081 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:43,081 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1987449573] [2022-12-14 07:21:43,081 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1987449573] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:43,081 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:21:43,081 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 07:21:43,081 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2112917782] [2022-12-14 07:21:43,081 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:43,082 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 07:21:43,082 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:43,082 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 07:21:43,082 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 07:21:43,082 INFO L87 Difference]: Start difference. First operand 33 states and 38 transitions. Second operand has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:43,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:43,117 INFO L93 Difference]: Finished difference Result 32 states and 37 transitions. [2022-12-14 07:21:43,117 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 07:21:43,117 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-12-14 07:21:43,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:43,118 INFO L225 Difference]: With dead ends: 32 [2022-12-14 07:21:43,118 INFO L226 Difference]: Without dead ends: 32 [2022-12-14 07:21:43,118 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-14 07:21:43,118 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 26 mSDsluCounter, 5 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 45 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:43,118 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 13 Invalid, 45 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:21:43,119 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2022-12-14 07:21:43,120 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 32. [2022-12-14 07:21:43,120 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 28 states have (on average 1.3214285714285714) internal successors, (37), 31 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:43,120 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 37 transitions. [2022-12-14 07:21:43,120 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 37 transitions. Word has length 13 [2022-12-14 07:21:43,120 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:43,120 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 37 transitions. [2022-12-14 07:21:43,120 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:43,121 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 37 transitions. [2022-12-14 07:21:43,121 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-12-14 07:21:43,121 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:43,121 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:21:43,121 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-12-14 07:21:43,121 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:43,121 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:43,122 INFO L85 PathProgramCache]: Analyzing trace with hash -937057049, now seen corresponding path program 1 times [2022-12-14 07:21:43,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:43,122 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1282683811] [2022-12-14 07:21:43,122 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:43,122 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:43,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:43,234 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:43,234 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:43,234 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1282683811] [2022-12-14 07:21:43,234 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1282683811] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:21:43,234 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [548961532] [2022-12-14 07:21:43,234 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:43,234 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:43,234 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:21:43,235 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:21:43,236 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-12-14 07:21:43,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:43,289 INFO L263 TraceCheckSpWp]: Trace formula consists of 139 conjuncts, 20 conjunts are in the unsatisfiable core [2022-12-14 07:21:43,290 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:21:43,299 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 07:21:43,299 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 07:21:43,341 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:43,341 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:21:43,400 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:43,400 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [548961532] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:21:43,401 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1265899374] [2022-12-14 07:21:43,402 INFO L159 IcfgInterpreter]: Started Sifa with 13 locations of interest [2022-12-14 07:21:43,402 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:21:43,403 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:21:43,403 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:21:43,403 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:21:43,437 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:43,439 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:43,440 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:21:43,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:21:43,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:43,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:43,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:43,660 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:21:43,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:21:43,732 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:21:45,705 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1265899374] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:45,705 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:21:45,705 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [6, 6, 6] total 24 [2022-12-14 07:21:45,706 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [946171866] [2022-12-14 07:21:45,706 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:45,706 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-12-14 07:21:45,706 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:45,707 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-12-14 07:21:45,707 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=143, Invalid=457, Unknown=0, NotChecked=0, Total=600 [2022-12-14 07:21:45,707 INFO L87 Difference]: Start difference. First operand 32 states and 37 transitions. Second operand has 13 states, 12 states have (on average 1.0833333333333333) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:48,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:48,300 INFO L93 Difference]: Finished difference Result 68 states and 78 transitions. [2022-12-14 07:21:48,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 07:21:48,301 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.0833333333333333) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-12-14 07:21:48,301 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:48,301 INFO L225 Difference]: With dead ends: 68 [2022-12-14 07:21:48,301 INFO L226 Difference]: Without dead ends: 57 [2022-12-14 07:21:48,301 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 52 GetRequests, 19 SyntacticMatches, 1 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 229 ImplicationChecksByTransitivity, 4.3s TimeCoverageRelationStatistics Valid=297, Invalid=825, Unknown=0, NotChecked=0, Total=1122 [2022-12-14 07:21:48,302 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 64 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 192 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 38 SdHoareTripleChecker+Invalid, 197 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:48,302 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 38 Invalid, 197 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 192 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 07:21:48,302 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-12-14 07:21:48,303 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 51. [2022-12-14 07:21:48,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 47 states have (on average 1.3191489361702127) internal successors, (62), 50 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:48,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 62 transitions. [2022-12-14 07:21:48,304 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 62 transitions. Word has length 13 [2022-12-14 07:21:48,304 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:48,304 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 62 transitions. [2022-12-14 07:21:48,304 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.0833333333333333) internal successors, (13), 12 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:48,304 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 62 transitions. [2022-12-14 07:21:48,304 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-12-14 07:21:48,304 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:48,304 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:21:48,308 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2022-12-14 07:21:48,505 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-12-14 07:21:48,506 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:48,507 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:48,507 INFO L85 PathProgramCache]: Analyzing trace with hash 1395873721, now seen corresponding path program 1 times [2022-12-14 07:21:48,508 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:48,508 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [371944990] [2022-12-14 07:21:48,508 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:48,509 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:48,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:48,608 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:48,608 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:48,609 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [371944990] [2022-12-14 07:21:48,609 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [371944990] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:21:48,609 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1429707847] [2022-12-14 07:21:48,609 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:48,609 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:48,609 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:21:48,610 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:21:48,611 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-12-14 07:21:48,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:48,674 INFO L263 TraceCheckSpWp]: Trace formula consists of 152 conjuncts, 9 conjunts are in the unsatisfiable core [2022-12-14 07:21:48,675 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:21:48,748 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:48,749 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:21:48,826 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:48,826 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1429707847] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:21:48,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1802283229] [2022-12-14 07:21:48,827 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 07:21:48,827 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:21:48,828 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:21:48,828 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:21:48,828 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:21:48,854 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:48,856 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:48,857 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:21:48,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:21:48,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:48,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:49,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:49,031 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:49,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:49,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:49,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:49,149 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:21:49,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:21:49,221 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:21:50,958 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1802283229] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:50,958 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:21:50,959 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [8, 7, 7] total 30 [2022-12-14 07:21:50,959 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1973006415] [2022-12-14 07:21:50,959 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:50,959 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 07:21:50,959 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:50,959 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 07:21:50,960 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=138, Invalid=732, Unknown=0, NotChecked=0, Total=870 [2022-12-14 07:21:50,960 INFO L87 Difference]: Start difference. First operand 51 states and 62 transitions. Second operand has 14 states, 13 states have (on average 1.1538461538461537) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:51,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:51,063 INFO L93 Difference]: Finished difference Result 62 states and 75 transitions. [2022-12-14 07:21:51,063 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-14 07:21:51,063 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.1538461538461537) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-12-14 07:21:51,063 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:51,064 INFO L225 Difference]: With dead ends: 62 [2022-12-14 07:21:51,064 INFO L226 Difference]: Without dead ends: 62 [2022-12-14 07:21:51,064 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 22 SyntacticMatches, 1 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 264 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=138, Invalid=732, Unknown=0, NotChecked=0, Total=870 [2022-12-14 07:21:51,064 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 47 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 47 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 123 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:51,064 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [47 Valid, 17 Invalid, 123 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 07:21:51,065 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-12-14 07:21:51,066 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 54. [2022-12-14 07:21:51,066 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 50 states have (on average 1.3) internal successors, (65), 53 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:51,066 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 65 transitions. [2022-12-14 07:21:51,066 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 65 transitions. Word has length 15 [2022-12-14 07:21:51,066 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:51,066 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 65 transitions. [2022-12-14 07:21:51,066 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.1538461538461537) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:51,066 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 65 transitions. [2022-12-14 07:21:51,067 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-12-14 07:21:51,067 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:51,067 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:21:51,071 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2022-12-14 07:21:51,267 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-12-14 07:21:51,269 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:51,270 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:51,270 INFO L85 PathProgramCache]: Analyzing trace with hash -397350357, now seen corresponding path program 3 times [2022-12-14 07:21:51,270 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:51,271 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1848936984] [2022-12-14 07:21:51,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:51,271 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:51,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:51,551 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:51,551 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:51,551 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1848936984] [2022-12-14 07:21:51,551 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1848936984] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:21:51,551 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1909607620] [2022-12-14 07:21:51,551 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 07:21:51,551 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:51,552 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:21:51,552 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:21:51,553 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-12-14 07:21:51,613 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 07:21:51,614 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:21:51,615 INFO L263 TraceCheckSpWp]: Trace formula consists of 144 conjuncts, 37 conjunts are in the unsatisfiable core [2022-12-14 07:21:51,616 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:21:51,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:51,838 INFO L321 Elim1Store]: treesize reduction 9, result has 47.1 percent of original size [2022-12-14 07:21:51,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 28 treesize of output 18 [2022-12-14 07:21:51,858 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:51,858 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:21:51,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 25 [2022-12-14 07:21:51,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 23 [2022-12-14 07:21:52,119 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:52,120 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1909607620] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:21:52,120 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [335734042] [2022-12-14 07:21:52,121 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 07:21:52,121 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:21:52,121 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:21:52,121 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:21:52,121 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:21:52,151 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:52,153 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:52,154 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:21:52,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:21:52,236 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:52,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:52,299 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:52,343 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:21:52,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:21:52,402 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:21:53,506 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2214#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:21:53,506 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:21:53,506 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:21:53,506 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 12, 12] total 30 [2022-12-14 07:21:53,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1063234777] [2022-12-14 07:21:53,507 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:21:53,507 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-12-14 07:21:53,507 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:53,508 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-12-14 07:21:53,508 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=135, Invalid=1347, Unknown=0, NotChecked=0, Total=1482 [2022-12-14 07:21:53,508 INFO L87 Difference]: Start difference. First operand 54 states and 65 transitions. Second operand has 30 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 30 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:55,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:21:55,864 INFO L93 Difference]: Finished difference Result 150 states and 172 transitions. [2022-12-14 07:21:55,864 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-12-14 07:21:55,864 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 30 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-12-14 07:21:55,864 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:21:55,865 INFO L225 Difference]: With dead ends: 150 [2022-12-14 07:21:55,865 INFO L226 Difference]: Without dead ends: 150 [2022-12-14 07:21:55,866 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 62 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 696 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=609, Invalid=3423, Unknown=0, NotChecked=0, Total=4032 [2022-12-14 07:21:55,866 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 656 mSDsluCounter, 139 mSDsCounter, 0 mSdLazyCounter, 643 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 656 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 653 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 643 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 07:21:55,866 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [656 Valid, 150 Invalid, 653 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 643 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 07:21:55,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2022-12-14 07:21:55,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 74. [2022-12-14 07:21:55,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 70 states have (on average 1.2857142857142858) internal successors, (90), 73 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:55,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 90 transitions. [2022-12-14 07:21:55,868 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 90 transitions. Word has length 15 [2022-12-14 07:21:55,868 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:21:55,868 INFO L495 AbstractCegarLoop]: Abstraction has 74 states and 90 transitions. [2022-12-14 07:21:55,869 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 30 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:21:55,869 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 90 transitions. [2022-12-14 07:21:55,869 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 07:21:55,869 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:21:55,869 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:21:55,873 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2022-12-14 07:21:56,070 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:56,070 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:21:56,071 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:21:56,071 INFO L85 PathProgramCache]: Analyzing trace with hash 398351006, now seen corresponding path program 1 times [2022-12-14 07:21:56,072 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:21:56,072 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2128814247] [2022-12-14 07:21:56,072 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:56,073 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:21:56,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:56,222 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 07:21:56,222 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:21:56,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2128814247] [2022-12-14 07:21:56,222 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2128814247] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:21:56,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1493671661] [2022-12-14 07:21:56,222 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:21:56,222 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:21:56,222 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:21:56,223 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:21:56,224 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-12-14 07:21:56,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:21:56,292 INFO L263 TraceCheckSpWp]: Trace formula consists of 163 conjuncts, 24 conjunts are in the unsatisfiable core [2022-12-14 07:21:56,293 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:21:56,360 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:56,360 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:21:56,452 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 07:21:56,471 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:21:56,472 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1493671661] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:21:56,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [743529814] [2022-12-14 07:21:56,473 INFO L159 IcfgInterpreter]: Started Sifa with 13 locations of interest [2022-12-14 07:21:56,473 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:21:56,474 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:21:56,474 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:21:56,474 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:21:56,507 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:56,509 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:21:56,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:21:56,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:21:56,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:56,610 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:56,648 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:21:56,687 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:21:56,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:21:56,767 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:21:57,923 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [743529814] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:21:57,924 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:21:57,924 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [7, 8, 8] total 28 [2022-12-14 07:21:57,924 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2102444116] [2022-12-14 07:21:57,924 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:21:57,924 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-12-14 07:21:57,924 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:21:57,925 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-12-14 07:21:57,925 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=115, Invalid=697, Unknown=0, NotChecked=0, Total=812 [2022-12-14 07:21:57,925 INFO L87 Difference]: Start difference. First operand 74 states and 90 transitions. Second operand has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:00,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:00,622 INFO L93 Difference]: Finished difference Result 79 states and 92 transitions. [2022-12-14 07:22:00,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 07:22:00,622 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-12-14 07:22:00,623 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:00,623 INFO L225 Difference]: With dead ends: 79 [2022-12-14 07:22:00,623 INFO L226 Difference]: Without dead ends: 79 [2022-12-14 07:22:00,623 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 27 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 251 ImplicationChecksByTransitivity, 3.6s TimeCoverageRelationStatistics Valid=253, Invalid=1153, Unknown=0, NotChecked=0, Total=1406 [2022-12-14 07:22:00,623 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 41 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 247 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 68 SdHoareTripleChecker+Invalid, 248 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 247 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:00,624 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 68 Invalid, 248 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 247 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 07:22:00,624 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-12-14 07:22:00,625 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 75. [2022-12-14 07:22:00,625 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 71 states have (on average 1.2816901408450705) internal successors, (91), 74 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:00,625 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 91 transitions. [2022-12-14 07:22:00,625 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 91 transitions. Word has length 17 [2022-12-14 07:22:00,626 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:00,626 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 91 transitions. [2022-12-14 07:22:00,626 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:00,626 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 91 transitions. [2022-12-14 07:22:00,626 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-12-14 07:22:00,626 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:00,626 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:00,630 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2022-12-14 07:22:00,827 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:00,827 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:00,828 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:00,828 INFO L85 PathProgramCache]: Analyzing trace with hash 600698829, now seen corresponding path program 1 times [2022-12-14 07:22:00,829 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:00,829 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1021808034] [2022-12-14 07:22:00,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:00,830 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:00,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:00,945 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 07:22:00,945 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:00,945 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1021808034] [2022-12-14 07:22:00,945 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1021808034] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:22:00,945 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1680620807] [2022-12-14 07:22:00,946 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:00,946 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:00,946 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:22:00,947 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:22:00,947 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-12-14 07:22:01,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:01,017 INFO L263 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 9 conjunts are in the unsatisfiable core [2022-12-14 07:22:01,019 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:22:01,093 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 07:22:01,093 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:22:01,172 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 07:22:01,172 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1680620807] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:22:01,172 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1612170941] [2022-12-14 07:22:01,173 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:22:01,173 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:22:01,174 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:22:01,174 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:22:01,174 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:22:01,206 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:01,208 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:01,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:22:01,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:01,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:01,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:01,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:22:01,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:01,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:01,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:01,440 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:01,477 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:22:01,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:22:01,561 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:22:01,602 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-12-14 07:22:01,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-12-14 07:22:01,679 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:01,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:01,761 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:01,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:01,798 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:22:03,514 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2914#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:22:03,514 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:22:03,514 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:22:03,514 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 18 [2022-12-14 07:22:03,514 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [808641782] [2022-12-14 07:22:03,514 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:22:03,514 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-12-14 07:22:03,514 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:03,515 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-12-14 07:22:03,515 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=844, Unknown=0, NotChecked=0, Total=992 [2022-12-14 07:22:03,515 INFO L87 Difference]: Start difference. First operand 75 states and 91 transitions. Second operand has 18 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 18 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:03,660 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:03,660 INFO L93 Difference]: Finished difference Result 77 states and 89 transitions. [2022-12-14 07:22:03,661 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-12-14 07:22:03,661 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 18 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-12-14 07:22:03,661 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:03,661 INFO L225 Difference]: With dead ends: 77 [2022-12-14 07:22:03,661 INFO L226 Difference]: Without dead ends: 75 [2022-12-14 07:22:03,661 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 67 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 424 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=225, Invalid=1257, Unknown=0, NotChecked=0, Total=1482 [2022-12-14 07:22:03,662 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 74 mSDsluCounter, 164 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:03,662 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [74 Valid, 187 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 07:22:03,662 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-12-14 07:22:03,663 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 71. [2022-12-14 07:22:03,663 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 67 states have (on average 1.2835820895522387) internal successors, (86), 70 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:03,664 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 86 transitions. [2022-12-14 07:22:03,664 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 86 transitions. Word has length 18 [2022-12-14 07:22:03,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:03,664 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 86 transitions. [2022-12-14 07:22:03,664 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 18 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:03,664 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 86 transitions. [2022-12-14 07:22:03,664 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-12-14 07:22:03,664 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:03,664 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:03,669 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2022-12-14 07:22:03,865 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:03,866 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:03,867 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:03,867 INFO L85 PathProgramCache]: Analyzing trace with hash 741495920, now seen corresponding path program 1 times [2022-12-14 07:22:03,867 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:03,867 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1650197186] [2022-12-14 07:22:03,868 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:03,868 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:03,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:04,035 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:22:04,036 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:04,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1650197186] [2022-12-14 07:22:04,036 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1650197186] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:22:04,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1808346674] [2022-12-14 07:22:04,036 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:04,036 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:04,036 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:22:04,037 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:22:04,038 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-12-14 07:22:04,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:04,101 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 25 conjunts are in the unsatisfiable core [2022-12-14 07:22:04,103 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:22:04,111 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 07:22:04,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 07:22:04,161 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:22:04,162 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:22:04,248 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:22:04,248 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1808346674] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:22:04,248 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1779601705] [2022-12-14 07:22:04,250 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 07:22:04,250 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:22:04,250 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:22:04,250 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:22:04,250 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:22:04,276 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:04,278 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:04,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:22:04,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:22:04,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:04,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:04,408 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:04,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:04,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:04,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:04,531 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:04,566 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:22:04,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:22:04,633 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:22:05,558 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1779601705] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:22:05,559 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:22:05,559 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [8, 8, 8] total 32 [2022-12-14 07:22:05,559 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [89336416] [2022-12-14 07:22:05,559 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:22:05,559 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 07:22:05,559 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:05,559 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 07:22:05,559 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=886, Unknown=0, NotChecked=0, Total=1056 [2022-12-14 07:22:05,560 INFO L87 Difference]: Start difference. First operand 71 states and 86 transitions. Second operand has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:06,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:06,466 INFO L93 Difference]: Finished difference Result 72 states and 87 transitions. [2022-12-14 07:22:06,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-14 07:22:06,466 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-12-14 07:22:06,466 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:06,467 INFO L225 Difference]: With dead ends: 72 [2022-12-14 07:22:06,467 INFO L226 Difference]: Without dead ends: 72 [2022-12-14 07:22:06,467 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 383 ImplicationChecksByTransitivity, 1.8s TimeCoverageRelationStatistics Valid=245, Invalid=1161, Unknown=0, NotChecked=0, Total=1406 [2022-12-14 07:22:06,467 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 31 mSDsluCounter, 21 mSDsCounter, 0 mSdLazyCounter, 128 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 129 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:06,467 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 26 Invalid, 129 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 128 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 07:22:06,468 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2022-12-14 07:22:06,468 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 69. [2022-12-14 07:22:06,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 65 states have (on average 1.2923076923076924) internal successors, (84), 68 states have internal predecessors, (84), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:06,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 84 transitions. [2022-12-14 07:22:06,469 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 84 transitions. Word has length 19 [2022-12-14 07:22:06,469 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:06,469 INFO L495 AbstractCegarLoop]: Abstraction has 69 states and 84 transitions. [2022-12-14 07:22:06,469 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:06,469 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 84 transitions. [2022-12-14 07:22:06,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-12-14 07:22:06,470 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:06,470 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:06,474 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2022-12-14 07:22:06,670 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:06,671 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:06,672 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:06,672 INFO L85 PathProgramCache]: Analyzing trace with hash 502751458, now seen corresponding path program 4 times [2022-12-14 07:22:06,672 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:06,673 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [158882478] [2022-12-14 07:22:06,673 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:06,673 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:06,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:07,035 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:22:07,036 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:07,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [158882478] [2022-12-14 07:22:07,036 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [158882478] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:22:07,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [960070570] [2022-12-14 07:22:07,036 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 07:22:07,036 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:07,036 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:22:07,037 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:22:07,038 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-12-14 07:22:07,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:07,111 INFO L263 TraceCheckSpWp]: Trace formula consists of 168 conjuncts, 50 conjunts are in the unsatisfiable core [2022-12-14 07:22:07,113 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:22:07,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 07:22:07,495 INFO L321 Elim1Store]: treesize reduction 13, result has 48.0 percent of original size [2022-12-14 07:22:07,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 33 treesize of output 26 [2022-12-14 07:22:07,511 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 3 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:22:07,511 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:22:07,672 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-12-14 07:22:07,675 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 34 [2022-12-14 07:22:07,978 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 9 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:22:07,979 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [960070570] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:22:07,979 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1921319209] [2022-12-14 07:22:07,980 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 07:22:07,980 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:22:07,980 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:22:07,980 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:22:07,980 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:22:08,009 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:08,010 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:08,011 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:22:08,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:22:08,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:08,101 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:08,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:08,189 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:22:08,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:22:08,270 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:22:09,379 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3529#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:22:09,379 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:22:09,380 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:22:09,380 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 15, 15] total 39 [2022-12-14 07:22:09,380 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [450019934] [2022-12-14 07:22:09,380 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:22:09,380 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-12-14 07:22:09,380 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:09,380 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-12-14 07:22:09,381 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=198, Invalid=2058, Unknown=0, NotChecked=0, Total=2256 [2022-12-14 07:22:09,381 INFO L87 Difference]: Start difference. First operand 69 states and 84 transitions. Second operand has 39 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 39 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:12,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:12,258 INFO L93 Difference]: Finished difference Result 220 states and 252 transitions. [2022-12-14 07:22:12,259 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2022-12-14 07:22:12,259 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 39 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-12-14 07:22:12,259 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:12,259 INFO L225 Difference]: With dead ends: 220 [2022-12-14 07:22:12,259 INFO L226 Difference]: Without dead ends: 220 [2022-12-14 07:22:12,260 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 20 SyntacticMatches, 1 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1303 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=985, Invalid=5657, Unknown=0, NotChecked=0, Total=6642 [2022-12-14 07:22:12,261 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 1099 mSDsluCounter, 241 mSDsCounter, 0 mSdLazyCounter, 1102 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1099 SdHoareTripleChecker+Valid, 254 SdHoareTripleChecker+Invalid, 1113 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 1102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:12,261 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1099 Valid, 254 Invalid, 1113 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 1102 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-12-14 07:22:12,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220 states. [2022-12-14 07:22:12,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220 to 87. [2022-12-14 07:22:12,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 83 states have (on average 1.3012048192771084) internal successors, (108), 86 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:12,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 108 transitions. [2022-12-14 07:22:12,264 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 108 transitions. Word has length 19 [2022-12-14 07:22:12,264 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:12,264 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 108 transitions. [2022-12-14 07:22:12,265 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 39 states have (on average 1.3846153846153846) internal successors, (54), 39 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:12,265 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 108 transitions. [2022-12-14 07:22:12,265 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-12-14 07:22:12,265 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:12,265 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:12,270 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-12-14 07:22:12,466 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-12-14 07:22:12,467 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:12,468 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:12,469 INFO L85 PathProgramCache]: Analyzing trace with hash 146701679, now seen corresponding path program 2 times [2022-12-14 07:22:12,469 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:12,470 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [448975643] [2022-12-14 07:22:12,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:12,470 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:12,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:12,631 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 07:22:12,631 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:12,631 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [448975643] [2022-12-14 07:22:12,631 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [448975643] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:22:12,631 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1474813763] [2022-12-14 07:22:12,632 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:22:12,632 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:12,632 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:22:12,633 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:22:12,633 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-12-14 07:22:12,706 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-12-14 07:22:12,706 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:22:12,707 INFO L263 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 24 conjunts are in the unsatisfiable core [2022-12-14 07:22:12,709 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:22:12,774 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 07:22:12,774 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:22:12,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 07:22:12,863 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 07:22:12,863 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1474813763] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:22:12,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [324585017] [2022-12-14 07:22:12,865 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:22:12,865 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:22:12,865 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:22:12,865 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:22:12,865 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:22:12,891 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:12,893 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:12,893 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:22:12,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:12,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:12,976 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:13,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:13,060 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:13,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:13,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:13,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:13,177 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:22:13,177 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:22:13,255 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:22:13,288 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-12-14 07:22:13,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-12-14 07:22:13,375 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:13,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:13,457 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:13,457 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:13,496 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:22:15,260 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4047#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:22:15,260 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:22:15,260 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:22:15,260 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8, 8] total 19 [2022-12-14 07:22:15,260 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1126527174] [2022-12-14 07:22:15,260 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:22:15,261 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-12-14 07:22:15,261 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:15,261 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-12-14 07:22:15,261 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=145, Invalid=977, Unknown=0, NotChecked=0, Total=1122 [2022-12-14 07:22:15,261 INFO L87 Difference]: Start difference. First operand 87 states and 108 transitions. Second operand has 20 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 20 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:15,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:15,482 INFO L93 Difference]: Finished difference Result 100 states and 119 transitions. [2022-12-14 07:22:15,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-14 07:22:15,482 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 20 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-12-14 07:22:15,482 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:15,484 INFO L225 Difference]: With dead ends: 100 [2022-12-14 07:22:15,484 INFO L226 Difference]: Without dead ends: 100 [2022-12-14 07:22:15,485 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 33 SyntacticMatches, 2 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 410 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=235, Invalid=1487, Unknown=0, NotChecked=0, Total=1722 [2022-12-14 07:22:15,485 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 203 mSDsluCounter, 87 mSDsCounter, 0 mSdLazyCounter, 289 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 203 SdHoareTripleChecker+Valid, 105 SdHoareTripleChecker+Invalid, 293 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 289 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:15,485 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [203 Valid, 105 Invalid, 293 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 289 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 07:22:15,485 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2022-12-14 07:22:15,487 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 90. [2022-12-14 07:22:15,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 86 states have (on average 1.302325581395349) internal successors, (112), 89 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:15,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 112 transitions. [2022-12-14 07:22:15,487 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 112 transitions. Word has length 20 [2022-12-14 07:22:15,487 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:15,487 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 112 transitions. [2022-12-14 07:22:15,488 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 20 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:15,488 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 112 transitions. [2022-12-14 07:22:15,488 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-12-14 07:22:15,488 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:15,488 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:15,492 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2022-12-14 07:22:15,689 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2022-12-14 07:22:15,690 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:15,691 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:15,691 INFO L85 PathProgramCache]: Analyzing trace with hash 146700517, now seen corresponding path program 1 times [2022-12-14 07:22:15,691 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:15,691 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1756610449] [2022-12-14 07:22:15,692 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:15,692 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:15,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:15,805 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-12-14 07:22:15,805 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:15,805 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1756610449] [2022-12-14 07:22:15,806 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1756610449] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:22:15,806 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:22:15,806 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 07:22:15,806 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [132713981] [2022-12-14 07:22:15,806 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:22:15,806 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 07:22:15,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:15,807 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 07:22:15,807 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 07:22:15,807 INFO L87 Difference]: Start difference. First operand 90 states and 112 transitions. Second operand has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:15,826 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:15,826 INFO L93 Difference]: Finished difference Result 89 states and 111 transitions. [2022-12-14 07:22:15,827 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 07:22:15,827 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-12-14 07:22:15,827 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:15,827 INFO L225 Difference]: With dead ends: 89 [2022-12-14 07:22:15,827 INFO L226 Difference]: Without dead ends: 87 [2022-12-14 07:22:15,827 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 07:22:15,828 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 5 mSDsluCounter, 10 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:15,828 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5 Valid, 20 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:22:15,829 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2022-12-14 07:22:15,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 83. [2022-12-14 07:22:15,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 80 states have (on average 1.275) internal successors, (102), 82 states have internal predecessors, (102), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:15,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 102 transitions. [2022-12-14 07:22:15,831 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 102 transitions. Word has length 20 [2022-12-14 07:22:15,831 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:15,831 INFO L495 AbstractCegarLoop]: Abstraction has 83 states and 102 transitions. [2022-12-14 07:22:15,831 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:15,831 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 102 transitions. [2022-12-14 07:22:15,831 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-12-14 07:22:15,831 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:15,832 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:15,832 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24 [2022-12-14 07:22:15,832 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:15,832 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:15,832 INFO L85 PathProgramCache]: Analyzing trace with hash 280217288, now seen corresponding path program 1 times [2022-12-14 07:22:15,832 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:15,832 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1996254831] [2022-12-14 07:22:15,832 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:15,832 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:15,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:16,025 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-12-14 07:22:16,025 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:16,025 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1996254831] [2022-12-14 07:22:16,025 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1996254831] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 07:22:16,025 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 07:22:16,025 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-14 07:22:16,025 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2132967193] [2022-12-14 07:22:16,026 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 07:22:16,026 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-12-14 07:22:16,026 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:16,026 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-14 07:22:16,026 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-12-14 07:22:16,026 INFO L87 Difference]: Start difference. First operand 83 states and 102 transitions. Second operand has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:16,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:16,148 INFO L93 Difference]: Finished difference Result 86 states and 103 transitions. [2022-12-14 07:22:16,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 07:22:16,149 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-12-14 07:22:16,149 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:16,149 INFO L225 Difference]: With dead ends: 86 [2022-12-14 07:22:16,149 INFO L226 Difference]: Without dead ends: 70 [2022-12-14 07:22:16,150 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=90, Unknown=0, NotChecked=0, Total=132 [2022-12-14 07:22:16,150 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 27 mSDsluCounter, 43 mSDsCounter, 0 mSdLazyCounter, 76 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 55 SdHoareTripleChecker+Invalid, 79 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 76 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:16,150 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 55 Invalid, 79 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 76 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 07:22:16,151 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-12-14 07:22:16,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 68. [2022-12-14 07:22:16,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 65 states have (on average 1.2461538461538462) internal successors, (81), 67 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:16,152 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 81 transitions. [2022-12-14 07:22:16,152 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 81 transitions. Word has length 20 [2022-12-14 07:22:16,152 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:16,152 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 81 transitions. [2022-12-14 07:22:16,153 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:16,153 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 81 transitions. [2022-12-14 07:22:16,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-12-14 07:22:16,153 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:16,153 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:16,153 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable25 [2022-12-14 07:22:16,153 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:16,154 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:16,154 INFO L85 PathProgramCache]: Analyzing trace with hash 252784783, now seen corresponding path program 1 times [2022-12-14 07:22:16,154 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:16,154 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1699118732] [2022-12-14 07:22:16,154 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:16,154 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:16,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:16,325 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:22:16,325 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:16,325 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1699118732] [2022-12-14 07:22:16,325 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1699118732] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:22:16,325 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [562046964] [2022-12-14 07:22:16,325 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:16,325 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:16,325 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:22:16,326 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:22:16,327 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-12-14 07:22:16,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:16,405 INFO L263 TraceCheckSpWp]: Trace formula consists of 196 conjuncts, 28 conjunts are in the unsatisfiable core [2022-12-14 07:22:16,406 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:22:16,414 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 07:22:16,414 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 07:22:16,490 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:22:16,490 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:22:16,611 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:22:16,611 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [562046964] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:22:16,611 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [945034904] [2022-12-14 07:22:16,613 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:22:16,613 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:22:16,613 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:22:16,613 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:22:16,613 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:22:16,641 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:16,644 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:16,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:22:16,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:22:16,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:16,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:16,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:16,808 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:16,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:16,855 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:16,885 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:16,924 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:22:16,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:22:17,014 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:22:17,047 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-12-14 07:22:17,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-12-14 07:22:17,135 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:17,136 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:17,212 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:17,212 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:17,262 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:22:18,967 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4756#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:22:18,967 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:22:18,967 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:22:18,967 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 8] total 22 [2022-12-14 07:22:18,967 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1822892797] [2022-12-14 07:22:18,967 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:22:18,967 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-12-14 07:22:18,968 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:18,968 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-12-14 07:22:18,969 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=1145, Unknown=0, NotChecked=0, Total=1332 [2022-12-14 07:22:18,969 INFO L87 Difference]: Start difference. First operand 68 states and 81 transitions. Second operand has 23 states, 22 states have (on average 2.4545454545454546) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:19,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:19,234 INFO L93 Difference]: Finished difference Result 84 states and 98 transitions. [2022-12-14 07:22:19,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-14 07:22:19,234 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 22 states have (on average 2.4545454545454546) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-12-14 07:22:19,234 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:19,235 INFO L225 Difference]: With dead ends: 84 [2022-12-14 07:22:19,235 INFO L226 Difference]: Without dead ends: 84 [2022-12-14 07:22:19,236 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 517 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=302, Invalid=1590, Unknown=0, NotChecked=0, Total=1892 [2022-12-14 07:22:19,236 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 194 mSDsluCounter, 27 mSDsCounter, 0 mSdLazyCounter, 178 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 194 SdHoareTripleChecker+Valid, 33 SdHoareTripleChecker+Invalid, 187 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 178 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:19,237 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [194 Valid, 33 Invalid, 187 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 178 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 07:22:19,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2022-12-14 07:22:19,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 77. [2022-12-14 07:22:19,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 74 states have (on average 1.2297297297297298) internal successors, (91), 76 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:19,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 91 transitions. [2022-12-14 07:22:19,239 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 91 transitions. Word has length 21 [2022-12-14 07:22:19,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:19,239 INFO L495 AbstractCegarLoop]: Abstraction has 77 states and 91 transitions. [2022-12-14 07:22:19,239 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 22 states have (on average 2.4545454545454546) internal successors, (54), 23 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:19,239 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 91 transitions. [2022-12-14 07:22:19,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-12-14 07:22:19,240 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:19,240 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:19,244 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-12-14 07:22:19,440 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-12-14 07:22:19,440 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:19,441 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:19,441 INFO L85 PathProgramCache]: Analyzing trace with hash 1763955496, now seen corresponding path program 1 times [2022-12-14 07:22:19,441 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:19,441 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1407137157] [2022-12-14 07:22:19,441 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:19,441 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:19,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:19,898 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:22:19,899 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:19,899 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1407137157] [2022-12-14 07:22:19,899 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1407137157] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:22:19,899 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [267427598] [2022-12-14 07:22:19,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:19,899 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:19,899 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:22:19,900 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:22:19,901 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-12-14 07:22:19,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:19,961 INFO L263 TraceCheckSpWp]: Trace formula consists of 207 conjuncts, 31 conjunts are in the unsatisfiable core [2022-12-14 07:22:19,962 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:22:20,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:20,094 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:22:20,095 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:22:20,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 07:22:20,110 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-14 07:22:20,110 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:22:20,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-12-14 07:22:20,129 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-12-14 07:22:20,278 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 3 proven. 4 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-14 07:22:20,278 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [267427598] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:22:20,279 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [453373305] [2022-12-14 07:22:20,279 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:22:20,279 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:22:20,280 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:22:20,280 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:22:20,280 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:22:20,309 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:20,311 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:20,312 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:22:20,344 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:22:20,383 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:20,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:20,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:20,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:20,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:20,540 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:20,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:20,614 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:22:20,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:22:20,721 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:22:20,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:22:20,783 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:20,783 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:20,873 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:20,873 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:20,913 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:22:22,789 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5105#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:22:22,789 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:22:22,789 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:22:22,789 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 10, 10] total 28 [2022-12-14 07:22:22,789 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1903355373] [2022-12-14 07:22:22,789 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:22:22,789 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-12-14 07:22:22,789 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:22,790 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-12-14 07:22:22,790 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=170, Invalid=1552, Unknown=0, NotChecked=0, Total=1722 [2022-12-14 07:22:22,790 INFO L87 Difference]: Start difference. First operand 77 states and 91 transitions. Second operand has 28 states, 28 states have (on average 1.9642857142857142) internal successors, (55), 28 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:23,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:23,928 INFO L93 Difference]: Finished difference Result 98 states and 110 transitions. [2022-12-14 07:22:23,928 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-14 07:22:23,929 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 1.9642857142857142) internal successors, (55), 28 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-12-14 07:22:23,929 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:23,929 INFO L225 Difference]: With dead ends: 98 [2022-12-14 07:22:23,929 INFO L226 Difference]: Without dead ends: 98 [2022-12-14 07:22:23,930 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 94 GetRequests, 39 SyntacticMatches, 0 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 669 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=418, Invalid=2774, Unknown=0, NotChecked=0, Total=3192 [2022-12-14 07:22:23,930 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 268 mSDsluCounter, 62 mSDsCounter, 0 mSdLazyCounter, 475 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 268 SdHoareTripleChecker+Valid, 68 SdHoareTripleChecker+Invalid, 483 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 475 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:23,930 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [268 Valid, 68 Invalid, 483 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 475 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 07:22:23,930 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2022-12-14 07:22:23,931 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 87. [2022-12-14 07:22:23,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 87 states, 84 states have (on average 1.2023809523809523) internal successors, (101), 86 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:23,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 101 transitions. [2022-12-14 07:22:23,932 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 101 transitions. Word has length 23 [2022-12-14 07:22:23,932 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:23,932 INFO L495 AbstractCegarLoop]: Abstraction has 87 states and 101 transitions. [2022-12-14 07:22:23,932 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 1.9642857142857142) internal successors, (55), 28 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:23,932 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 101 transitions. [2022-12-14 07:22:23,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-12-14 07:22:23,932 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:23,932 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:23,936 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Ended with exit code 0 [2022-12-14 07:22:24,133 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-12-14 07:22:24,134 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:24,134 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:24,134 INFO L85 PathProgramCache]: Analyzing trace with hash 991971033, now seen corresponding path program 5 times [2022-12-14 07:22:24,135 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:24,135 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [492520797] [2022-12-14 07:22:24,135 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:24,136 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:24,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:24,473 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:22:24,473 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:24,473 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [492520797] [2022-12-14 07:22:24,473 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [492520797] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:22:24,473 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1746147303] [2022-12-14 07:22:24,473 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:22:24,474 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:24,474 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:22:24,474 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:22:24,475 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-12-14 07:22:24,573 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 07:22:24,574 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:22:24,575 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 61 conjunts are in the unsatisfiable core [2022-12-14 07:22:24,577 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:22:24,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 07:22:25,006 INFO L321 Elim1Store]: treesize reduction 17, result has 48.5 percent of original size [2022-12-14 07:22:25,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 41 treesize of output 34 [2022-12-14 07:22:25,026 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:22:25,026 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:22:25,198 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 51 [2022-12-14 07:22:25,202 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 6 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 45 [2022-12-14 07:22:25,634 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 16 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:22:25,635 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1746147303] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:22:25,635 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1153265328] [2022-12-14 07:22:25,635 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 07:22:25,636 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:22:25,636 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:22:25,636 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:22:25,636 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:22:25,661 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:25,663 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:25,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:22:25,699 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:25,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:25,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:25,788 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:25,832 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:22:25,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:22:25,887 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:22:26,880 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5512#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:22:26,880 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:22:26,880 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:22:26,880 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 18, 18] total 46 [2022-12-14 07:22:26,881 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1189392302] [2022-12-14 07:22:26,881 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:22:26,881 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-12-14 07:22:26,881 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:26,881 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-12-14 07:22:26,882 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=234, Invalid=2736, Unknown=0, NotChecked=0, Total=2970 [2022-12-14 07:22:26,882 INFO L87 Difference]: Start difference. First operand 87 states and 101 transitions. Second operand has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:31,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:31,437 INFO L93 Difference]: Finished difference Result 223 states and 243 transitions. [2022-12-14 07:22:31,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-12-14 07:22:31,438 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-12-14 07:22:31,438 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:31,438 INFO L225 Difference]: With dead ends: 223 [2022-12-14 07:22:31,438 INFO L226 Difference]: Without dead ends: 213 [2022-12-14 07:22:31,440 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 129 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 101 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2237 ImplicationChecksByTransitivity, 5.6s TimeCoverageRelationStatistics Valid=1421, Invalid=9085, Unknown=0, NotChecked=0, Total=10506 [2022-12-14 07:22:31,440 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 843 mSDsluCounter, 154 mSDsCounter, 0 mSdLazyCounter, 1559 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 843 SdHoareTripleChecker+Valid, 162 SdHoareTripleChecker+Invalid, 1580 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 1559 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:31,440 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [843 Valid, 162 Invalid, 1580 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 1559 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-14 07:22:31,440 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 213 states. [2022-12-14 07:22:31,442 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 213 to 101. [2022-12-14 07:22:31,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 98 states have (on average 1.2142857142857142) internal successors, (119), 100 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:31,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 119 transitions. [2022-12-14 07:22:31,442 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 119 transitions. Word has length 23 [2022-12-14 07:22:31,442 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:31,442 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 119 transitions. [2022-12-14 07:22:31,442 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:31,442 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 119 transitions. [2022-12-14 07:22:31,443 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-12-14 07:22:31,443 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:31,443 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:31,447 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2022-12-14 07:22:31,643 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-12-14 07:22:31,644 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:31,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:31,645 INFO L85 PathProgramCache]: Analyzing trace with hash 1633836855, now seen corresponding path program 3 times [2022-12-14 07:22:31,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:31,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [568252964] [2022-12-14 07:22:31,646 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:31,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:31,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:32,128 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 6 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 07:22:32,128 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:32,128 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [568252964] [2022-12-14 07:22:32,128 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [568252964] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:22:32,129 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [384467938] [2022-12-14 07:22:32,129 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 07:22:32,129 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:32,129 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:22:32,129 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:22:32,130 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-12-14 07:22:32,216 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 07:22:32,216 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:22:32,218 INFO L263 TraceCheckSpWp]: Trace formula consists of 221 conjuncts, 50 conjunts are in the unsatisfiable core [2022-12-14 07:22:32,220 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:22:32,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 07:22:32,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:32,319 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 07:22:32,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 07:22:32,469 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 07:22:32,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 07:22:32,471 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 07:22:32,472 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:22:32,506 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_616 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_616) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-12-14 07:22:32,548 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_616 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_616) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0)) is different from false [2022-12-14 07:22:32,551 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:22:32,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 07:22:32,554 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:22:32,554 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 07:22:32,674 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 4 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 2 not checked. [2022-12-14 07:22:32,674 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [384467938] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:22:32,674 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1250047997] [2022-12-14 07:22:32,675 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:22:32,675 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:22:32,675 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:22:32,675 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:22:32,675 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:22:32,699 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:32,701 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:32,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:22:32,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:32,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:32,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:32,826 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:22:32,861 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:32,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:32,908 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:32,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:32,976 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:22:32,977 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:22:33,056 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:22:33,058 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:22:33,095 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-12-14 07:22:33,095 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-12-14 07:22:33,185 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:33,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:33,264 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:33,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:33,304 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:22:35,306 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6111#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:22:35,306 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:22:35,306 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:22:35,307 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 12, 12] total 32 [2022-12-14 07:22:35,307 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1805297849] [2022-12-14 07:22:35,307 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:22:35,307 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-12-14 07:22:35,311 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:35,311 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-12-14 07:22:35,311 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=157, Invalid=1736, Unknown=7, NotChecked=170, Total=2070 [2022-12-14 07:22:35,312 INFO L87 Difference]: Start difference. First operand 101 states and 119 transitions. Second operand has 32 states, 32 states have (on average 1.625) internal successors, (52), 32 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:36,024 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:36,024 INFO L93 Difference]: Finished difference Result 172 states and 201 transitions. [2022-12-14 07:22:36,024 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 07:22:36,024 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.625) internal successors, (52), 32 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-12-14 07:22:36,025 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:36,025 INFO L225 Difference]: With dead ends: 172 [2022-12-14 07:22:36,025 INFO L226 Difference]: Without dead ends: 152 [2022-12-14 07:22:36,026 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 40 SyntacticMatches, 2 SemanticMatches, 54 ConstructedPredicates, 2 IntricatePredicates, 2 DeprecatedPredicates, 760 ImplicationChecksByTransitivity, 2.9s TimeCoverageRelationStatistics Valid=267, Invalid=2594, Unknown=9, NotChecked=210, Total=3080 [2022-12-14 07:22:36,026 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 72 mSDsluCounter, 179 mSDsCounter, 0 mSdLazyCounter, 476 mSolverCounterSat, 13 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 561 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 476 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 67 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:36,026 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [72 Valid, 188 Invalid, 561 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 476 Invalid, 5 Unknown, 67 Unchecked, 0.3s Time] [2022-12-14 07:22:36,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152 states. [2022-12-14 07:22:36,028 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152 to 148. [2022-12-14 07:22:36,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 145 states have (on average 1.2206896551724138) internal successors, (177), 147 states have internal predecessors, (177), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:36,028 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 177 transitions. [2022-12-14 07:22:36,028 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 177 transitions. Word has length 24 [2022-12-14 07:22:36,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:36,028 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 177 transitions. [2022-12-14 07:22:36,028 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.625) internal successors, (52), 32 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:36,028 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 177 transitions. [2022-12-14 07:22:36,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-14 07:22:36,029 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:36,029 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:36,033 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Ended with exit code 0 [2022-12-14 07:22:36,229 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:36,230 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:36,231 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:36,231 INFO L85 PathProgramCache]: Analyzing trace with hash -906724666, now seen corresponding path program 2 times [2022-12-14 07:22:36,231 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:36,232 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1223732689] [2022-12-14 07:22:36,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:36,232 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:36,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:36,431 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 2 proven. 12 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:22:36,431 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:36,431 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1223732689] [2022-12-14 07:22:36,432 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1223732689] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:22:36,432 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [392729736] [2022-12-14 07:22:36,432 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:22:36,432 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:36,432 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:22:36,433 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:22:36,434 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-12-14 07:22:36,498 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-12-14 07:22:36,498 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:22:36,499 INFO L263 TraceCheckSpWp]: Trace formula consists of 194 conjuncts, 45 conjunts are in the unsatisfiable core [2022-12-14 07:22:36,501 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:22:36,593 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:36,640 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:22:36,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-12-14 07:22:36,749 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 3 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-12-14 07:22:36,749 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:22:36,866 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-12-14 07:22:36,870 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-12-14 07:22:37,001 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 45 treesize of output 37 [2022-12-14 07:22:37,214 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 8 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-12-14 07:22:37,214 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [392729736] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:22:37,214 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [177962554] [2022-12-14 07:22:37,215 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:22:37,215 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:22:37,215 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:22:37,215 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:22:37,215 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:22:37,243 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:37,246 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:37,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:22:37,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:22:37,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:37,334 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:37,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:37,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:37,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:37,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:37,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:37,545 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:22:37,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:22:37,651 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:22:37,651 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:22:37,716 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:37,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:37,817 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:37,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:37,862 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:22:39,964 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6638#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:22:39,965 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:22:39,965 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:22:39,965 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 28 [2022-12-14 07:22:39,965 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2001310700] [2022-12-14 07:22:39,965 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:22:39,965 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-12-14 07:22:39,965 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:39,966 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-12-14 07:22:39,966 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=174, Invalid=1632, Unknown=0, NotChecked=0, Total=1806 [2022-12-14 07:22:39,966 INFO L87 Difference]: Start difference. First operand 148 states and 177 transitions. Second operand has 29 states, 28 states have (on average 2.392857142857143) internal successors, (67), 29 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:41,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:41,656 INFO L93 Difference]: Finished difference Result 191 states and 220 transitions. [2022-12-14 07:22:41,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-12-14 07:22:41,657 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 28 states have (on average 2.392857142857143) internal successors, (67), 29 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-12-14 07:22:41,657 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:41,657 INFO L225 Difference]: With dead ends: 191 [2022-12-14 07:22:41,657 INFO L226 Difference]: Without dead ends: 184 [2022-12-14 07:22:41,658 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 115 GetRequests, 42 SyntacticMatches, 0 SemanticMatches, 73 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1153 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=855, Invalid=4695, Unknown=0, NotChecked=0, Total=5550 [2022-12-14 07:22:41,658 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 274 mSDsluCounter, 51 mSDsCounter, 0 mSdLazyCounter, 725 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 274 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 740 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 725 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:41,658 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [274 Valid, 59 Invalid, 740 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 725 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 07:22:41,658 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2022-12-14 07:22:41,660 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 152. [2022-12-14 07:22:41,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 149 states have (on average 1.2080536912751678) internal successors, (180), 151 states have internal predecessors, (180), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:41,660 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 180 transitions. [2022-12-14 07:22:41,660 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 180 transitions. Word has length 25 [2022-12-14 07:22:41,660 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:41,660 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 180 transitions. [2022-12-14 07:22:41,660 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 28 states have (on average 2.392857142857143) internal successors, (67), 29 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:41,660 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 180 transitions. [2022-12-14 07:22:41,661 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-14 07:22:41,661 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:41,661 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:41,665 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2022-12-14 07:22:41,861 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:41,862 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:41,863 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:41,863 INFO L85 PathProgramCache]: Analyzing trace with hash 820712741, now seen corresponding path program 4 times [2022-12-14 07:22:41,863 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:41,863 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [397133904] [2022-12-14 07:22:41,864 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:41,864 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:41,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:42,004 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 07:22:42,004 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:42,004 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [397133904] [2022-12-14 07:22:42,004 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [397133904] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:22:42,004 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1201713395] [2022-12-14 07:22:42,004 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 07:22:42,004 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:42,004 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:22:42,005 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:22:42,006 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-12-14 07:22:42,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:42,070 INFO L263 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 11 conjunts are in the unsatisfiable core [2022-12-14 07:22:42,071 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:22:42,188 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 7 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 07:22:42,188 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:22:42,297 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2022-12-14 07:22:42,298 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1201713395] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:22:42,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1548184391] [2022-12-14 07:22:42,298 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:22:42,298 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:22:42,299 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:22:42,299 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:22:42,299 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:22:42,323 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:42,325 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:42,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:22:42,357 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:42,399 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:42,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:42,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:42,499 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:42,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:42,551 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:42,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:42,615 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:22:42,615 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:22:42,695 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:22:42,736 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-12-14 07:22:42,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-12-14 07:22:42,822 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:42,822 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:42,890 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:42,890 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:42,927 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:22:44,758 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7232#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:22:44,758 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:22:44,758 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:22:44,758 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 9] total 23 [2022-12-14 07:22:44,758 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1080252329] [2022-12-14 07:22:44,758 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:22:44,758 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-12-14 07:22:44,759 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:44,759 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-12-14 07:22:44,759 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=189, Invalid=1143, Unknown=0, NotChecked=0, Total=1332 [2022-12-14 07:22:44,759 INFO L87 Difference]: Start difference. First operand 152 states and 180 transitions. Second operand has 23 states, 23 states have (on average 2.0434782608695654) internal successors, (47), 23 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:45,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:45,003 INFO L93 Difference]: Finished difference Result 153 states and 177 transitions. [2022-12-14 07:22:45,003 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 07:22:45,003 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 2.0434782608695654) internal successors, (47), 23 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-12-14 07:22:45,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:45,004 INFO L225 Difference]: With dead ends: 153 [2022-12-14 07:22:45,004 INFO L226 Difference]: Without dead ends: 151 [2022-12-14 07:22:45,004 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 95 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 631 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=330, Invalid=1832, Unknown=0, NotChecked=0, Total=2162 [2022-12-14 07:22:45,004 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 130 mSDsluCounter, 180 mSDsCounter, 0 mSdLazyCounter, 261 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 198 SdHoareTripleChecker+Invalid, 265 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 261 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:45,005 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 198 Invalid, 265 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 261 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 07:22:45,005 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151 states. [2022-12-14 07:22:45,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151 to 148. [2022-12-14 07:22:45,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 145 states have (on average 1.206896551724138) internal successors, (175), 147 states have internal predecessors, (175), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:45,008 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 175 transitions. [2022-12-14 07:22:45,008 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 175 transitions. Word has length 26 [2022-12-14 07:22:45,008 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:45,008 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 175 transitions. [2022-12-14 07:22:45,008 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 2.0434782608695654) internal successors, (47), 23 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:45,009 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 175 transitions. [2022-12-14 07:22:45,009 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-12-14 07:22:45,009 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:45,009 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:45,013 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Forceful destruction successful, exit code 0 [2022-12-14 07:22:45,210 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-12-14 07:22:45,210 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:45,211 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:45,211 INFO L85 PathProgramCache]: Analyzing trace with hash -128095329, now seen corresponding path program 3 times [2022-12-14 07:22:45,212 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:45,212 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [254136279] [2022-12-14 07:22:45,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:45,212 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:45,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:45,554 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:22:45,554 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:45,555 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [254136279] [2022-12-14 07:22:45,555 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [254136279] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:22:45,555 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1544487636] [2022-12-14 07:22:45,555 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 07:22:45,555 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:45,555 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:22:45,556 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:22:45,556 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-12-14 07:22:45,650 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 07:22:45,650 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:22:45,652 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 39 conjunts are in the unsatisfiable core [2022-12-14 07:22:45,653 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:22:45,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:45,937 INFO L321 Elim1Store]: treesize reduction 9, result has 47.1 percent of original size [2022-12-14 07:22:45,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 28 treesize of output 18 [2022-12-14 07:22:45,962 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 4 proven. 12 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-14 07:22:45,962 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:22:46,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 25 [2022-12-14 07:22:46,052 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 23 [2022-12-14 07:22:46,269 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 7 proven. 9 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-14 07:22:46,269 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1544487636] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:22:46,269 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [692566000] [2022-12-14 07:22:46,273 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:22:46,273 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:22:46,273 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:22:46,273 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:22:46,273 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:22:46,296 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:46,298 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:46,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:22:46,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:46,360 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:46,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:46,413 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:22:46,452 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:46,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:46,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:46,528 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:46,559 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:22:46,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:22:46,650 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:22:46,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:22:46,713 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:46,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:46,783 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:22:46,783 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:22:46,821 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:22:48,918 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7759#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:22:48,918 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:22:48,919 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:22:48,919 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 13, 13] total 36 [2022-12-14 07:22:48,919 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1658631603] [2022-12-14 07:22:48,919 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:22:48,919 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-12-14 07:22:48,919 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:48,920 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-12-14 07:22:48,920 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=189, Invalid=2261, Unknown=0, NotChecked=0, Total=2450 [2022-12-14 07:22:48,920 INFO L87 Difference]: Start difference. First operand 148 states and 175 transitions. Second operand has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:52,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:22:52,387 INFO L93 Difference]: Finished difference Result 207 states and 229 transitions. [2022-12-14 07:22:52,387 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-12-14 07:22:52,387 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-12-14 07:22:52,387 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:22:52,387 INFO L225 Difference]: With dead ends: 207 [2022-12-14 07:22:52,388 INFO L226 Difference]: Without dead ends: 194 [2022-12-14 07:22:52,388 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 86 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1646 ImplicationChecksByTransitivity, 5.6s TimeCoverageRelationStatistics Valid=1005, Invalid=6651, Unknown=0, NotChecked=0, Total=7656 [2022-12-14 07:22:52,388 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 709 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 1021 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 709 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 1031 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 1021 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 07:22:52,388 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [709 Valid, 130 Invalid, 1031 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 1021 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 07:22:52,389 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 194 states. [2022-12-14 07:22:52,390 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 194 to 152. [2022-12-14 07:22:52,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 152 states, 149 states have (on average 1.1812080536912752) internal successors, (176), 151 states have internal predecessors, (176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:52,391 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 176 transitions. [2022-12-14 07:22:52,391 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 176 transitions. Word has length 27 [2022-12-14 07:22:52,391 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:22:52,391 INFO L495 AbstractCegarLoop]: Abstraction has 152 states and 176 transitions. [2022-12-14 07:22:52,391 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 1.8888888888888888) internal successors, (68), 36 states have internal predecessors, (68), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:22:52,391 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 176 transitions. [2022-12-14 07:22:52,391 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-12-14 07:22:52,391 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:22:52,391 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:22:52,396 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Ended with exit code 0 [2022-12-14 07:22:52,592 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-12-14 07:22:52,593 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:22:52,593 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:22:52,593 INFO L85 PathProgramCache]: Analyzing trace with hash -765178864, now seen corresponding path program 6 times [2022-12-14 07:22:52,594 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:22:52,594 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [828323241] [2022-12-14 07:22:52,594 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:22:52,594 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:22:52,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:22:52,990 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:22:52,991 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:22:52,991 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [828323241] [2022-12-14 07:22:52,991 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [828323241] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:22:52,991 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [729835854] [2022-12-14 07:22:52,991 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 07:22:52,991 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:22:52,991 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:22:52,992 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:22:52,993 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-12-14 07:22:53,068 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 07:22:53,068 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:22:53,070 INFO L263 TraceCheckSpWp]: Trace formula consists of 216 conjuncts, 63 conjunts are in the unsatisfiable core [2022-12-14 07:22:53,072 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:22:53,279 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 07:22:53,622 INFO L321 Elim1Store]: treesize reduction 21, result has 48.8 percent of original size [2022-12-14 07:22:53,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 49 treesize of output 42 [2022-12-14 07:22:53,650 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 5 proven. 45 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:22:53,650 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:22:53,982 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 74 treesize of output 64 [2022-12-14 07:22:53,987 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 10 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 74 treesize of output 56 [2022-12-14 07:22:54,686 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 25 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:22:54,686 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [729835854] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:22:54,686 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [507038339] [2022-12-14 07:22:54,686 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 07:22:54,687 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:22:54,687 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:22:54,687 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:22:54,687 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:22:54,714 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:54,715 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:22:54,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:22:54,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:54,783 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:54,799 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:54,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:22:54,869 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:22:54,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:22:54,923 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:22:56,192 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8418#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:22:56,192 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:22:56,192 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:22:56,192 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 21, 21] total 54 [2022-12-14 07:22:56,192 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [47412899] [2022-12-14 07:22:56,192 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:22:56,193 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-12-14 07:22:56,193 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:22:56,193 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-12-14 07:22:56,194 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=304, Invalid=3602, Unknown=0, NotChecked=0, Total=3906 [2022-12-14 07:22:56,194 INFO L87 Difference]: Start difference. First operand 152 states and 176 transitions. Second operand has 54 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 54 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:03,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:23:03,215 INFO L93 Difference]: Finished difference Result 383 states and 420 transitions. [2022-12-14 07:23:03,215 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2022-12-14 07:23:03,215 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 54 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-12-14 07:23:03,216 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:23:03,216 INFO L225 Difference]: With dead ends: 383 [2022-12-14 07:23:03,216 INFO L226 Difference]: Without dead ends: 371 [2022-12-14 07:23:03,217 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 121 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3431 ImplicationChecksByTransitivity, 8.7s TimeCoverageRelationStatistics Valid=1970, Invalid=13036, Unknown=0, NotChecked=0, Total=15006 [2022-12-14 07:23:03,217 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 920 mSDsluCounter, 197 mSDsCounter, 0 mSdLazyCounter, 1881 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 920 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 1908 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 1881 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-12-14 07:23:03,218 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [920 Valid, 206 Invalid, 1908 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 1881 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-12-14 07:23:03,218 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 371 states. [2022-12-14 07:23:03,220 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 371 to 184. [2022-12-14 07:23:03,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 184 states, 181 states have (on average 1.1988950276243093) internal successors, (217), 183 states have internal predecessors, (217), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:03,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 184 states to 184 states and 217 transitions. [2022-12-14 07:23:03,221 INFO L78 Accepts]: Start accepts. Automaton has 184 states and 217 transitions. Word has length 27 [2022-12-14 07:23:03,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:23:03,221 INFO L495 AbstractCegarLoop]: Abstraction has 184 states and 217 transitions. [2022-12-14 07:23:03,221 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 1.4259259259259258) internal successors, (77), 54 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:03,221 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 217 transitions. [2022-12-14 07:23:03,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-12-14 07:23:03,222 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:23:03,222 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:23:03,226 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-12-14 07:23:03,422 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable33,23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:23:03,423 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:23:03,424 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:23:03,424 INFO L85 PathProgramCache]: Analyzing trace with hash 718904775, now seen corresponding path program 5 times [2022-12-14 07:23:03,424 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:23:03,424 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [792536208] [2022-12-14 07:23:03,425 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:23:03,425 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:23:03,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:23:03,630 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 07:23:03,630 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:23:03,630 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [792536208] [2022-12-14 07:23:03,630 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [792536208] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:23:03,630 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1318889122] [2022-12-14 07:23:03,630 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:23:03,631 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:23:03,631 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:23:03,631 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:23:03,632 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-12-14 07:23:03,774 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 07:23:03,774 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:23:03,775 INFO L263 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 33 conjunts are in the unsatisfiable core [2022-12-14 07:23:03,776 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:23:03,871 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 07:23:03,871 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:23:03,978 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 07:23:04,006 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 07:23:04,007 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1318889122] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:23:04,007 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1229187549] [2022-12-14 07:23:04,008 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:23:04,008 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:23:04,008 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:23:04,008 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:23:04,008 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:23:04,037 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:23:04,039 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:23:04,040 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:23:04,069 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:23:04,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:04,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:04,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:04,202 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:04,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:04,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:04,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:04,323 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:23:04,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:23:04,404 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:23:04,439 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-12-14 07:23:04,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-12-14 07:23:04,527 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:23:04,528 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:23:04,607 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:23:04,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:23:04,651 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:23:06,567 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9299#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:23:06,567 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:23:06,567 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:23:06,567 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 22 [2022-12-14 07:23:06,567 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1028058187] [2022-12-14 07:23:06,567 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:23:06,567 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-12-14 07:23:06,568 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:23:06,568 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-12-14 07:23:06,568 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=152, Invalid=1180, Unknown=0, NotChecked=0, Total=1332 [2022-12-14 07:23:06,568 INFO L87 Difference]: Start difference. First operand 184 states and 217 transitions. Second operand has 23 states, 22 states have (on average 2.409090909090909) internal successors, (53), 23 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:06,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:23:06,905 INFO L93 Difference]: Finished difference Result 201 states and 230 transitions. [2022-12-14 07:23:06,906 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-14 07:23:06,906 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 22 states have (on average 2.409090909090909) internal successors, (53), 23 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-12-14 07:23:06,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:23:06,907 INFO L225 Difference]: With dead ends: 201 [2022-12-14 07:23:06,907 INFO L226 Difference]: Without dead ends: 201 [2022-12-14 07:23:06,907 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 102 GetRequests, 54 SyntacticMatches, 3 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 449 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=294, Invalid=1868, Unknown=0, NotChecked=0, Total=2162 [2022-12-14 07:23:06,908 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 148 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 401 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 148 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 403 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 401 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 07:23:06,908 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [148 Valid, 123 Invalid, 403 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 401 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 07:23:06,908 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201 states. [2022-12-14 07:23:06,910 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201 to 193. [2022-12-14 07:23:06,910 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 193 states, 190 states have (on average 1.1894736842105262) internal successors, (226), 192 states have internal predecessors, (226), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:06,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 193 states to 193 states and 226 transitions. [2022-12-14 07:23:06,911 INFO L78 Accepts]: Start accepts. Automaton has 193 states and 226 transitions. Word has length 28 [2022-12-14 07:23:06,911 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:23:06,911 INFO L495 AbstractCegarLoop]: Abstraction has 193 states and 226 transitions. [2022-12-14 07:23:06,911 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 22 states have (on average 2.409090909090909) internal successors, (53), 23 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:06,911 INFO L276 IsEmpty]: Start isEmpty. Operand 193 states and 226 transitions. [2022-12-14 07:23:06,911 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-12-14 07:23:06,911 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:23:06,911 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:23:06,916 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2022-12-14 07:23:07,112 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-12-14 07:23:07,113 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:23:07,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:23:07,113 INFO L85 PathProgramCache]: Analyzing trace with hash -1948417194, now seen corresponding path program 4 times [2022-12-14 07:23:07,114 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:23:07,114 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [665438789] [2022-12-14 07:23:07,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:23:07,114 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:23:07,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:23:07,489 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 4 proven. 27 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:23:07,489 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:23:07,489 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [665438789] [2022-12-14 07:23:07,489 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [665438789] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:23:07,489 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [29195645] [2022-12-14 07:23:07,489 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 07:23:07,490 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:23:07,490 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:23:07,490 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:23:07,491 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-12-14 07:23:07,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:23:07,572 INFO L263 TraceCheckSpWp]: Trace formula consists of 255 conjuncts, 45 conjunts are in the unsatisfiable core [2022-12-14 07:23:07,573 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:23:07,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:08,041 INFO L321 Elim1Store]: treesize reduction 17, result has 50.0 percent of original size [2022-12-14 07:23:08,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 38 treesize of output 31 [2022-12-14 07:23:08,066 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 6 proven. 23 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-14 07:23:08,066 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:23:08,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-12-14 07:23:08,227 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 68 treesize of output 58 [2022-12-14 07:23:08,607 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 13 proven. 16 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-14 07:23:08,607 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [29195645] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:23:08,607 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [351046619] [2022-12-14 07:23:08,608 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:23:08,608 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:23:08,608 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:23:08,608 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:23:08,608 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:23:08,631 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:23:08,632 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:23:08,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:23:08,659 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:23:08,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:08,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:08,747 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:08,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:08,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:08,819 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:08,853 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:08,890 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:23:08,890 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:23:08,985 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:23:08,986 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:23:09,047 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:23:09,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:23:09,113 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:23:09,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:23:09,147 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:23:10,947 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9950#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:23:10,947 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:23:10,947 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:23:10,947 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 16, 16] total 43 [2022-12-14 07:23:10,947 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2033055452] [2022-12-14 07:23:10,947 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:23:10,947 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-12-14 07:23:10,948 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:23:10,948 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-12-14 07:23:10,948 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=239, Invalid=2953, Unknown=0, NotChecked=0, Total=3192 [2022-12-14 07:23:10,948 INFO L87 Difference]: Start difference. First operand 193 states and 226 transitions. Second operand has 43 states, 43 states have (on average 1.8372093023255813) internal successors, (79), 43 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:14,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:23:14,731 INFO L93 Difference]: Finished difference Result 306 states and 335 transitions. [2022-12-14 07:23:14,731 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2022-12-14 07:23:14,731 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 43 states have (on average 1.8372093023255813) internal successors, (79), 43 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-12-14 07:23:14,732 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:23:14,732 INFO L225 Difference]: With dead ends: 306 [2022-12-14 07:23:14,732 INFO L226 Difference]: Without dead ends: 291 [2022-12-14 07:23:14,733 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 51 SyntacticMatches, 0 SemanticMatches, 109 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2914 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=1632, Invalid=10578, Unknown=0, NotChecked=0, Total=12210 [2022-12-14 07:23:14,733 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 1040 mSDsluCounter, 166 mSDsCounter, 0 mSdLazyCounter, 1608 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1040 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 1625 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 1608 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-12-14 07:23:14,733 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1040 Valid, 177 Invalid, 1625 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 1608 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-12-14 07:23:14,733 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 291 states. [2022-12-14 07:23:14,735 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 291 to 195. [2022-12-14 07:23:14,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 195 states, 192 states have (on average 1.1666666666666667) internal successors, (224), 194 states have internal predecessors, (224), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:14,736 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 195 states to 195 states and 224 transitions. [2022-12-14 07:23:14,736 INFO L78 Accepts]: Start accepts. Automaton has 195 states and 224 transitions. Word has length 31 [2022-12-14 07:23:14,736 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:23:14,736 INFO L495 AbstractCegarLoop]: Abstraction has 195 states and 224 transitions. [2022-12-14 07:23:14,736 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 43 states, 43 states have (on average 1.8372093023255813) internal successors, (79), 43 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:14,736 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 224 transitions. [2022-12-14 07:23:14,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-12-14 07:23:14,737 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:23:14,737 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:23:14,741 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-12-14 07:23:14,937 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-12-14 07:23:14,937 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:23:14,937 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:23:14,937 INFO L85 PathProgramCache]: Analyzing trace with hash -1422909305, now seen corresponding path program 7 times [2022-12-14 07:23:14,937 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:23:14,937 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1970827435] [2022-12-14 07:23:14,937 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:23:14,938 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:23:14,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:23:15,322 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:23:15,322 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:23:15,322 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1970827435] [2022-12-14 07:23:15,322 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1970827435] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:23:15,322 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1448471434] [2022-12-14 07:23:15,322 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 07:23:15,322 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:23:15,322 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:23:15,323 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:23:15,324 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-12-14 07:23:15,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:23:15,398 INFO L263 TraceCheckSpWp]: Trace formula consists of 240 conjuncts, 71 conjunts are in the unsatisfiable core [2022-12-14 07:23:15,399 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:23:15,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:16,447 INFO L321 Elim1Store]: treesize reduction 25, result has 49.0 percent of original size [2022-12-14 07:23:16,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 15 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 68 treesize of output 50 [2022-12-14 07:23:16,481 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 6 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:23:16,482 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:23:17,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 89 treesize of output 77 [2022-12-14 07:23:17,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 15 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 0 case distinctions, treesize of input 89 treesize of output 67 [2022-12-14 07:23:18,003 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-12-14 07:23:18,004 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 36 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:23:18,004 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1448471434] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:23:18,004 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1013585492] [2022-12-14 07:23:18,005 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 07:23:18,005 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:23:18,005 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:23:18,005 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:23:18,005 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:23:18,026 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:23:18,028 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:23:18,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:23:18,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:18,103 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:18,118 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:18,151 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:18,188 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:23:18,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:23:18,253 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:23:19,384 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10815#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:23:19,384 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:23:19,384 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:23:19,384 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 24, 24] total 62 [2022-12-14 07:23:19,384 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [136974224] [2022-12-14 07:23:19,384 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:23:19,384 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-12-14 07:23:19,384 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:23:19,385 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-12-14 07:23:19,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=377, Invalid=4593, Unknown=0, NotChecked=0, Total=4970 [2022-12-14 07:23:19,385 INFO L87 Difference]: Start difference. First operand 195 states and 224 transitions. Second operand has 62 states, 62 states have (on average 1.435483870967742) internal successors, (89), 62 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:29,844 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:23:29,845 INFO L93 Difference]: Finished difference Result 543 states and 592 transitions. [2022-12-14 07:23:29,845 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 82 states. [2022-12-14 07:23:29,845 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 62 states have (on average 1.435483870967742) internal successors, (89), 62 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-12-14 07:23:29,845 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:23:29,846 INFO L225 Difference]: With dead ends: 543 [2022-12-14 07:23:29,846 INFO L226 Difference]: Without dead ends: 529 [2022-12-14 07:23:29,847 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 149 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5419 ImplicationChecksByTransitivity, 12.2s TimeCoverageRelationStatistics Valid=2815, Invalid=19835, Unknown=0, NotChecked=0, Total=22650 [2022-12-14 07:23:29,847 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 1646 mSDsluCounter, 231 mSDsCounter, 0 mSdLazyCounter, 2774 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1646 SdHoareTripleChecker+Valid, 242 SdHoareTripleChecker+Invalid, 2802 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 2774 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-12-14 07:23:29,847 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1646 Valid, 242 Invalid, 2802 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 2774 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-12-14 07:23:29,847 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 529 states. [2022-12-14 07:23:29,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 529 to 231. [2022-12-14 07:23:29,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 231 states, 228 states have (on average 1.1842105263157894) internal successors, (270), 230 states have internal predecessors, (270), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:29,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 231 states to 231 states and 270 transitions. [2022-12-14 07:23:29,851 INFO L78 Accepts]: Start accepts. Automaton has 231 states and 270 transitions. Word has length 31 [2022-12-14 07:23:29,851 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:23:29,851 INFO L495 AbstractCegarLoop]: Abstraction has 231 states and 270 transitions. [2022-12-14 07:23:29,851 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 62 states have (on average 1.435483870967742) internal successors, (89), 62 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:29,851 INFO L276 IsEmpty]: Start isEmpty. Operand 231 states and 270 transitions. [2022-12-14 07:23:29,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-12-14 07:23:29,851 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:23:29,851 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:23:29,855 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Ended with exit code 0 [2022-12-14 07:23:30,052 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-12-14 07:23:30,052 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:23:30,053 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:23:30,053 INFO L85 PathProgramCache]: Analyzing trace with hash -976907377, now seen corresponding path program 6 times [2022-12-14 07:23:30,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:23:30,054 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1139035547] [2022-12-14 07:23:30,054 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:23:30,054 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:23:30,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:23:30,747 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 6 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:23:30,747 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:23:30,747 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1139035547] [2022-12-14 07:23:30,747 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1139035547] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:23:30,747 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1238704614] [2022-12-14 07:23:30,747 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 07:23:30,747 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:23:30,747 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:23:30,748 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:23:30,749 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-12-14 07:23:30,863 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 07:23:30,863 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:23:30,865 INFO L263 TraceCheckSpWp]: Trace formula consists of 278 conjuncts, 87 conjunts are in the unsatisfiable core [2022-12-14 07:23:30,867 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:23:31,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:31,236 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 07:23:31,236 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-12-14 07:23:31,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 07:23:33,475 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-12-14 07:23:33,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 62 treesize of output 70 [2022-12-14 07:23:33,499 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 07:23:33,586 INFO L321 Elim1Store]: treesize reduction 24, result has 74.2 percent of original size [2022-12-14 07:23:33,586 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 66 treesize of output 118 [2022-12-14 07:23:34,054 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-12-14 07:23:34,189 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:23:34,190 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:23:34,192 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:23:34,192 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-12-14 07:23:34,195 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 6 proven. 25 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:23:34,195 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:23:34,204 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_967 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_967) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-12-14 07:23:34,777 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:23:34,777 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 34 [2022-12-14 07:23:34,786 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:23:34,786 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 58 treesize of output 57 [2022-12-14 07:23:34,791 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:23:34,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 20 [2022-12-14 07:23:34,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 07:23:35,695 INFO L134 CoverageAnalysis]: Checked inductivity of 31 backedges. 10 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 4 not checked. [2022-12-14 07:23:35,695 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1238704614] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:23:35,696 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1595133000] [2022-12-14 07:23:35,696 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:23:35,696 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:23:35,696 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:23:35,697 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:23:35,697 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:23:35,726 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:23:35,728 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:23:35,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:23:35,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:23:35,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:35,795 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:35,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:23:35,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:35,889 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:35,909 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:35,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:35,989 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:23:35,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:23:36,080 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:23:36,126 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-12-14 07:23:36,126 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-12-14 07:23:36,221 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:23:36,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:23:36,303 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:23:36,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:23:36,344 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:23:39,144 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12002#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:23:39,144 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:23:39,144 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:23:39,144 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 23, 23] total 58 [2022-12-14 07:23:39,144 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [768951686] [2022-12-14 07:23:39,144 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:23:39,145 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 58 states [2022-12-14 07:23:39,145 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:23:39,145 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 58 interpolants. [2022-12-14 07:23:39,148 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=348, Invalid=4563, Unknown=63, NotChecked=138, Total=5112 [2022-12-14 07:23:39,148 INFO L87 Difference]: Start difference. First operand 231 states and 270 transitions. Second operand has 58 states, 58 states have (on average 1.4310344827586208) internal successors, (83), 58 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:47,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:23:47,957 INFO L93 Difference]: Finished difference Result 388 states and 443 transitions. [2022-12-14 07:23:47,958 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 60 states. [2022-12-14 07:23:47,958 INFO L78 Accepts]: Start accepts. Automaton has has 58 states, 58 states have (on average 1.4310344827586208) internal successors, (83), 58 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-12-14 07:23:47,958 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:23:47,958 INFO L225 Difference]: With dead ends: 388 [2022-12-14 07:23:47,958 INFO L226 Difference]: Without dead ends: 312 [2022-12-14 07:23:47,959 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 44 SyntacticMatches, 1 SemanticMatches, 127 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 3812 ImplicationChecksByTransitivity, 14.8s TimeCoverageRelationStatistics Valid=1761, Invalid=14400, Unknown=99, NotChecked=252, Total=16512 [2022-12-14 07:23:47,960 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 589 mSDsluCounter, 219 mSDsCounter, 0 mSdLazyCounter, 1051 mSolverCounterSat, 46 mSolverCounterUnsat, 15 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 589 SdHoareTripleChecker+Valid, 235 SdHoareTripleChecker+Invalid, 1186 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 1051 IncrementalHoareTripleChecker+Invalid, 15 IncrementalHoareTripleChecker+Unknown, 74 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 07:23:47,960 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [589 Valid, 235 Invalid, 1186 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 1051 Invalid, 15 Unknown, 74 Unchecked, 0.8s Time] [2022-12-14 07:23:47,960 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 312 states. [2022-12-14 07:23:47,962 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 312 to 298. [2022-12-14 07:23:47,962 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 298 states, 295 states have (on average 1.1830508474576271) internal successors, (349), 297 states have internal predecessors, (349), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:47,963 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 298 states to 298 states and 349 transitions. [2022-12-14 07:23:47,963 INFO L78 Accepts]: Start accepts. Automaton has 298 states and 349 transitions. Word has length 32 [2022-12-14 07:23:47,963 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:23:47,963 INFO L495 AbstractCegarLoop]: Abstraction has 298 states and 349 transitions. [2022-12-14 07:23:47,963 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 58 states, 58 states have (on average 1.4310344827586208) internal successors, (83), 58 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:23:47,963 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 349 transitions. [2022-12-14 07:23:47,963 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-12-14 07:23:47,963 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:23:47,964 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:23:47,968 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-12-14 07:23:48,164 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-12-14 07:23:48,165 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:23:48,165 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:23:48,166 INFO L85 PathProgramCache]: Analyzing trace with hash -1766274483, now seen corresponding path program 5 times [2022-12-14 07:23:48,166 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:23:48,166 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1035636416] [2022-12-14 07:23:48,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:23:48,167 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:23:48,183 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:23:48,647 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:23:48,647 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:23:48,648 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1035636416] [2022-12-14 07:23:48,648 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1035636416] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:23:48,648 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [206344505] [2022-12-14 07:23:48,648 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:23:48,648 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:23:48,648 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:23:48,649 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:23:48,649 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-12-14 07:23:48,807 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 07:23:48,807 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:23:48,810 INFO L263 TraceCheckSpWp]: Trace formula consists of 266 conjuncts, 84 conjunts are in the unsatisfiable core [2022-12-14 07:23:48,811 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:23:49,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 07:23:49,404 INFO L321 Elim1Store]: treesize reduction 12, result has 84.4 percent of original size [2022-12-14 07:23:49,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 1 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 9 case distinctions, treesize of input 41 treesize of output 83 [2022-12-14 07:23:49,795 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 5 proven. 24 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-12-14 07:23:49,795 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:23:50,685 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 55 treesize of output 47 [2022-12-14 07:23:50,711 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:23:50,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 5 case distinctions, treesize of input 71 treesize of output 105 [2022-12-14 07:23:50,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 42 treesize of output 34 [2022-12-14 07:23:51,423 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 0 proven. 29 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-12-14 07:23:51,423 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [206344505] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:23:51,423 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [71383917] [2022-12-14 07:23:51,424 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:23:51,424 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:23:51,424 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:23:51,424 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:23:51,424 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:23:51,451 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:23:51,452 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:23:51,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:23:51,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:23:51,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:51,535 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:51,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:51,616 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:51,646 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:51,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:51,697 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:23:51,739 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:23:51,740 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:23:51,832 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:23:51,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:23:51,892 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:23:51,892 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:23:51,966 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:23:51,966 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:23:52,005 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:23:54,532 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13075#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:23:54,532 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:23:54,532 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:23:54,532 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 19, 19] total 53 [2022-12-14 07:23:54,532 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [685364451] [2022-12-14 07:23:54,532 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:23:54,533 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-12-14 07:23:54,533 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:23:54,533 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-12-14 07:23:54,533 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=328, Invalid=4228, Unknown=0, NotChecked=0, Total=4556 [2022-12-14 07:23:54,533 INFO L87 Difference]: Start difference. First operand 298 states and 349 transitions. Second operand has 54 states, 53 states have (on average 1.679245283018868) internal successors, (89), 54 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:24:08,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:24:08,475 INFO L93 Difference]: Finished difference Result 453 states and 507 transitions. [2022-12-14 07:24:08,475 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 116 states. [2022-12-14 07:24:08,475 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 53 states have (on average 1.679245283018868) internal successors, (89), 54 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-12-14 07:24:08,475 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:24:08,476 INFO L225 Difference]: With dead ends: 453 [2022-12-14 07:24:08,476 INFO L226 Difference]: Without dead ends: 400 [2022-12-14 07:24:08,478 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 234 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 180 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9017 ImplicationChecksByTransitivity, 16.6s TimeCoverageRelationStatistics Valid=4239, Invalid=28703, Unknown=0, NotChecked=0, Total=32942 [2022-12-14 07:24:08,478 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 827 mSDsluCounter, 157 mSDsCounter, 0 mSdLazyCounter, 2450 mSolverCounterSat, 99 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 827 SdHoareTripleChecker+Valid, 166 SdHoareTripleChecker+Invalid, 2549 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 99 IncrementalHoareTripleChecker+Valid, 2450 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-12-14 07:24:08,478 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [827 Valid, 166 Invalid, 2549 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [99 Valid, 2450 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-12-14 07:24:08,479 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 400 states. [2022-12-14 07:24:08,481 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 400 to 300. [2022-12-14 07:24:08,481 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 300 states, 297 states have (on average 1.1717171717171717) internal successors, (348), 299 states have internal predecessors, (348), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:24:08,481 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 300 states to 300 states and 348 transitions. [2022-12-14 07:24:08,481 INFO L78 Accepts]: Start accepts. Automaton has 300 states and 348 transitions. Word has length 35 [2022-12-14 07:24:08,481 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:24:08,482 INFO L495 AbstractCegarLoop]: Abstraction has 300 states and 348 transitions. [2022-12-14 07:24:08,482 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 53 states have (on average 1.679245283018868) internal successors, (89), 54 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:24:08,482 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 348 transitions. [2022-12-14 07:24:08,482 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-12-14 07:24:08,482 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:24:08,482 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:24:08,487 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2022-12-14 07:24:08,682 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-12-14 07:24:08,683 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:24:08,683 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:24:08,684 INFO L85 PathProgramCache]: Analyzing trace with hash -1127975874, now seen corresponding path program 8 times [2022-12-14 07:24:08,684 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:24:08,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [878242561] [2022-12-14 07:24:08,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:24:08,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:24:08,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:24:09,342 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 25 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:24:09,342 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:24:09,342 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [878242561] [2022-12-14 07:24:09,342 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [878242561] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:24:09,342 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [624323131] [2022-12-14 07:24:09,343 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:24:09,343 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:24:09,343 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:24:09,343 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:24:09,344 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-12-14 07:24:09,473 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2022-12-14 07:24:09,473 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:24:09,476 INFO L263 TraceCheckSpWp]: Trace formula consists of 264 conjuncts, 87 conjunts are in the unsatisfiable core [2022-12-14 07:24:09,477 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:24:09,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 07:24:10,971 INFO L321 Elim1Store]: treesize reduction 29, result has 49.1 percent of original size [2022-12-14 07:24:10,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 21 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 65 treesize of output 58 [2022-12-14 07:24:10,974 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-12-14 07:24:11,018 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 7 proven. 91 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:24:11,018 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:24:11,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 104 treesize of output 90 [2022-12-14 07:24:11,944 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 7 select indices, 7 select index equivalence classes, 21 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 0 case distinctions, treesize of input 104 treesize of output 78 [2022-12-14 07:24:13,304 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-12-14 07:24:13,307 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 49 proven. 49 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:24:13,307 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [624323131] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:24:13,307 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1463881401] [2022-12-14 07:24:13,308 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 07:24:13,308 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:24:13,308 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:24:13,308 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:24:13,308 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:24:13,337 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:24:13,339 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:24:13,339 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:24:13,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:13,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:13,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:13,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:13,538 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:24:13,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:24:13,587 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:24:15,383 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14344#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:24:15,384 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:24:15,384 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:24:15,384 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 27, 27] total 70 [2022-12-14 07:24:15,384 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [199791621] [2022-12-14 07:24:15,384 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:24:15,384 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 70 states [2022-12-14 07:24:15,384 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:24:15,384 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 70 interpolants. [2022-12-14 07:24:15,385 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=435, Invalid=5727, Unknown=0, NotChecked=0, Total=6162 [2022-12-14 07:24:15,385 INFO L87 Difference]: Start difference. First operand 300 states and 348 transitions. Second operand has 70 states, 70 states have (on average 1.4428571428571428) internal successors, (101), 70 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:24:44,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:24:44,879 INFO L93 Difference]: Finished difference Result 780 states and 843 transitions. [2022-12-14 07:24:44,879 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 100 states. [2022-12-14 07:24:44,880 INFO L78 Accepts]: Start accepts. Automaton has has 70 states, 70 states have (on average 1.4428571428571428) internal successors, (101), 70 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-12-14 07:24:44,880 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:24:44,881 INFO L225 Difference]: With dead ends: 780 [2022-12-14 07:24:44,881 INFO L226 Difference]: Without dead ends: 748 [2022-12-14 07:24:44,883 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 221 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 175 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7222 ImplicationChecksByTransitivity, 32.1s TimeCoverageRelationStatistics Valid=3677, Invalid=27475, Unknown=0, NotChecked=0, Total=31152 [2022-12-14 07:24:44,883 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 1981 mSDsluCounter, 303 mSDsCounter, 0 mSdLazyCounter, 4129 mSolverCounterSat, 53 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1981 SdHoareTripleChecker+Valid, 315 SdHoareTripleChecker+Invalid, 4182 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 53 IncrementalHoareTripleChecker+Valid, 4129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-12-14 07:24:44,883 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1981 Valid, 315 Invalid, 4182 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [53 Valid, 4129 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-12-14 07:24:44,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 748 states. [2022-12-14 07:24:44,887 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 748 to 334. [2022-12-14 07:24:44,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 334 states, 331 states have (on average 1.1782477341389728) internal successors, (390), 333 states have internal predecessors, (390), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:24:44,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 334 states to 334 states and 390 transitions. [2022-12-14 07:24:44,888 INFO L78 Accepts]: Start accepts. Automaton has 334 states and 390 transitions. Word has length 35 [2022-12-14 07:24:44,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:24:44,888 INFO L495 AbstractCegarLoop]: Abstraction has 334 states and 390 transitions. [2022-12-14 07:24:44,888 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 70 states, 70 states have (on average 1.4428571428571428) internal successors, (101), 70 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:24:44,888 INFO L276 IsEmpty]: Start isEmpty. Operand 334 states and 390 transitions. [2022-12-14 07:24:44,888 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-12-14 07:24:44,888 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:24:44,889 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:24:44,894 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Ended with exit code 0 [2022-12-14 07:24:45,089 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-12-14 07:24:45,090 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:24:45,090 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:24:45,091 INFO L85 PathProgramCache]: Analyzing trace with hash 48774943, now seen corresponding path program 7 times [2022-12-14 07:24:45,091 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:24:45,091 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [136690708] [2022-12-14 07:24:45,092 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:24:45,092 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:24:45,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:24:45,348 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 07:24:45,349 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:24:45,349 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [136690708] [2022-12-14 07:24:45,349 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [136690708] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:24:45,349 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1307859445] [2022-12-14 07:24:45,349 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 07:24:45,349 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:24:45,349 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:24:45,350 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:24:45,350 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-12-14 07:24:45,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:24:45,467 INFO L263 TraceCheckSpWp]: Trace formula consists of 304 conjuncts, 42 conjunts are in the unsatisfiable core [2022-12-14 07:24:45,468 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:24:45,577 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 07:24:45,578 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:24:45,718 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 07:24:45,756 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 07:24:45,756 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1307859445] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:24:45,757 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [607037696] [2022-12-14 07:24:45,758 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:24:45,758 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:24:45,758 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:24:45,758 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:24:45,758 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:24:45,785 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:24:45,787 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:24:45,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:24:45,822 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:24:45,857 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:45,874 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:45,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:45,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:45,980 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:45,999 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:46,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:46,074 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:24:46,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:24:46,159 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:24:46,191 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-12-14 07:24:46,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-12-14 07:24:46,278 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:24:46,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:24:46,352 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:24:46,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:24:46,391 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:24:48,338 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15900#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:24:48,338 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:24:48,338 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:24:48,338 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 26 [2022-12-14 07:24:48,339 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [464222392] [2022-12-14 07:24:48,339 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:24:48,339 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-12-14 07:24:48,339 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:24:48,339 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-12-14 07:24:48,339 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=171, Invalid=1469, Unknown=0, NotChecked=0, Total=1640 [2022-12-14 07:24:48,340 INFO L87 Difference]: Start difference. First operand 334 states and 390 transitions. Second operand has 27 states, 26 states have (on average 2.5) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:24:48,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:24:48,888 INFO L93 Difference]: Finished difference Result 367 states and 416 transitions. [2022-12-14 07:24:48,888 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-12-14 07:24:48,888 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 2.5) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-12-14 07:24:48,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:24:48,889 INFO L225 Difference]: With dead ends: 367 [2022-12-14 07:24:48,889 INFO L226 Difference]: Without dead ends: 367 [2022-12-14 07:24:48,889 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 131 GetRequests, 75 SyntacticMatches, 4 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 656 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=386, Invalid=2476, Unknown=0, NotChecked=0, Total=2862 [2022-12-14 07:24:48,889 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 191 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 581 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 191 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 583 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 581 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 07:24:48,890 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [191 Valid, 188 Invalid, 583 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 581 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 07:24:48,890 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 367 states. [2022-12-14 07:24:48,892 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 367 to 347. [2022-12-14 07:24:48,893 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 344 states have (on average 1.1715116279069768) internal successors, (403), 346 states have internal predecessors, (403), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:24:48,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 403 transitions. [2022-12-14 07:24:48,893 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 403 transitions. Word has length 36 [2022-12-14 07:24:48,893 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:24:48,893 INFO L495 AbstractCegarLoop]: Abstraction has 347 states and 403 transitions. [2022-12-14 07:24:48,893 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 2.5) internal successors, (65), 27 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:24:48,893 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 403 transitions. [2022-12-14 07:24:48,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-12-14 07:24:48,894 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:24:48,894 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:24:48,898 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Ended with exit code 0 [2022-12-14 07:24:49,095 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:24:49,095 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:24:49,096 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:24:49,096 INFO L85 PathProgramCache]: Analyzing trace with hash 1765144373, now seen corresponding path program 9 times [2022-12-14 07:24:49,097 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:24:49,097 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [275605374] [2022-12-14 07:24:49,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:24:49,098 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:24:49,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:24:49,644 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 36 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:24:49,644 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:24:49,644 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [275605374] [2022-12-14 07:24:49,645 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [275605374] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:24:49,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [266604953] [2022-12-14 07:24:49,645 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 07:24:49,645 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:24:49,645 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:24:49,646 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:24:49,646 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-12-14 07:24:49,773 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 07:24:49,773 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:24:49,775 INFO L263 TraceCheckSpWp]: Trace formula consists of 288 conjuncts, 85 conjunts are in the unsatisfiable core [2022-12-14 07:24:49,777 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:24:50,127 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:51,288 INFO L321 Elim1Store]: treesize reduction 33, result has 49.2 percent of original size [2022-12-14 07:24:51,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 88 treesize of output 66 [2022-12-14 07:24:51,291 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-12-14 07:24:51,332 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 8 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:24:51,332 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:24:52,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 103 [2022-12-14 07:24:52,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 28 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 89 [2022-12-14 07:24:53,824 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-12-14 07:24:53,827 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 64 proven. 64 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:24:53,828 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [266604953] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:24:53,828 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1968943677] [2022-12-14 07:24:53,829 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 07:24:53,829 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:24:53,829 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:24:53,829 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:24:53,829 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:24:53,858 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:24:53,860 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:24:53,861 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:24:53,899 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:24:53,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:53,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:53,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:24:54,036 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:24:54,036 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:24:54,085 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:24:55,728 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16960#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:24:55,729 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:24:55,729 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:24:55,729 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 30, 30] total 78 [2022-12-14 07:24:55,729 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1820349652] [2022-12-14 07:24:55,729 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:24:55,729 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 78 states [2022-12-14 07:24:55,729 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:24:55,730 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 78 interpolants. [2022-12-14 07:24:55,730 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=550, Invalid=6932, Unknown=0, NotChecked=0, Total=7482 [2022-12-14 07:24:55,730 INFO L87 Difference]: Start difference. First operand 347 states and 403 transitions. Second operand has 78 states, 78 states have (on average 1.4487179487179487) internal successors, (113), 78 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:25:21,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:25:21,354 INFO L93 Difference]: Finished difference Result 1055 states and 1141 transitions. [2022-12-14 07:25:21,354 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 129 states. [2022-12-14 07:25:21,354 INFO L78 Accepts]: Start accepts. Automaton has has 78 states, 78 states have (on average 1.4487179487179487) internal successors, (113), 78 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-12-14 07:25:21,354 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:25:21,356 INFO L225 Difference]: With dead ends: 1055 [2022-12-14 07:25:21,356 INFO L226 Difference]: Without dead ends: 1019 [2022-12-14 07:25:21,357 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 264 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 212 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11795 ImplicationChecksByTransitivity, 26.8s TimeCoverageRelationStatistics Valid=5138, Invalid=40444, Unknown=0, NotChecked=0, Total=45582 [2022-12-14 07:25:21,358 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 2793 mSDsluCounter, 423 mSDsCounter, 0 mSdLazyCounter, 5216 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2793 SdHoareTripleChecker+Valid, 437 SdHoareTripleChecker+Invalid, 5261 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 5216 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.7s IncrementalHoareTripleChecker+Time [2022-12-14 07:25:21,358 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2793 Valid, 437 Invalid, 5261 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 5216 Invalid, 0 Unknown, 0 Unchecked, 3.7s Time] [2022-12-14 07:25:21,358 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1019 states. [2022-12-14 07:25:21,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1019 to 381. [2022-12-14 07:25:21,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 381 states, 378 states have (on average 1.1772486772486772) internal successors, (445), 380 states have internal predecessors, (445), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:25:21,363 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 381 states to 381 states and 445 transitions. [2022-12-14 07:25:21,363 INFO L78 Accepts]: Start accepts. Automaton has 381 states and 445 transitions. Word has length 39 [2022-12-14 07:25:21,363 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:25:21,363 INFO L495 AbstractCegarLoop]: Abstraction has 381 states and 445 transitions. [2022-12-14 07:25:21,363 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 78 states, 78 states have (on average 1.4487179487179487) internal successors, (113), 78 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:25:21,363 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 445 transitions. [2022-12-14 07:25:21,364 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-12-14 07:25:21,364 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:25:21,364 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:25:21,368 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Ended with exit code 0 [2022-12-14 07:25:21,564 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:25:21,565 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:25:21,566 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:25:21,566 INFO L85 PathProgramCache]: Analyzing trace with hash -931936025, now seen corresponding path program 8 times [2022-12-14 07:25:21,566 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:25:21,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [858610019] [2022-12-14 07:25:21,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:25:21,567 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:25:21,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:25:22,399 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 8 proven. 49 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:25:22,399 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:25:22,399 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [858610019] [2022-12-14 07:25:22,399 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [858610019] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:25:22,399 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [990516792] [2022-12-14 07:25:22,399 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:25:22,399 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:25:22,399 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:25:22,400 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:25:22,401 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-12-14 07:25:22,630 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 07:25:22,630 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:25:22,633 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 126 conjunts are in the unsatisfiable core [2022-12-14 07:25:22,636 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:25:22,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 07:25:23,159 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:23,227 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 07:25:23,379 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 07:25:23,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 07:25:23,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 07:25:23,760 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:25:23,761 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:25:23,761 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-12-14 07:25:23,763 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 8 proven. 49 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:25:23,764 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:25:23,878 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1243 (Array Int Int)) (v_ArrVal_1242 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1242) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1243) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-12-14 07:25:28,130 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1243 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1243) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-12-14 07:25:28,193 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:25:28,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 07:25:28,198 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:25:28,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 07:25:28,202 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 07:25:28,739 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 17 proven. 31 refuted. 0 times theorem prover too weak. 0 trivial. 9 not checked. [2022-12-14 07:25:28,739 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [990516792] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:25:28,739 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1691274251] [2022-12-14 07:25:28,740 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:25:28,740 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:25:28,740 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:25:28,740 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:25:28,740 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:25:28,775 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:25:28,777 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:25:28,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:25:28,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:28,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:28,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:28,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:28,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:28,966 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:28,982 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:29,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:29,053 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:25:29,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:25:29,123 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:25:29,126 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:25:29,169 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-12-14 07:25:29,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-12-14 07:25:29,258 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:25:29,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:25:29,326 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:25:29,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:25:29,363 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:25:31,920 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18955#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:25:31,921 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:25:31,921 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:25:31,921 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 23, 22] total 62 [2022-12-14 07:25:31,921 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1729132938] [2022-12-14 07:25:31,921 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:25:31,922 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-12-14 07:25:31,922 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:25:31,922 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-12-14 07:25:31,922 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=384, Invalid=4972, Unknown=54, NotChecked=290, Total=5700 [2022-12-14 07:25:31,922 INFO L87 Difference]: Start difference. First operand 381 states and 445 transitions. Second operand has 62 states, 62 states have (on average 1.7258064516129032) internal successors, (107), 62 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:25:38,533 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:25:38,534 INFO L93 Difference]: Finished difference Result 673 states and 762 transitions. [2022-12-14 07:25:38,534 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 90 states. [2022-12-14 07:25:38,534 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 62 states have (on average 1.7258064516129032) internal successors, (107), 62 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-12-14 07:25:38,534 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:25:38,537 INFO L225 Difference]: With dead ends: 673 [2022-12-14 07:25:38,537 INFO L226 Difference]: Without dead ends: 561 [2022-12-14 07:25:38,538 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 227 GetRequests, 69 SyntacticMatches, 6 SemanticMatches, 152 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 6629 ImplicationChecksByTransitivity, 13.8s TimeCoverageRelationStatistics Valid=2291, Invalid=20615, Unknown=54, NotChecked=602, Total=23562 [2022-12-14 07:25:38,538 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 825 mSDsluCounter, 625 mSDsCounter, 0 mSdLazyCounter, 2199 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 825 SdHoareTripleChecker+Valid, 653 SdHoareTripleChecker+Invalid, 2541 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 2199 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 279 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-12-14 07:25:38,538 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [825 Valid, 653 Invalid, 2541 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 2199 Invalid, 0 Unknown, 279 Unchecked, 1.2s Time] [2022-12-14 07:25:38,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 561 states. [2022-12-14 07:25:38,546 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 561 to 486. [2022-12-14 07:25:38,546 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 486 states, 483 states have (on average 1.1801242236024845) internal successors, (570), 485 states have internal predecessors, (570), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:25:38,546 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 486 states to 486 states and 570 transitions. [2022-12-14 07:25:38,546 INFO L78 Accepts]: Start accepts. Automaton has 486 states and 570 transitions. Word has length 40 [2022-12-14 07:25:38,547 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:25:38,547 INFO L495 AbstractCegarLoop]: Abstraction has 486 states and 570 transitions. [2022-12-14 07:25:38,547 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 62 states have (on average 1.7258064516129032) internal successors, (107), 62 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:25:38,547 INFO L276 IsEmpty]: Start isEmpty. Operand 486 states and 570 transitions. [2022-12-14 07:25:38,547 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-12-14 07:25:38,547 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:25:38,547 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:25:38,553 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Ended with exit code 0 [2022-12-14 07:25:38,748 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-12-14 07:25:38,748 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:25:38,749 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:25:38,749 INFO L85 PathProgramCache]: Analyzing trace with hash 1712432593, now seen corresponding path program 6 times [2022-12-14 07:25:38,750 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:25:38,750 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1209297224] [2022-12-14 07:25:38,750 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:25:38,750 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:25:38,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:25:39,166 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 5 proven. 24 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-12-14 07:25:39,166 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:25:39,166 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1209297224] [2022-12-14 07:25:39,166 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1209297224] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:25:39,166 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1991062344] [2022-12-14 07:25:39,166 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 07:25:39,166 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:25:39,166 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:25:39,167 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:25:39,168 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-12-14 07:25:39,381 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 07:25:39,381 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:25:39,383 INFO L263 TraceCheckSpWp]: Trace formula consists of 332 conjuncts, 33 conjunts are in the unsatisfiable core [2022-12-14 07:25:39,385 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:25:39,631 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:39,668 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:25:39,670 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:25:39,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 07:25:39,673 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 8 proven. 21 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-12-14 07:25:39,673 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:25:39,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-12-14 07:25:39,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-12-14 07:25:39,999 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 13 proven. 16 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-12-14 07:25:39,999 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1991062344] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:25:39,999 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [424330931] [2022-12-14 07:25:40,000 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:25:40,000 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:25:40,000 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:25:40,000 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:25:40,000 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:25:40,023 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:25:40,026 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:25:40,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:25:40,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:40,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:40,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:40,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:40,204 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:40,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:40,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:40,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:40,336 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:25:40,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:25:40,446 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:25:40,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:25:40,513 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:25:40,513 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:25:40,599 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:25:40,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:25:40,640 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:25:43,060 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20565#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:25:43,061 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:25:43,061 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:25:43,061 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 35 [2022-12-14 07:25:43,061 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1808589639] [2022-12-14 07:25:43,061 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:25:43,061 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-12-14 07:25:43,061 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:25:43,062 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-12-14 07:25:43,062 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=282, Invalid=2070, Unknown=0, NotChecked=0, Total=2352 [2022-12-14 07:25:43,062 INFO L87 Difference]: Start difference. First operand 486 states and 570 transitions. Second operand has 35 states, 35 states have (on average 1.9714285714285715) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:25:44,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:25:44,109 INFO L93 Difference]: Finished difference Result 512 states and 591 transitions. [2022-12-14 07:25:44,109 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2022-12-14 07:25:44,110 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 35 states have (on average 1.9714285714285715) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-12-14 07:25:44,110 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:25:44,112 INFO L225 Difference]: With dead ends: 512 [2022-12-14 07:25:44,112 INFO L226 Difference]: Without dead ends: 508 [2022-12-14 07:25:44,112 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 88 SyntacticMatches, 0 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1263 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=670, Invalid=3752, Unknown=0, NotChecked=0, Total=4422 [2022-12-14 07:25:44,113 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 217 mSDsluCounter, 159 mSDsCounter, 0 mSdLazyCounter, 368 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 217 SdHoareTripleChecker+Valid, 175 SdHoareTripleChecker+Invalid, 374 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 368 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 07:25:44,113 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [217 Valid, 175 Invalid, 374 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 368 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 07:25:44,113 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 508 states. [2022-12-14 07:25:44,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 508 to 478. [2022-12-14 07:25:44,117 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 478 states, 475 states have (on average 1.1789473684210525) internal successors, (560), 477 states have internal predecessors, (560), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:25:44,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 478 states to 478 states and 560 transitions. [2022-12-14 07:25:44,117 INFO L78 Accepts]: Start accepts. Automaton has 478 states and 560 transitions. Word has length 41 [2022-12-14 07:25:44,118 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:25:44,118 INFO L495 AbstractCegarLoop]: Abstraction has 478 states and 560 transitions. [2022-12-14 07:25:44,118 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 35 states have (on average 1.9714285714285715) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:25:44,118 INFO L276 IsEmpty]: Start isEmpty. Operand 478 states and 560 transitions. [2022-12-14 07:25:44,118 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-12-14 07:25:44,118 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:25:44,118 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:25:44,123 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Ended with exit code 0 [2022-12-14 07:25:44,319 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable43 [2022-12-14 07:25:44,319 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:25:44,319 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:25:44,320 INFO L85 PathProgramCache]: Analyzing trace with hash -1534786857, now seen corresponding path program 7 times [2022-12-14 07:25:44,320 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:25:44,320 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [437524183] [2022-12-14 07:25:44,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:25:44,320 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:25:44,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:25:44,991 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 12 proven. 35 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-12-14 07:25:44,992 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:25:44,992 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [437524183] [2022-12-14 07:25:44,992 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [437524183] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:25:44,992 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1951237473] [2022-12-14 07:25:44,992 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 07:25:44,992 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:25:44,992 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:25:44,993 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:25:44,994 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-12-14 07:25:45,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:25:45,097 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 52 conjunts are in the unsatisfiable core [2022-12-14 07:25:45,099 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:25:45,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 07:25:45,552 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:25:45,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 15 [2022-12-14 07:25:45,554 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 13 proven. 34 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-12-14 07:25:45,554 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:25:45,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-12-14 07:25:45,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 34 [2022-12-14 07:25:46,001 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 22 proven. 25 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-12-14 07:25:46,001 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1951237473] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:25:46,001 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1722119293] [2022-12-14 07:25:46,002 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:25:46,002 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:25:46,002 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:25:46,002 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:25:46,002 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:25:46,027 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:25:46,029 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:25:46,030 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:25:46,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:46,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:46,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:46,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:46,178 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:46,204 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:46,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:46,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:46,291 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:25:46,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:25:46,393 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:25:46,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:25:46,457 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:25:46,457 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:25:46,527 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:25:46,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:25:46,565 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:25:48,909 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21892#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:25:48,909 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:25:48,909 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:25:48,909 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 18] total 47 [2022-12-14 07:25:48,912 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1692369183] [2022-12-14 07:25:48,913 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:25:48,913 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-12-14 07:25:48,913 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:25:48,913 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-12-14 07:25:48,914 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=348, Invalid=3312, Unknown=0, NotChecked=0, Total=3660 [2022-12-14 07:25:48,914 INFO L87 Difference]: Start difference. First operand 478 states and 560 transitions. Second operand has 47 states, 47 states have (on average 1.7446808510638299) internal successors, (82), 47 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:25:49,865 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:25:49,865 INFO L93 Difference]: Finished difference Result 539 states and 615 transitions. [2022-12-14 07:25:49,866 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-12-14 07:25:49,866 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 1.7446808510638299) internal successors, (82), 47 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-12-14 07:25:49,866 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:25:49,867 INFO L225 Difference]: With dead ends: 539 [2022-12-14 07:25:49,867 INFO L226 Difference]: Without dead ends: 523 [2022-12-14 07:25:49,867 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 78 SyntacticMatches, 2 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1846 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=869, Invalid=5773, Unknown=0, NotChecked=0, Total=6642 [2022-12-14 07:25:49,867 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 256 mSDsluCounter, 129 mSDsCounter, 0 mSdLazyCounter, 555 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 256 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 563 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 555 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 07:25:49,867 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [256 Valid, 140 Invalid, 563 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 555 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 07:25:49,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 523 states. [2022-12-14 07:25:49,873 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 523 to 456. [2022-12-14 07:25:49,873 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 456 states, 453 states have (on average 1.1766004415011038) internal successors, (533), 455 states have internal predecessors, (533), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:25:49,874 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 456 states to 456 states and 533 transitions. [2022-12-14 07:25:49,874 INFO L78 Accepts]: Start accepts. Automaton has 456 states and 533 transitions. Word has length 41 [2022-12-14 07:25:49,874 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:25:49,874 INFO L495 AbstractCegarLoop]: Abstraction has 456 states and 533 transitions. [2022-12-14 07:25:49,874 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 1.7446808510638299) internal successors, (82), 47 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:25:49,874 INFO L276 IsEmpty]: Start isEmpty. Operand 456 states and 533 transitions. [2022-12-14 07:25:49,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-12-14 07:25:49,875 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:25:49,875 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:25:49,880 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Ended with exit code 0 [2022-12-14 07:25:50,076 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable44,34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:25:50,076 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:25:50,077 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:25:50,077 INFO L85 PathProgramCache]: Analyzing trace with hash 218358261, now seen corresponding path program 8 times [2022-12-14 07:25:50,077 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:25:50,078 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [209880637] [2022-12-14 07:25:50,078 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:25:50,078 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:25:50,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:25:50,663 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 16 proven. 50 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 07:25:50,663 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:25:50,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [209880637] [2022-12-14 07:25:50,664 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [209880637] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:25:50,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [642869646] [2022-12-14 07:25:50,664 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:25:50,664 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:25:50,664 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:25:50,665 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:25:50,665 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-12-14 07:25:50,919 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 07:25:50,920 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:25:50,922 INFO L263 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 83 conjunts are in the unsatisfiable core [2022-12-14 07:25:50,924 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:25:51,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 07:25:51,543 INFO L321 Elim1Store]: treesize reduction 12, result has 84.4 percent of original size [2022-12-14 07:25:51,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 1 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 9 case distinctions, treesize of input 41 treesize of output 83 [2022-12-14 07:25:52,110 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 6 proven. 34 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-12-14 07:25:52,110 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:25:53,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 55 treesize of output 47 [2022-12-14 07:25:53,168 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:25:53,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 5 case distinctions, treesize of input 71 treesize of output 105 [2022-12-14 07:25:53,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 43 treesize of output 35 [2022-12-14 07:25:53,833 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 4 proven. 36 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-12-14 07:25:53,834 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [642869646] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:25:53,834 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [783046957] [2022-12-14 07:25:53,834 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:25:53,834 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:25:53,835 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:25:53,835 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:25:53,835 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:25:53,863 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:25:53,864 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:25:53,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:25:53,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:53,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:53,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:53,982 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:54,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:54,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:54,062 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:54,090 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:25:54,134 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:25:54,134 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:25:54,233 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:25:54,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:25:54,303 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:25:54,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:25:54,372 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:25:54,372 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:25:54,407 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:25:57,167 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23251#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:25:57,167 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:25:57,167 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:25:57,167 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 19, 19] total 55 [2022-12-14 07:25:57,168 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1106149559] [2022-12-14 07:25:57,168 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:25:57,168 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 56 states [2022-12-14 07:25:57,168 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:25:57,168 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2022-12-14 07:25:57,168 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=339, Invalid=4491, Unknown=0, NotChecked=0, Total=4830 [2022-12-14 07:25:57,169 INFO L87 Difference]: Start difference. First operand 456 states and 533 transitions. Second operand has 56 states, 55 states have (on average 1.9454545454545455) internal successors, (107), 56 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:26:11,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:26:11,059 INFO L93 Difference]: Finished difference Result 703 states and 790 transitions. [2022-12-14 07:26:11,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 131 states. [2022-12-14 07:26:11,059 INFO L78 Accepts]: Start accepts. Automaton has has 56 states, 55 states have (on average 1.9454545454545455) internal successors, (107), 56 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-12-14 07:26:11,059 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:26:11,060 INFO L225 Difference]: With dead ends: 703 [2022-12-14 07:26:11,060 INFO L226 Difference]: Without dead ends: 616 [2022-12-14 07:26:11,061 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 275 GetRequests, 78 SyntacticMatches, 0 SemanticMatches, 197 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10997 ImplicationChecksByTransitivity, 16.7s TimeCoverageRelationStatistics Valid=4607, Invalid=34795, Unknown=0, NotChecked=0, Total=39402 [2022-12-14 07:26:11,061 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 1502 mSDsluCounter, 205 mSDsCounter, 0 mSdLazyCounter, 3330 mSolverCounterSat, 117 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1502 SdHoareTripleChecker+Valid, 218 SdHoareTripleChecker+Invalid, 3447 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 117 IncrementalHoareTripleChecker+Valid, 3330 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-12-14 07:26:11,062 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1502 Valid, 218 Invalid, 3447 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [117 Valid, 3330 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2022-12-14 07:26:11,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 616 states. [2022-12-14 07:26:11,065 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 616 to 442. [2022-12-14 07:26:11,065 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 442 states, 439 states have (on average 1.1594533029612757) internal successors, (509), 441 states have internal predecessors, (509), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:26:11,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 442 states to 442 states and 509 transitions. [2022-12-14 07:26:11,066 INFO L78 Accepts]: Start accepts. Automaton has 442 states and 509 transitions. Word has length 43 [2022-12-14 07:26:11,066 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:26:11,066 INFO L495 AbstractCegarLoop]: Abstraction has 442 states and 509 transitions. [2022-12-14 07:26:11,066 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 56 states, 55 states have (on average 1.9454545454545455) internal successors, (107), 56 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:26:11,066 INFO L276 IsEmpty]: Start isEmpty. Operand 442 states and 509 transitions. [2022-12-14 07:26:11,066 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-12-14 07:26:11,066 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:26:11,066 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 9, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:26:11,071 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-12-14 07:26:11,267 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable45 [2022-12-14 07:26:11,267 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:26:11,267 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:26:11,267 INFO L85 PathProgramCache]: Analyzing trace with hash -127051412, now seen corresponding path program 10 times [2022-12-14 07:26:11,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:26:11,268 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2139188786] [2022-12-14 07:26:11,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:26:11,268 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:26:11,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:26:11,992 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 49 proven. 113 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:26:11,992 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:26:11,992 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2139188786] [2022-12-14 07:26:11,993 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2139188786] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:26:11,993 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [163044700] [2022-12-14 07:26:11,993 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 07:26:11,993 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:26:11,993 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:26:11,994 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:26:11,994 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-12-14 07:26:12,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:26:12,100 INFO L263 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 97 conjunts are in the unsatisfiable core [2022-12-14 07:26:12,102 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:26:12,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 07:26:13,895 INFO L321 Elim1Store]: treesize reduction 37, result has 49.3 percent of original size [2022-12-14 07:26:13,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 10 select indices, 10 select index equivalence classes, 36 disjoint index pairs (out of 45 index pairs), introduced 10 new quantified variables, introduced 45 case distinctions, treesize of input 81 treesize of output 74 [2022-12-14 07:26:13,898 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-12-14 07:26:13,944 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 9 proven. 153 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:26:13,944 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:26:15,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 134 treesize of output 116 [2022-12-14 07:26:15,256 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:26:15,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 9 select indices, 9 select index equivalence classes, 0 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 134 treesize of output 100 [2022-12-14 07:26:16,827 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 81 proven. 81 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:26:16,827 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [163044700] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:26:16,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1376344150] [2022-12-14 07:26:16,828 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 07:26:16,828 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:26:16,828 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:26:16,828 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:26:16,828 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:26:16,853 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:26:16,854 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:26:16,854 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:26:16,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:26:16,928 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:26:16,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:26:16,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:26:17,018 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:26:17,018 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:26:17,065 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:26:18,918 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '25007#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:26:18,918 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:26:18,918 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:26:18,918 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 33, 33] total 87 [2022-12-14 07:26:18,918 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1738154738] [2022-12-14 07:26:18,918 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:26:18,918 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 87 states [2022-12-14 07:26:18,918 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:26:18,919 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 87 interpolants. [2022-12-14 07:26:18,919 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=675, Invalid=8445, Unknown=0, NotChecked=0, Total=9120 [2022-12-14 07:26:18,919 INFO L87 Difference]: Start difference. First operand 442 states and 509 transitions. Second operand has 87 states, 87 states have (on average 1.4482758620689655) internal successors, (126), 87 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:26:53,438 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:26:53,438 INFO L93 Difference]: Finished difference Result 1301 states and 1405 transitions. [2022-12-14 07:26:53,438 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 145 states. [2022-12-14 07:26:53,438 INFO L78 Accepts]: Start accepts. Automaton has has 87 states, 87 states have (on average 1.4482758620689655) internal successors, (126), 87 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-12-14 07:26:53,438 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:26:53,440 INFO L225 Difference]: With dead ends: 1301 [2022-12-14 07:26:53,440 INFO L226 Difference]: Without dead ends: 1281 [2022-12-14 07:26:53,442 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 293 GetRequests, 56 SyntacticMatches, 1 SemanticMatches, 236 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14825 ImplicationChecksByTransitivity, 36.8s TimeCoverageRelationStatistics Valid=6319, Invalid=50087, Unknown=0, NotChecked=0, Total=56406 [2022-12-14 07:26:53,442 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 2193 mSDsluCounter, 409 mSDsCounter, 0 mSdLazyCounter, 6032 mSolverCounterSat, 104 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2193 SdHoareTripleChecker+Valid, 423 SdHoareTripleChecker+Invalid, 6136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 104 IncrementalHoareTripleChecker+Valid, 6032 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2022-12-14 07:26:53,442 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2193 Valid, 423 Invalid, 6136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [104 Valid, 6032 Invalid, 0 Unknown, 0 Unchecked, 3.4s Time] [2022-12-14 07:26:53,443 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1281 states. [2022-12-14 07:26:53,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1281 to 536. [2022-12-14 07:26:53,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 536 states, 533 states have (on average 1.1632270168855534) internal successors, (620), 535 states have internal predecessors, (620), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:26:53,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 536 states to 536 states and 620 transitions. [2022-12-14 07:26:53,448 INFO L78 Accepts]: Start accepts. Automaton has 536 states and 620 transitions. Word has length 43 [2022-12-14 07:26:53,448 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:26:53,448 INFO L495 AbstractCegarLoop]: Abstraction has 536 states and 620 transitions. [2022-12-14 07:26:53,448 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 87 states, 87 states have (on average 1.4482758620689655) internal successors, (126), 87 states have internal predecessors, (126), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:26:53,449 INFO L276 IsEmpty]: Start isEmpty. Operand 536 states and 620 transitions. [2022-12-14 07:26:53,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-12-14 07:26:53,449 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:26:53,449 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:26:53,454 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-12-14 07:26:53,649 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-12-14 07:26:53,650 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:26:53,651 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:26:53,651 INFO L85 PathProgramCache]: Analyzing trace with hash -1433198217, now seen corresponding path program 9 times [2022-12-14 07:26:53,651 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:26:53,651 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1112600596] [2022-12-14 07:26:53,652 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:26:53,652 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:26:53,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:26:54,000 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 4 proven. 44 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 07:26:54,000 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:26:54,001 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1112600596] [2022-12-14 07:26:54,001 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1112600596] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:26:54,001 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1805429482] [2022-12-14 07:26:54,001 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 07:26:54,001 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:26:54,001 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:26:54,002 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:26:54,003 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-12-14 07:26:54,220 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 07:26:54,220 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:26:54,223 INFO L263 TraceCheckSpWp]: Trace formula consists of 361 conjuncts, 51 conjunts are in the unsatisfiable core [2022-12-14 07:26:54,224 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:26:54,344 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 07:26:54,344 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:26:54,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 07:26:54,594 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 07:26:54,594 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1805429482] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:26:54,594 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [105475740] [2022-12-14 07:26:54,595 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:26:54,595 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:26:54,595 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:26:54,595 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:26:54,595 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:26:54,617 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:26:54,619 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:26:54,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:26:54,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:26:54,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:26:54,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:26:54,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:26:54,766 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:26:54,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:26:54,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:26:54,830 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:26:54,883 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:26:54,883 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:26:54,963 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:26:55,006 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-12-14 07:26:55,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-12-14 07:26:55,096 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:26:55,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:26:55,168 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:26:55,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:26:55,206 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:26:57,455 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '27426#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:26:57,455 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:26:57,455 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:26:57,456 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 30 [2022-12-14 07:26:57,456 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [979376542] [2022-12-14 07:26:57,456 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:26:57,456 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-12-14 07:26:57,456 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:26:57,456 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-12-14 07:26:57,456 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=194, Invalid=1786, Unknown=0, NotChecked=0, Total=1980 [2022-12-14 07:26:57,456 INFO L87 Difference]: Start difference. First operand 536 states and 620 transitions. Second operand has 31 states, 30 states have (on average 2.566666666666667) internal successors, (77), 31 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:26:58,163 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:26:58,163 INFO L93 Difference]: Finished difference Result 590 states and 665 transitions. [2022-12-14 07:26:58,164 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-12-14 07:26:58,164 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 2.566666666666667) internal successors, (77), 31 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-12-14 07:26:58,164 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:26:58,164 INFO L225 Difference]: With dead ends: 590 [2022-12-14 07:26:58,164 INFO L226 Difference]: Without dead ends: 590 [2022-12-14 07:26:58,165 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 160 GetRequests, 96 SyntacticMatches, 5 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 893 ImplicationChecksByTransitivity, 2.9s TimeCoverageRelationStatistics Valid=497, Invalid=3163, Unknown=0, NotChecked=0, Total=3660 [2022-12-14 07:26:58,165 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 296 mSDsluCounter, 227 mSDsCounter, 0 mSdLazyCounter, 812 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 296 SdHoareTripleChecker+Valid, 246 SdHoareTripleChecker+Invalid, 814 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 812 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 07:26:58,165 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [296 Valid, 246 Invalid, 814 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 812 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 07:26:58,166 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 590 states. [2022-12-14 07:26:58,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 590 to 549. [2022-12-14 07:26:58,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 549 states, 546 states have (on average 1.1593406593406594) internal successors, (633), 548 states have internal predecessors, (633), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:26:58,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 549 states to 549 states and 633 transitions. [2022-12-14 07:26:58,171 INFO L78 Accepts]: Start accepts. Automaton has 549 states and 633 transitions. Word has length 44 [2022-12-14 07:26:58,172 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:26:58,172 INFO L495 AbstractCegarLoop]: Abstraction has 549 states and 633 transitions. [2022-12-14 07:26:58,172 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 2.566666666666667) internal successors, (77), 31 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:26:58,172 INFO L276 IsEmpty]: Start isEmpty. Operand 549 states and 633 transitions. [2022-12-14 07:26:58,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-12-14 07:26:58,173 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:26:58,173 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 10, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:26:58,177 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Ended with exit code 0 [2022-12-14 07:26:58,373 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-12-14 07:26:58,374 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:26:58,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:26:58,375 INFO L85 PathProgramCache]: Analyzing trace with hash 1395084003, now seen corresponding path program 11 times [2022-12-14 07:26:58,375 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:26:58,375 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1737586425] [2022-12-14 07:26:58,376 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:26:58,376 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:26:58,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:26:59,163 INFO L134 CoverageAnalysis]: Checked inductivity of 200 backedges. 64 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:26:59,163 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:26:59,163 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1737586425] [2022-12-14 07:26:59,163 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1737586425] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:26:59,164 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1910367897] [2022-12-14 07:26:59,164 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:26:59,164 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:26:59,164 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:26:59,165 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:26:59,165 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-12-14 07:26:59,353 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2022-12-14 07:26:59,353 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:26:59,356 INFO L263 TraceCheckSpWp]: Trace formula consists of 336 conjuncts, 115 conjunts are in the unsatisfiable core [2022-12-14 07:26:59,358 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:26:59,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 07:27:01,845 INFO L321 Elim1Store]: treesize reduction 41, result has 49.4 percent of original size [2022-12-14 07:27:01,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 11 select indices, 11 select index equivalence classes, 45 disjoint index pairs (out of 55 index pairs), introduced 11 new quantified variables, introduced 55 case distinctions, treesize of input 89 treesize of output 82 [2022-12-14 07:27:01,847 WARN L718 sPolynomialRelations]: Constructing 512(two to the power of 9 dual juncts. [2022-12-14 07:27:01,903 INFO L134 CoverageAnalysis]: Checked inductivity of 200 backedges. 10 proven. 190 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:27:01,903 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:27:03,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 149 treesize of output 129 [2022-12-14 07:27:03,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 10 select indices, 10 select index equivalence classes, 45 disjoint index pairs (out of 45 index pairs), introduced 10 new quantified variables, introduced 0 case distinctions, treesize of input 149 treesize of output 111 [2022-12-14 07:27:05,844 WARN L718 sPolynomialRelations]: Constructing 1024(two to the power of 10 dual juncts. [2022-12-14 07:27:05,857 INFO L134 CoverageAnalysis]: Checked inductivity of 200 backedges. 100 proven. 100 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:27:05,857 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1910367897] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:27:05,857 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [921034311] [2022-12-14 07:27:05,857 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 07:27:05,857 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:27:05,857 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:27:05,858 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:27:05,858 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:27:05,886 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:27:05,887 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:27:05,887 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:27:05,922 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:27:05,951 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:27:05,966 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:27:06,001 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:27:06,046 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:27:06,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:27:06,094 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:27:08,027 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '28981#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:27:08,027 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:27:08,027 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:27:08,028 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 36, 36] total 94 [2022-12-14 07:27:08,028 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1352291187] [2022-12-14 07:27:08,028 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:27:08,028 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 94 states [2022-12-14 07:27:08,028 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:27:08,029 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 94 interpolants. [2022-12-14 07:27:08,029 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=702, Invalid=9804, Unknown=0, NotChecked=0, Total=10506 [2022-12-14 07:27:08,029 INFO L87 Difference]: Start difference. First operand 549 states and 633 transitions. Second operand has 94 states, 94 states have (on average 1.4574468085106382) internal successors, (137), 94 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:28:10,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:28:10,088 INFO L93 Difference]: Finished difference Result 1723 states and 1865 transitions. [2022-12-14 07:28:10,088 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 179 states. [2022-12-14 07:28:10,088 INFO L78 Accepts]: Start accepts. Automaton has has 94 states, 94 states have (on average 1.4574468085106382) internal successors, (137), 94 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-12-14 07:28:10,088 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:28:10,090 INFO L225 Difference]: With dead ends: 1723 [2022-12-14 07:28:10,090 INFO L226 Difference]: Without dead ends: 1701 [2022-12-14 07:28:10,093 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 342 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 278 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20485 ImplicationChecksByTransitivity, 63.7s TimeCoverageRelationStatistics Valid=7828, Invalid=70292, Unknown=0, NotChecked=0, Total=78120 [2022-12-14 07:28:10,094 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 2995 mSDsluCounter, 607 mSDsCounter, 0 mSdLazyCounter, 9915 mSolverCounterSat, 133 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2995 SdHoareTripleChecker+Valid, 624 SdHoareTripleChecker+Invalid, 10048 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 133 IncrementalHoareTripleChecker+Valid, 9915 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.6s IncrementalHoareTripleChecker+Time [2022-12-14 07:28:10,094 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2995 Valid, 624 Invalid, 10048 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [133 Valid, 9915 Invalid, 0 Unknown, 0 Unchecked, 5.6s Time] [2022-12-14 07:28:10,094 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1701 states. [2022-12-14 07:28:10,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1701 to 655. [2022-12-14 07:28:10,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 655 states, 652 states have (on average 1.1702453987730062) internal successors, (763), 654 states have internal predecessors, (763), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:28:10,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 655 states to 655 states and 763 transitions. [2022-12-14 07:28:10,101 INFO L78 Accepts]: Start accepts. Automaton has 655 states and 763 transitions. Word has length 47 [2022-12-14 07:28:10,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:28:10,101 INFO L495 AbstractCegarLoop]: Abstraction has 655 states and 763 transitions. [2022-12-14 07:28:10,101 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 94 states, 94 states have (on average 1.4574468085106382) internal successors, (137), 94 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:28:10,101 INFO L276 IsEmpty]: Start isEmpty. Operand 655 states and 763 transitions. [2022-12-14 07:28:10,102 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-12-14 07:28:10,102 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:28:10,102 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:28:10,108 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-12-14 07:28:10,303 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-12-14 07:28:10,303 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:28:10,304 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:28:10,304 INFO L85 PathProgramCache]: Analyzing trace with hash 11910975, now seen corresponding path program 10 times [2022-12-14 07:28:10,304 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:28:10,304 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1994884301] [2022-12-14 07:28:10,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:28:10,305 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:28:10,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:28:11,674 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 17 proven. 74 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:28:11,675 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:28:11,675 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1994884301] [2022-12-14 07:28:11,675 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1994884301] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:28:11,675 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2044180698] [2022-12-14 07:28:11,675 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 07:28:11,675 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:28:11,675 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:28:11,676 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:28:11,676 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-12-14 07:28:11,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:28:11,788 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 122 conjunts are in the unsatisfiable core [2022-12-14 07:28:11,790 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:28:12,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:28:12,330 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:28:12,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 23 [2022-12-14 07:28:12,687 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-12-14 07:28:12,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 35 treesize of output 45 [2022-12-14 07:28:12,694 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 07:28:12,701 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:28:12,702 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:28:12,703 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:28:12,703 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 10 [2022-12-14 07:28:12,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-12-14 07:28:13,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-12-14 07:28:13,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-12-14 07:28:13,299 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:28:13,299 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:28:13,300 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:28:13,301 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-12-14 07:28:13,303 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 10 proven. 81 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:28:13,303 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:28:19,543 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1687 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1687) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-12-14 07:28:24,037 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1687 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1687) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-12-14 07:28:26,549 INFO L321 Elim1Store]: treesize reduction 17, result has 54.1 percent of original size [2022-12-14 07:28:26,549 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 65 treesize of output 69 [2022-12-14 07:28:26,556 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:28:26,559 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:28:26,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 1 case distinctions, treesize of input 44 treesize of output 35 [2022-12-14 07:28:26,562 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 07:28:27,837 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 14 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 11 not checked. [2022-12-14 07:28:27,838 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2044180698] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:28:27,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [53875567] [2022-12-14 07:28:27,839 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:28:27,839 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:28:27,839 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:28:27,839 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:28:27,839 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:28:27,868 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:28:27,871 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:28:27,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:28:27,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:28:27,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:28:27,946 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:28:27,989 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 07:28:27,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-12-14 07:28:28,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:28:28,074 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:28:28,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:28:28,135 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:28:28,136 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:28:28,225 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:28:28,256 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-12-14 07:28:28,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-12-14 07:28:28,344 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:28:28,344 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:28:28,418 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:28:28,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:28:28,451 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:28:31,234 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '32089#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:28:31,234 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:28:31,234 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:28:31,234 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [33, 30, 30] total 85 [2022-12-14 07:28:31,234 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [792615450] [2022-12-14 07:28:31,234 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:28:31,235 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 85 states [2022-12-14 07:28:31,235 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:28:31,235 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 85 interpolants. [2022-12-14 07:28:31,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=521, Invalid=8721, Unknown=78, NotChecked=382, Total=9702 [2022-12-14 07:28:31,236 INFO L87 Difference]: Start difference. First operand 655 states and 763 transitions. Second operand has 85 states, 85 states have (on average 1.5411764705882354) internal successors, (131), 85 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:28:52,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:28:52,863 INFO L93 Difference]: Finished difference Result 1396 states and 1613 transitions. [2022-12-14 07:28:52,863 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 107 states. [2022-12-14 07:28:52,864 INFO L78 Accepts]: Start accepts. Automaton has has 85 states, 85 states have (on average 1.5411764705882354) internal successors, (131), 85 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 48 [2022-12-14 07:28:52,864 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:28:52,865 INFO L225 Difference]: With dead ends: 1396 [2022-12-14 07:28:52,865 INFO L226 Difference]: Without dead ends: 1296 [2022-12-14 07:28:52,867 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 276 GetRequests, 78 SyntacticMatches, 2 SemanticMatches, 196 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 12598 ImplicationChecksByTransitivity, 38.2s TimeCoverageRelationStatistics Valid=3631, Invalid=34516, Unknown=81, NotChecked=778, Total=39006 [2022-12-14 07:28:52,867 INFO L413 NwaCegarLoop]: 38 mSDtfsCounter, 1228 mSDsluCounter, 869 mSDsCounter, 0 mSdLazyCounter, 2762 mSolverCounterSat, 97 mSolverCounterUnsat, 80 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1228 SdHoareTripleChecker+Valid, 907 SdHoareTripleChecker+Invalid, 3229 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 97 IncrementalHoareTripleChecker+Valid, 2762 IncrementalHoareTripleChecker+Invalid, 80 IncrementalHoareTripleChecker+Unknown, 290 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-12-14 07:28:52,867 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1228 Valid, 907 Invalid, 3229 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [97 Valid, 2762 Invalid, 80 Unknown, 290 Unchecked, 1.9s Time] [2022-12-14 07:28:52,868 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1296 states. [2022-12-14 07:28:52,873 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1296 to 690. [2022-12-14 07:28:52,873 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 690 states, 687 states have (on average 1.1703056768558953) internal successors, (804), 689 states have internal predecessors, (804), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:28:52,874 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 690 states to 690 states and 804 transitions. [2022-12-14 07:28:52,874 INFO L78 Accepts]: Start accepts. Automaton has 690 states and 804 transitions. Word has length 48 [2022-12-14 07:28:52,874 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:28:52,874 INFO L495 AbstractCegarLoop]: Abstraction has 690 states and 804 transitions. [2022-12-14 07:28:52,874 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 85 states, 85 states have (on average 1.5411764705882354) internal successors, (131), 85 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:28:52,874 INFO L276 IsEmpty]: Start isEmpty. Operand 690 states and 804 transitions. [2022-12-14 07:28:52,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-14 07:28:52,875 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:28:52,875 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 4, 4, 4, 4, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:28:52,880 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Ended with exit code 0 [2022-12-14 07:28:53,075 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-12-14 07:28:53,077 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:28:53,077 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:28:53,077 INFO L85 PathProgramCache]: Analyzing trace with hash -809824903, now seen corresponding path program 9 times [2022-12-14 07:28:53,078 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:28:53,078 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [959036367] [2022-12-14 07:28:53,078 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:28:53,078 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:28:53,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:28:53,472 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 8 proven. 37 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-12-14 07:28:53,472 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:28:53,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [959036367] [2022-12-14 07:28:53,472 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [959036367] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:28:53,472 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [837655737] [2022-12-14 07:28:53,472 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 07:28:53,472 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:28:53,472 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:28:53,473 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:28:53,474 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-12-14 07:28:53,759 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 07:28:53,759 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:28:53,762 INFO L263 TraceCheckSpWp]: Trace formula consists of 389 conjuncts, 47 conjunts are in the unsatisfiable core [2022-12-14 07:28:53,763 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:28:54,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 07:28:54,094 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:28:54,096 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:28:54,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-12-14 07:28:54,115 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 13 proven. 32 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-12-14 07:28:54,115 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:28:54,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-12-14 07:28:54,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 12 [2022-12-14 07:28:54,510 INFO L134 CoverageAnalysis]: Checked inductivity of 83 backedges. 20 proven. 25 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-12-14 07:28:54,510 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [837655737] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:28:54,511 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1108892313] [2022-12-14 07:28:54,511 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:28:54,511 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:28:54,511 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:28:54,511 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:28:54,511 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:28:54,537 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:28:54,539 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:28:54,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:28:54,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:28:54,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:28:54,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:28:54,657 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 07:28:54,657 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-12-14 07:28:54,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:28:54,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:28:54,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:28:54,796 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:28:54,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:28:54,900 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:28:54,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:28:54,967 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:28:54,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:28:55,039 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:28:55,039 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:28:55,085 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:28:56,912 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '34719#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:28:56,913 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:28:56,913 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:28:56,913 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 42 [2022-12-14 07:28:56,913 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1330279622] [2022-12-14 07:28:56,913 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:28:56,913 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2022-12-14 07:28:56,913 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:28:56,913 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2022-12-14 07:28:56,914 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=405, Invalid=2675, Unknown=0, NotChecked=0, Total=3080 [2022-12-14 07:28:56,914 INFO L87 Difference]: Start difference. First operand 690 states and 804 transitions. Second operand has 42 states, 42 states have (on average 1.9523809523809523) internal successors, (82), 42 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:28:57,524 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:28:57,524 INFO L93 Difference]: Finished difference Result 710 states and 815 transitions. [2022-12-14 07:28:57,524 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-12-14 07:28:57,524 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 1.9523809523809523) internal successors, (82), 42 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-12-14 07:28:57,524 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:28:57,525 INFO L225 Difference]: With dead ends: 710 [2022-12-14 07:28:57,525 INFO L226 Difference]: Without dead ends: 702 [2022-12-14 07:28:57,526 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 180 GetRequests, 107 SyntacticMatches, 0 SemanticMatches, 73 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1848 ImplicationChecksByTransitivity, 2.9s TimeCoverageRelationStatistics Valid=880, Invalid=4670, Unknown=0, NotChecked=0, Total=5550 [2022-12-14 07:28:57,526 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 203 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 411 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 203 SdHoareTripleChecker+Valid, 200 SdHoareTripleChecker+Invalid, 417 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 411 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 07:28:57,526 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [203 Valid, 200 Invalid, 417 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 411 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 07:28:57,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 702 states. [2022-12-14 07:28:57,530 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 702 to 647. [2022-12-14 07:28:57,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 647 states, 644 states have (on average 1.1677018633540373) internal successors, (752), 646 states have internal predecessors, (752), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:28:57,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 647 states to 647 states and 752 transitions. [2022-12-14 07:28:57,531 INFO L78 Accepts]: Start accepts. Automaton has 647 states and 752 transitions. Word has length 49 [2022-12-14 07:28:57,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:28:57,531 INFO L495 AbstractCegarLoop]: Abstraction has 647 states and 752 transitions. [2022-12-14 07:28:57,531 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 42 states have (on average 1.9523809523809523) internal successors, (82), 42 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:28:57,531 INFO L276 IsEmpty]: Start isEmpty. Operand 647 states and 752 transitions. [2022-12-14 07:28:57,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-14 07:28:57,531 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:28:57,532 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:28:57,537 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Ended with exit code 0 [2022-12-14 07:28:57,732 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:28:57,733 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:28:57,733 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:28:57,733 INFO L85 PathProgramCache]: Analyzing trace with hash -559442817, now seen corresponding path program 10 times [2022-12-14 07:28:57,734 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:28:57,734 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [860919692] [2022-12-14 07:28:57,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:28:57,734 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:28:57,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:28:58,681 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 12 proven. 51 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-12-14 07:28:58,681 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:28:58,681 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [860919692] [2022-12-14 07:28:58,681 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [860919692] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:28:58,681 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [361795197] [2022-12-14 07:28:58,681 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 07:28:58,681 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:28:58,681 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:28:58,682 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:28:58,683 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-12-14 07:28:58,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:28:58,813 INFO L263 TraceCheckSpWp]: Trace formula consists of 380 conjuncts, 54 conjunts are in the unsatisfiable core [2022-12-14 07:28:58,815 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:28:59,287 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 07:28:59,484 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:28:59,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 15 [2022-12-14 07:28:59,487 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-12-14 07:28:59,487 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:28:59,608 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-12-14 07:28:59,610 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 34 [2022-12-14 07:29:00,315 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 27 proven. 36 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-12-14 07:29:00,315 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [361795197] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:29:00,316 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1967590859] [2022-12-14 07:29:00,316 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:29:00,316 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:29:00,317 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:29:00,317 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:29:00,317 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:29:00,345 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:29:00,348 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:29:00,348 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:29:00,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:29:00,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:00,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:29:00,475 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 07:29:00,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-12-14 07:29:00,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:00,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:00,598 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:00,640 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:29:00,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:29:00,741 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:29:00,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:29:00,805 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:29:00,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:29:00,890 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:29:00,890 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:29:00,933 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:29:03,393 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '36470#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:29:03,393 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:29:03,393 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:29:03,393 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 20, 20] total 54 [2022-12-14 07:29:03,393 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1566607401] [2022-12-14 07:29:03,393 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:29:03,393 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-12-14 07:29:03,393 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:29:03,394 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-12-14 07:29:03,394 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=388, Invalid=4168, Unknown=0, NotChecked=0, Total=4556 [2022-12-14 07:29:03,394 INFO L87 Difference]: Start difference. First operand 647 states and 752 transitions. Second operand has 54 states, 54 states have (on average 1.7407407407407407) internal successors, (94), 54 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:29:04,991 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:29:04,991 INFO L93 Difference]: Finished difference Result 742 states and 842 transitions. [2022-12-14 07:29:04,992 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-12-14 07:29:04,992 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 1.7407407407407407) internal successors, (94), 54 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-12-14 07:29:04,992 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:29:04,993 INFO L225 Difference]: With dead ends: 742 [2022-12-14 07:29:04,993 INFO L226 Difference]: Without dead ends: 734 [2022-12-14 07:29:04,994 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 193 GetRequests, 98 SyntacticMatches, 2 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2434 ImplicationChecksByTransitivity, 5.1s TimeCoverageRelationStatistics Valid=1031, Invalid=7899, Unknown=0, NotChecked=0, Total=8930 [2022-12-14 07:29:04,994 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 434 mSDsluCounter, 324 mSDsCounter, 0 mSdLazyCounter, 924 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 434 SdHoareTripleChecker+Valid, 352 SdHoareTripleChecker+Invalid, 936 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 924 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 07:29:04,994 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [434 Valid, 352 Invalid, 936 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 924 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 07:29:04,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 734 states. [2022-12-14 07:29:04,998 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 734 to 635. [2022-12-14 07:29:04,999 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 635 states, 632 states have (on average 1.1661392405063291) internal successors, (737), 634 states have internal predecessors, (737), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:29:04,999 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 635 states to 635 states and 737 transitions. [2022-12-14 07:29:04,999 INFO L78 Accepts]: Start accepts. Automaton has 635 states and 737 transitions. Word has length 49 [2022-12-14 07:29:04,999 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:29:04,999 INFO L495 AbstractCegarLoop]: Abstraction has 635 states and 737 transitions. [2022-12-14 07:29:04,999 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 1.7407407407407407) internal successors, (94), 54 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:29:05,000 INFO L276 IsEmpty]: Start isEmpty. Operand 635 states and 737 transitions. [2022-12-14 07:29:05,000 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-14 07:29:05,000 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:29:05,000 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:29:05,004 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Forceful destruction successful, exit code 0 [2022-12-14 07:29:05,201 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable51,41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:29:05,201 INFO L420 AbstractCegarLoop]: === Iteration 53 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:29:05,202 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:29:05,202 INFO L85 PathProgramCache]: Analyzing trace with hash 1886714977, now seen corresponding path program 11 times [2022-12-14 07:29:05,202 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:29:05,203 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [478688969] [2022-12-14 07:29:05,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:29:05,203 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:29:05,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:29:06,216 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 10 proven. 91 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:29:06,216 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:29:06,216 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [478688969] [2022-12-14 07:29:06,216 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [478688969] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:29:06,216 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1988747459] [2022-12-14 07:29:06,216 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:29:06,216 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:29:06,216 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:29:06,217 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:29:06,217 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Waiting until timeout for monitored process [2022-12-14 07:29:06,579 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-12-14 07:29:06,579 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:29:06,582 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 100 conjunts are in the unsatisfiable core [2022-12-14 07:29:06,585 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:29:06,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 07:29:06,819 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:06,863 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 07:29:06,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 07:29:07,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 07:29:07,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 07:29:07,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 07:29:07,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 07:29:07,205 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 10 proven. 56 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-12-14 07:29:07,205 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:29:07,211 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1913 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1913) |c_ULTIMATE.start_cstrcat_~s2#1.base|) |c_ULTIMATE.start_cstrcat_~s2#1.offset|) 0)) is different from false [2022-12-14 07:29:07,215 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1913 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1913) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-12-14 07:29:22,428 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1913 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1913) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-12-14 07:29:22,433 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1910 (Array Int Int)) (v_ArrVal_1913 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1910) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1913) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-12-14 07:29:22,438 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1913 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_1913) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 4 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-12-14 07:29:22,445 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1913 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1913) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 4 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-12-14 07:29:22,448 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:29:22,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 07:29:22,452 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:29:22,452 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 07:29:22,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 07:29:22,707 INFO L134 CoverageAnalysis]: Checked inductivity of 102 backedges. 10 proven. 26 refuted. 0 times theorem prover too weak. 36 trivial. 30 not checked. [2022-12-14 07:29:22,707 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1988747459] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:29:22,707 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1242689198] [2022-12-14 07:29:22,708 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:29:22,708 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:29:22,708 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:29:22,708 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:29:22,708 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:29:22,733 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:29:22,735 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:29:22,735 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:29:22,769 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:22,799 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:22,819 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:22,855 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-12-14 07:29:22,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:22,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:22,990 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-12-14 07:29:22,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-12-14 07:29:23,133 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-12-14 07:29:23,134 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-12-14 07:29:23,843 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:29:23,847 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:29:23,913 INFO L321 Elim1Store]: treesize reduction 201, result has 26.9 percent of original size [2022-12-14 07:29:23,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1021 treesize of output 1033 [2022-12-14 07:29:24,955 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:29:24,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:29:25,033 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:29:25,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:29:25,094 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:29:28,395 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '38272#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:29:28,396 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:29:28,396 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:29:28,396 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 21, 21] total 63 [2022-12-14 07:29:28,396 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1247418115] [2022-12-14 07:29:28,396 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:29:28,396 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 63 states [2022-12-14 07:29:28,396 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:29:28,396 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 63 interpolants. [2022-12-14 07:29:28,397 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=281, Invalid=4662, Unknown=51, NotChecked=858, Total=5852 [2022-12-14 07:29:28,397 INFO L87 Difference]: Start difference. First operand 635 states and 737 transitions. Second operand has 63 states, 63 states have (on average 1.8253968253968254) internal successors, (115), 63 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:29:30,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:29:30,513 INFO L93 Difference]: Finished difference Result 913 states and 1054 transitions. [2022-12-14 07:29:30,514 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-12-14 07:29:30,514 INFO L78 Accepts]: Start accepts. Automaton has has 63 states, 63 states have (on average 1.8253968253968254) internal successors, (115), 63 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-12-14 07:29:30,514 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:29:30,515 INFO L225 Difference]: With dead ends: 913 [2022-12-14 07:29:30,515 INFO L226 Difference]: Without dead ends: 845 [2022-12-14 07:29:30,516 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 205 GetRequests, 102 SyntacticMatches, 4 SemanticMatches, 99 ConstructedPredicates, 6 IntricatePredicates, 0 DeprecatedPredicates, 2185 ImplicationChecksByTransitivity, 20.7s TimeCoverageRelationStatistics Valid=585, Invalid=8318, Unknown=51, NotChecked=1146, Total=10100 [2022-12-14 07:29:30,516 INFO L413 NwaCegarLoop]: 42 mSDtfsCounter, 288 mSDsluCounter, 863 mSDsCounter, 0 mSdLazyCounter, 2437 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 905 SdHoareTripleChecker+Invalid, 3119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 2437 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 664 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-12-14 07:29:30,516 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [288 Valid, 905 Invalid, 3119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 2437 Invalid, 0 Unknown, 664 Unchecked, 0.9s Time] [2022-12-14 07:29:30,516 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 845 states. [2022-12-14 07:29:30,521 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 845 to 774. [2022-12-14 07:29:30,521 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 774 states, 771 states have (on average 1.1776913099870299) internal successors, (908), 773 states have internal predecessors, (908), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:29:30,522 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 774 states to 774 states and 908 transitions. [2022-12-14 07:29:30,522 INFO L78 Accepts]: Start accepts. Automaton has 774 states and 908 transitions. Word has length 50 [2022-12-14 07:29:30,522 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:29:30,522 INFO L495 AbstractCegarLoop]: Abstraction has 774 states and 908 transitions. [2022-12-14 07:29:30,522 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 63 states, 63 states have (on average 1.8253968253968254) internal successors, (115), 63 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:29:30,522 INFO L276 IsEmpty]: Start isEmpty. Operand 774 states and 908 transitions. [2022-12-14 07:29:30,523 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-12-14 07:29:30,523 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:29:30,523 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 5, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:29:30,528 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Forceful destruction successful, exit code 0 [2022-12-14 07:29:30,723 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable52,42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:29:30,724 INFO L420 AbstractCegarLoop]: === Iteration 54 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:29:30,724 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:29:30,725 INFO L85 PathProgramCache]: Analyzing trace with hash 798480541, now seen corresponding path program 11 times [2022-12-14 07:29:30,725 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:29:30,725 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1763332176] [2022-12-14 07:29:30,725 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:29:30,726 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:29:30,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:29:31,261 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 25 proven. 65 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 07:29:31,261 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:29:31,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1763332176] [2022-12-14 07:29:31,261 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1763332176] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:29:31,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [562716540] [2022-12-14 07:29:31,261 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:29:31,261 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:29:31,261 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:29:31,262 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:29:31,263 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Waiting until timeout for monitored process [2022-12-14 07:29:31,573 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 07:29:31,574 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:29:31,576 INFO L263 TraceCheckSpWp]: Trace formula consists of 354 conjuncts, 77 conjunts are in the unsatisfiable core [2022-12-14 07:29:31,579 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:29:31,591 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 07:29:31,591 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 07:29:31,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:33,986 INFO L321 Elim1Store]: treesize reduction 12, result has 87.6 percent of original size [2022-12-14 07:29:33,986 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 42 treesize of output 103 [2022-12-14 07:29:34,829 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 11 proven. 46 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2022-12-14 07:29:34,829 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:29:36,149 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 53 treesize of output 45 [2022-12-14 07:29:36,181 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:29:36,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 85 treesize of output 125 [2022-12-14 07:29:37,160 INFO L134 CoverageAnalysis]: Checked inductivity of 99 backedges. 9 proven. 48 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2022-12-14 07:29:37,160 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [562716540] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:29:37,160 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1065931357] [2022-12-14 07:29:37,161 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:29:37,161 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:29:37,161 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:29:37,161 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:29:37,161 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:29:37,187 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:29:37,189 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:29:37,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:29:37,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:37,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:37,273 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:37,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-12-14 07:29:37,346 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:37,364 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:29:37,454 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-12-14 07:29:37,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-12-14 07:29:37,578 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-12-14 07:29:37,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-12-14 07:29:38,080 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:29:38,080 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:29:38,143 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:29:38,143 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:29:38,223 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:29:38,223 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:29:38,260 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:29:41,367 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '40386#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:29:41,367 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:29:41,367 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:29:41,368 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 21, 21] total 61 [2022-12-14 07:29:41,368 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [960397304] [2022-12-14 07:29:41,368 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:29:41,368 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-12-14 07:29:41,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:29:41,368 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-12-14 07:29:41,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=427, Invalid=5273, Unknown=0, NotChecked=0, Total=5700 [2022-12-14 07:29:41,369 INFO L87 Difference]: Start difference. First operand 774 states and 908 transitions. Second operand has 62 states, 61 states have (on average 2.0491803278688523) internal successors, (125), 62 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:30:06,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:30:06,580 INFO L93 Difference]: Finished difference Result 1081 states and 1218 transitions. [2022-12-14 07:30:06,580 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 175 states. [2022-12-14 07:30:06,580 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 61 states have (on average 2.0491803278688523) internal successors, (125), 62 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-12-14 07:30:06,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:30:06,582 INFO L225 Difference]: With dead ends: 1081 [2022-12-14 07:30:06,582 INFO L226 Difference]: Without dead ends: 992 [2022-12-14 07:30:06,584 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 345 GetRequests, 98 SyntacticMatches, 0 SemanticMatches, 247 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14529 ImplicationChecksByTransitivity, 30.2s TimeCoverageRelationStatistics Valid=12263, Invalid=49489, Unknown=0, NotChecked=0, Total=61752 [2022-12-14 07:30:06,584 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 1531 mSDsluCounter, 169 mSDsCounter, 0 mSdLazyCounter, 3142 mSolverCounterSat, 117 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1531 SdHoareTripleChecker+Valid, 181 SdHoareTripleChecker+Invalid, 3259 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 117 IncrementalHoareTripleChecker+Valid, 3142 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:30:06,584 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1531 Valid, 181 Invalid, 3259 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [117 Valid, 3142 Invalid, 0 Unknown, 0 Unchecked, 2.1s Time] [2022-12-14 07:30:06,585 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 992 states. [2022-12-14 07:30:06,590 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 992 to 768. [2022-12-14 07:30:06,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 768 states, 765 states have (on average 1.1516339869281045) internal successors, (881), 767 states have internal predecessors, (881), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:30:06,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 768 states to 768 states and 881 transitions. [2022-12-14 07:30:06,591 INFO L78 Accepts]: Start accepts. Automaton has 768 states and 881 transitions. Word has length 51 [2022-12-14 07:30:06,591 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:30:06,591 INFO L495 AbstractCegarLoop]: Abstraction has 768 states and 881 transitions. [2022-12-14 07:30:06,591 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 61 states have (on average 2.0491803278688523) internal successors, (125), 62 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:30:06,591 INFO L276 IsEmpty]: Start isEmpty. Operand 768 states and 881 transitions. [2022-12-14 07:30:06,591 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-12-14 07:30:06,591 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:30:06,591 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 8, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:30:06,597 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Ended with exit code 0 [2022-12-14 07:30:06,792 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 43 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable53 [2022-12-14 07:30:06,792 INFO L420 AbstractCegarLoop]: === Iteration 55 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:30:06,792 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:30:06,793 INFO L85 PathProgramCache]: Analyzing trace with hash 1817149097, now seen corresponding path program 12 times [2022-12-14 07:30:06,793 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:30:06,793 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1850822939] [2022-12-14 07:30:06,793 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:30:06,793 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:30:06,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:30:07,700 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 49 proven. 107 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:30:07,700 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:30:07,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1850822939] [2022-12-14 07:30:07,700 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1850822939] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:30:07,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1824217579] [2022-12-14 07:30:07,700 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 07:30:07,700 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:30:07,701 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:30:07,701 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:30:07,702 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-12-14 07:30:07,863 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 07:30:07,863 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:30:07,865 INFO L263 TraceCheckSpWp]: Trace formula consists of 375 conjuncts, 85 conjunts are in the unsatisfiable core [2022-12-14 07:30:07,867 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:30:08,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:30:09,422 INFO L321 Elim1Store]: treesize reduction 33, result has 49.2 percent of original size [2022-12-14 07:30:09,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 88 treesize of output 66 [2022-12-14 07:30:09,425 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-12-14 07:30:09,462 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 16 proven. 138 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-14 07:30:09,462 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:30:10,486 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 103 [2022-12-14 07:30:10,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 28 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 0 case distinctions, treesize of input 119 treesize of output 89 [2022-12-14 07:30:12,454 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-12-14 07:30:12,457 INFO L134 CoverageAnalysis]: Checked inductivity of 157 backedges. 73 proven. 81 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-14 07:30:12,457 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1824217579] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:30:12,457 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [563161226] [2022-12-14 07:30:12,458 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:30:12,458 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:30:12,458 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:30:12,458 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:30:12,458 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:30:12,490 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:30:12,492 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:30:12,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:30:12,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:30:12,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:30:12,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:30:12,611 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-12-14 07:30:12,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:30:12,670 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:30:12,756 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-12-14 07:30:12,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-12-14 07:30:12,884 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-12-14 07:30:12,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-12-14 07:30:13,391 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:30:13,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:30:13,456 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:30:13,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:30:13,530 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:30:13,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:30:13,567 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:30:17,354 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '42978#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:30:17,354 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:30:17,354 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:30:17,354 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 31, 31] total 83 [2022-12-14 07:30:17,354 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [806415413] [2022-12-14 07:30:17,354 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:30:17,354 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 83 states [2022-12-14 07:30:17,354 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:30:17,355 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 83 interpolants. [2022-12-14 07:30:17,355 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=600, Invalid=8712, Unknown=0, NotChecked=0, Total=9312 [2022-12-14 07:30:17,355 INFO L87 Difference]: Start difference. First operand 768 states and 881 transitions. Second operand has 83 states, 83 states have (on average 1.6746987951807228) internal successors, (139), 83 states have internal predecessors, (139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:30:52,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:30:52,276 INFO L93 Difference]: Finished difference Result 1482 states and 1596 transitions. [2022-12-14 07:30:52,276 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 150 states. [2022-12-14 07:30:52,276 INFO L78 Accepts]: Start accepts. Automaton has has 83 states, 83 states have (on average 1.6746987951807228) internal successors, (139), 83 states have internal predecessors, (139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-12-14 07:30:52,276 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:30:52,278 INFO L225 Difference]: With dead ends: 1482 [2022-12-14 07:30:52,278 INFO L226 Difference]: Without dead ends: 1390 [2022-12-14 07:30:52,280 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 324 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 243 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14982 ImplicationChecksByTransitivity, 38.1s TimeCoverageRelationStatistics Valid=7460, Invalid=52320, Unknown=0, NotChecked=0, Total=59780 [2022-12-14 07:30:52,280 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 2752 mSDsluCounter, 520 mSDsCounter, 0 mSdLazyCounter, 6564 mSolverCounterSat, 99 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2752 SdHoareTripleChecker+Valid, 538 SdHoareTripleChecker+Invalid, 6663 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 99 IncrementalHoareTripleChecker+Valid, 6564 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.5s IncrementalHoareTripleChecker+Time [2022-12-14 07:30:52,281 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2752 Valid, 538 Invalid, 6663 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [99 Valid, 6564 Invalid, 0 Unknown, 0 Unchecked, 4.5s Time] [2022-12-14 07:30:52,281 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1390 states. [2022-12-14 07:30:52,286 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1390 to 805. [2022-12-14 07:30:52,287 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 805 states, 802 states have (on average 1.1359102244389028) internal successors, (911), 804 states have internal predecessors, (911), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:30:52,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 805 states to 805 states and 911 transitions. [2022-12-14 07:30:52,287 INFO L78 Accepts]: Start accepts. Automaton has 805 states and 911 transitions. Word has length 51 [2022-12-14 07:30:52,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:30:52,287 INFO L495 AbstractCegarLoop]: Abstraction has 805 states and 911 transitions. [2022-12-14 07:30:52,288 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 83 states, 83 states have (on average 1.6746987951807228) internal successors, (139), 83 states have internal predecessors, (139), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:30:52,288 INFO L276 IsEmpty]: Start isEmpty. Operand 805 states and 911 transitions. [2022-12-14 07:30:52,288 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-12-14 07:30:52,288 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:30:52,288 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 11, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:30:52,293 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Ended with exit code 0 [2022-12-14 07:30:52,489 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 44 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable54 [2022-12-14 07:30:52,489 INFO L420 AbstractCegarLoop]: === Iteration 56 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:30:52,490 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:30:52,491 INFO L85 PathProgramCache]: Analyzing trace with hash -34309222, now seen corresponding path program 12 times [2022-12-14 07:30:52,491 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:30:52,491 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605631750] [2022-12-14 07:30:52,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:30:52,492 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:30:52,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:30:53,338 INFO L134 CoverageAnalysis]: Checked inductivity of 242 backedges. 81 proven. 161 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:30:53,338 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:30:53,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605631750] [2022-12-14 07:30:53,338 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605631750] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:30:53,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [15120818] [2022-12-14 07:30:53,338 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 07:30:53,338 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:30:53,338 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:30:53,339 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:30:53,340 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Waiting until timeout for monitored process [2022-12-14 07:30:53,543 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 07:30:53,543 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:30:53,546 INFO L263 TraceCheckSpWp]: Trace formula consists of 360 conjuncts, 109 conjunts are in the unsatisfiable core [2022-12-14 07:30:53,548 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:30:54,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:30:56,316 INFO L321 Elim1Store]: treesize reduction 45, result has 49.4 percent of original size [2022-12-14 07:30:56,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 12 select indices, 12 select index equivalence classes, 55 disjoint index pairs (out of 66 index pairs), introduced 12 new quantified variables, introduced 66 case distinctions, treesize of input 118 treesize of output 90 [2022-12-14 07:30:56,322 WARN L718 sPolynomialRelations]: Constructing 1024(two to the power of 10 dual juncts. [2022-12-14 07:30:56,393 INFO L134 CoverageAnalysis]: Checked inductivity of 242 backedges. 11 proven. 231 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:30:56,393 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:30:58,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 164 treesize of output 142 [2022-12-14 07:30:58,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 11 select indices, 11 select index equivalence classes, 55 disjoint index pairs (out of 55 index pairs), introduced 11 new quantified variables, introduced 0 case distinctions, treesize of input 164 treesize of output 122 [2022-12-14 07:31:01,301 WARN L718 sPolynomialRelations]: Constructing 2048(two to the power of 11 dual juncts. [2022-12-14 07:31:01,333 INFO L134 CoverageAnalysis]: Checked inductivity of 242 backedges. 121 proven. 121 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:31:01,333 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [15120818] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:31:01,334 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1623080861] [2022-12-14 07:31:01,334 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 07:31:01,334 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:31:01,334 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:31:01,334 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:31:01,334 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:31:01,358 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:31:01,360 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:31:01,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:31:01,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:31:01,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:31:01,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:31:01,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:31:01,543 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:31:01,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:31:01,609 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:31:03,365 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '45977#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:31:03,365 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:31:03,365 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:31:03,365 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 39, 39] total 102 [2022-12-14 07:31:03,365 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1905533158] [2022-12-14 07:31:03,365 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:31:03,365 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 102 states [2022-12-14 07:31:03,366 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:31:03,366 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 102 interpolants. [2022-12-14 07:31:03,366 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=877, Invalid=11333, Unknown=0, NotChecked=0, Total=12210 [2022-12-14 07:31:03,367 INFO L87 Difference]: Start difference. First operand 805 states and 911 transitions. Second operand has 102 states, 102 states have (on average 1.4607843137254901) internal successors, (149), 102 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:31:49,785 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:31:49,785 INFO L93 Difference]: Finished difference Result 2131 states and 2302 transitions. [2022-12-14 07:31:49,785 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 194 states. [2022-12-14 07:31:49,785 INFO L78 Accepts]: Start accepts. Automaton has has 102 states, 102 states have (on average 1.4607843137254901) internal successors, (149), 102 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-12-14 07:31:49,785 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:31:49,788 INFO L225 Difference]: With dead ends: 2131 [2022-12-14 07:31:49,788 INFO L226 Difference]: Without dead ends: 2107 [2022-12-14 07:31:49,791 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 371 GetRequests, 70 SyntacticMatches, 0 SemanticMatches, 301 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25145 ImplicationChecksByTransitivity, 48.4s TimeCoverageRelationStatistics Valid=9332, Invalid=82174, Unknown=0, NotChecked=0, Total=91506 [2022-12-14 07:31:49,791 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 3051 mSDsluCounter, 459 mSDsCounter, 0 mSdLazyCounter, 8370 mSolverCounterSat, 114 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3051 SdHoareTripleChecker+Valid, 477 SdHoareTripleChecker+Invalid, 8484 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 114 IncrementalHoareTripleChecker+Valid, 8370 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2022-12-14 07:31:49,792 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3051 Valid, 477 Invalid, 8484 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [114 Valid, 8370 Invalid, 0 Unknown, 0 Unchecked, 6.1s Time] [2022-12-14 07:31:49,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2107 states. [2022-12-14 07:31:49,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2107 to 945. [2022-12-14 07:31:49,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 945 states, 942 states have (on average 1.1475583864118897) internal successors, (1081), 944 states have internal predecessors, (1081), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:31:49,805 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 945 states to 945 states and 1081 transitions. [2022-12-14 07:31:49,805 INFO L78 Accepts]: Start accepts. Automaton has 945 states and 1081 transitions. Word has length 51 [2022-12-14 07:31:49,805 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:31:49,805 INFO L495 AbstractCegarLoop]: Abstraction has 945 states and 1081 transitions. [2022-12-14 07:31:49,806 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 102 states, 102 states have (on average 1.4607843137254901) internal successors, (149), 102 states have internal predecessors, (149), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:31:49,806 INFO L276 IsEmpty]: Start isEmpty. Operand 945 states and 1081 transitions. [2022-12-14 07:31:49,806 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-12-14 07:31:49,806 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:31:49,806 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:31:49,811 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Ended with exit code 0 [2022-12-14 07:31:50,007 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable55,45 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:31:50,007 INFO L420 AbstractCegarLoop]: === Iteration 57 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:31:50,008 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:31:50,008 INFO L85 PathProgramCache]: Analyzing trace with hash 3343567, now seen corresponding path program 12 times [2022-12-14 07:31:50,008 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:31:50,009 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [859789710] [2022-12-14 07:31:50,009 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:31:50,009 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:31:50,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:31:50,436 INFO L134 CoverageAnalysis]: Checked inductivity of 111 backedges. 9 proven. 66 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-12-14 07:31:50,436 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:31:50,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [859789710] [2022-12-14 07:31:50,436 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [859789710] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:31:50,436 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2132985697] [2022-12-14 07:31:50,436 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 07:31:50,436 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:31:50,436 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:31:50,437 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:31:50,438 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Waiting until timeout for monitored process [2022-12-14 07:31:50,738 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 07:31:50,738 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:31:50,740 INFO L263 TraceCheckSpWp]: Trace formula consists of 418 conjuncts, 60 conjunts are in the unsatisfiable core [2022-12-14 07:31:50,742 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:31:50,903 INFO L134 CoverageAnalysis]: Checked inductivity of 111 backedges. 16 proven. 59 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-12-14 07:31:50,903 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:31:51,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 07:31:51,171 INFO L134 CoverageAnalysis]: Checked inductivity of 111 backedges. 16 proven. 59 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-12-14 07:31:51,171 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2132985697] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:31:51,171 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [687655927] [2022-12-14 07:31:51,172 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:31:51,172 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:31:51,172 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:31:51,172 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:31:51,172 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:31:51,197 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:31:51,198 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:31:51,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:31:51,223 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:31:51,250 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:31:51,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:31:51,308 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-12-14 07:31:51,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:31:51,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:31:51,424 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-12-14 07:31:51,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-12-14 07:31:51,573 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-12-14 07:31:51,573 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-12-14 07:31:52,326 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:31:52,328 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:31:52,392 INFO L321 Elim1Store]: treesize reduction 201, result has 26.9 percent of original size [2022-12-14 07:31:52,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1021 treesize of output 1033 [2022-12-14 07:31:53,202 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:31:53,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:31:53,293 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:31:53,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:31:53,355 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:31:55,964 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '49787#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= 0 |#NULL.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-12-14 07:31:55,964 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:31:55,964 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:31:55,964 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 34 [2022-12-14 07:31:55,964 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [943631939] [2022-12-14 07:31:55,964 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:31:55,964 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-12-14 07:31:55,964 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:31:55,964 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-12-14 07:31:55,965 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=215, Invalid=2137, Unknown=0, NotChecked=0, Total=2352 [2022-12-14 07:31:55,965 INFO L87 Difference]: Start difference. First operand 945 states and 1081 transitions. Second operand has 35 states, 34 states have (on average 2.6176470588235294) internal successors, (89), 35 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:31:56,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:31:56,734 INFO L93 Difference]: Finished difference Result 1053 states and 1180 transitions. [2022-12-14 07:31:56,735 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-12-14 07:31:56,735 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 2.6176470588235294) internal successors, (89), 35 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-12-14 07:31:56,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:31:56,738 INFO L225 Difference]: With dead ends: 1053 [2022-12-14 07:31:56,738 INFO L226 Difference]: Without dead ends: 1053 [2022-12-14 07:31:56,738 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 117 SyntacticMatches, 6 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1159 ImplicationChecksByTransitivity, 3.3s TimeCoverageRelationStatistics Valid=621, Invalid=3935, Unknown=0, NotChecked=0, Total=4556 [2022-12-14 07:31:56,738 INFO L413 NwaCegarLoop]: 22 mSDtfsCounter, 315 mSDsluCounter, 291 mSDsCounter, 0 mSdLazyCounter, 1035 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 315 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 1038 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 1035 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 07:31:56,739 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [315 Valid, 313 Invalid, 1038 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 1035 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 07:31:56,739 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1053 states. [2022-12-14 07:31:56,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1053 to 971. [2022-12-14 07:31:56,748 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 971 states, 968 states have (on average 1.1435950413223142) internal successors, (1107), 970 states have internal predecessors, (1107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:31:56,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 971 states to 971 states and 1107 transitions. [2022-12-14 07:31:56,748 INFO L78 Accepts]: Start accepts. Automaton has 971 states and 1107 transitions. Word has length 52 [2022-12-14 07:31:56,748 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:31:56,748 INFO L495 AbstractCegarLoop]: Abstraction has 971 states and 1107 transitions. [2022-12-14 07:31:56,749 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 2.6176470588235294) internal successors, (89), 35 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:31:56,749 INFO L276 IsEmpty]: Start isEmpty. Operand 971 states and 1107 transitions. [2022-12-14 07:31:56,749 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-12-14 07:31:56,749 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:31:56,749 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 9, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:31:56,754 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Ended with exit code 0 [2022-12-14 07:31:56,950 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 46 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable56 [2022-12-14 07:31:56,950 INFO L420 AbstractCegarLoop]: === Iteration 58 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:31:56,951 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:31:56,951 INFO L85 PathProgramCache]: Analyzing trace with hash 1193607648, now seen corresponding path program 13 times [2022-12-14 07:31:56,951 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:31:56,951 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1930686608] [2022-12-14 07:31:56,952 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:31:56,952 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:31:57,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:31:57,816 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 64 proven. 129 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:31:57,816 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:31:57,816 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1930686608] [2022-12-14 07:31:57,816 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1930686608] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:31:57,816 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1727849995] [2022-12-14 07:31:57,817 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 07:31:57,817 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:31:57,817 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:31:57,817 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:31:57,818 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Waiting until timeout for monitored process [2022-12-14 07:31:57,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:31:57,969 INFO L263 TraceCheckSpWp]: Trace formula consists of 399 conjuncts, 93 conjunts are in the unsatisfiable core [2022-12-14 07:31:57,971 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:31:58,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:32:00,586 INFO L321 Elim1Store]: treesize reduction 41, result has 59.0 percent of original size [2022-12-14 07:32:00,586 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 10 select indices, 10 select index equivalence classes, 36 disjoint index pairs (out of 45 index pairs), introduced 10 new quantified variables, introduced 45 case distinctions, treesize of input 98 treesize of output 97 [2022-12-14 07:32:00,588 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-12-14 07:32:00,652 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 18 proven. 173 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-14 07:32:00,652 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:32:02,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 134 treesize of output 116 [2022-12-14 07:32:02,335 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 9 select indices, 9 select index equivalence classes, 36 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 0 case distinctions, treesize of input 206 treesize of output 172 [2022-12-14 07:32:02,338 WARN L718 sPolynomialRelations]: Constructing 512(two to the power of 9 dual juncts. [2022-12-14 07:32:03,899 INFO L134 CoverageAnalysis]: Checked inductivity of 194 backedges. 91 proven. 100 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-14 07:32:03,899 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1727849995] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:32:03,899 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1084534704] [2022-12-14 07:32:03,900 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:32:03,900 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:32:03,900 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:32:03,900 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:32:03,900 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:32:03,925 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:32:03,926 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:32:03,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:32:03,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:32:03,982 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:32:04,005 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:32:04,048 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-12-14 07:32:04,080 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:32:04,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:32:04,170 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-12-14 07:32:04,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-12-14 07:32:04,321 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-12-14 07:32:04,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-12-14 07:32:04,802 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:32:04,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:32:04,864 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:32:04,864 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:32:04,943 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:32:04,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:32:04,986 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:32:09,140 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '52278#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:32:09,140 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:32:09,140 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:32:09,141 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 34, 34] total 91 [2022-12-14 07:32:09,141 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [485938764] [2022-12-14 07:32:09,141 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:32:09,141 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 91 states [2022-12-14 07:32:09,141 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:32:09,141 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 91 interpolants. [2022-12-14 07:32:09,142 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=702, Invalid=10218, Unknown=0, NotChecked=0, Total=10920 [2022-12-14 07:32:09,142 INFO L87 Difference]: Start difference. First operand 971 states and 1107 transitions. Second operand has 91 states, 91 states have (on average 1.6593406593406594) internal successors, (151), 91 states have internal predecessors, (151), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:32:45,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:32:45,931 INFO L93 Difference]: Finished difference Result 1884 states and 2030 transitions. [2022-12-14 07:32:45,931 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 185 states. [2022-12-14 07:32:45,931 INFO L78 Accepts]: Start accepts. Automaton has has 91 states, 91 states have (on average 1.6593406593406594) internal successors, (151), 91 states have internal predecessors, (151), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-12-14 07:32:45,931 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:32:45,934 INFO L225 Difference]: With dead ends: 1884 [2022-12-14 07:32:45,934 INFO L226 Difference]: Without dead ends: 1805 [2022-12-14 07:32:45,936 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 373 GetRequests, 87 SyntacticMatches, 0 SemanticMatches, 286 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21483 ImplicationChecksByTransitivity, 40.4s TimeCoverageRelationStatistics Valid=9991, Invalid=72665, Unknown=0, NotChecked=0, Total=82656 [2022-12-14 07:32:45,936 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 3591 mSDsluCounter, 516 mSDsCounter, 0 mSdLazyCounter, 7938 mSolverCounterSat, 123 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3591 SdHoareTripleChecker+Valid, 536 SdHoareTripleChecker+Invalid, 8061 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 123 IncrementalHoareTripleChecker+Valid, 7938 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.7s IncrementalHoareTripleChecker+Time [2022-12-14 07:32:45,937 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3591 Valid, 536 Invalid, 8061 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [123 Valid, 7938 Invalid, 0 Unknown, 0 Unchecked, 5.7s Time] [2022-12-14 07:32:45,937 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1805 states. [2022-12-14 07:32:45,945 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1805 to 1045. [2022-12-14 07:32:45,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1045 states, 1042 states have (on average 1.1257197696737045) internal successors, (1173), 1044 states have internal predecessors, (1173), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:32:45,947 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1045 states to 1045 states and 1173 transitions. [2022-12-14 07:32:45,947 INFO L78 Accepts]: Start accepts. Automaton has 1045 states and 1173 transitions. Word has length 55 [2022-12-14 07:32:45,947 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:32:45,947 INFO L495 AbstractCegarLoop]: Abstraction has 1045 states and 1173 transitions. [2022-12-14 07:32:45,947 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 91 states, 91 states have (on average 1.6593406593406594) internal successors, (151), 91 states have internal predecessors, (151), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:32:45,947 INFO L276 IsEmpty]: Start isEmpty. Operand 1045 states and 1173 transitions. [2022-12-14 07:32:45,948 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-12-14 07:32:45,948 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:32:45,948 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 12, 12, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:32:45,953 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Forceful destruction successful, exit code 0 [2022-12-14 07:32:46,149 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 47 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable57 [2022-12-14 07:32:46,149 INFO L420 AbstractCegarLoop]: === Iteration 59 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:32:46,149 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:32:46,149 INFO L85 PathProgramCache]: Analyzing trace with hash 1413061521, now seen corresponding path program 13 times [2022-12-14 07:32:46,149 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:32:46,149 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1236551216] [2022-12-14 07:32:46,149 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:32:46,150 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:32:46,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:32:47,099 INFO L134 CoverageAnalysis]: Checked inductivity of 288 backedges. 100 proven. 188 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:32:47,099 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:32:47,099 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1236551216] [2022-12-14 07:32:47,099 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1236551216] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:32:47,099 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [722075120] [2022-12-14 07:32:47,100 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 07:32:47,100 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:32:47,100 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:32:47,100 INFO L229 MonitoredProcess]: Starting monitored process 48 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:32:47,101 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Waiting until timeout for monitored process [2022-12-14 07:32:47,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:32:47,223 INFO L263 TraceCheckSpWp]: Trace formula consists of 384 conjuncts, 122 conjunts are in the unsatisfiable core [2022-12-14 07:32:47,225 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:32:48,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 07:32:50,172 INFO L321 Elim1Store]: treesize reduction 49, result has 49.5 percent of original size [2022-12-14 07:32:50,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 13 select indices, 13 select index equivalence classes, 66 disjoint index pairs (out of 78 index pairs), introduced 13 new quantified variables, introduced 78 case distinctions, treesize of input 105 treesize of output 98 [2022-12-14 07:32:50,175 WARN L718 sPolynomialRelations]: Constructing 2048(two to the power of 11 dual juncts. [2022-12-14 07:32:50,269 INFO L134 CoverageAnalysis]: Checked inductivity of 288 backedges. 12 proven. 276 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:32:50,269 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:32:52,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 179 treesize of output 155 [2022-12-14 07:32:52,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 12 select indices, 12 select index equivalence classes, 66 disjoint index pairs (out of 66 index pairs), introduced 12 new quantified variables, introduced 0 case distinctions, treesize of input 179 treesize of output 133 [2022-12-14 07:32:55,408 INFO L134 CoverageAnalysis]: Checked inductivity of 288 backedges. 144 proven. 144 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:32:55,409 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [722075120] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:32:55,409 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1292751559] [2022-12-14 07:32:55,409 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 07:32:55,409 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:32:55,409 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:32:55,410 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:32:55,410 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:32:55,437 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:32:55,438 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:32:55,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:32:55,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:32:55,513 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:32:55,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:32:55,567 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:32:55,610 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:32:55,611 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:32:55,659 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:32:57,757 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '56022#(and (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~s2#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_~s~0#1.base|) (+ |ULTIMATE.start_cstrcat_~s~0#1.offset| 1)) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:32:57,757 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:32:57,757 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:32:57,757 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 42, 42] total 111 [2022-12-14 07:32:57,757 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1106285207] [2022-12-14 07:32:57,758 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:32:57,758 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 111 states [2022-12-14 07:32:57,758 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:32:57,759 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 111 interpolants. [2022-12-14 07:32:57,759 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1017, Invalid=13263, Unknown=0, NotChecked=0, Total=14280 [2022-12-14 07:32:57,760 INFO L87 Difference]: Start difference. First operand 1045 states and 1173 transitions. Second operand has 111 states, 111 states have (on average 1.4594594594594594) internal successors, (162), 111 states have internal predecessors, (162), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:34:43,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:34:43,738 INFO L93 Difference]: Finished difference Result 2712 states and 2932 transitions. [2022-12-14 07:34:43,738 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 233 states. [2022-12-14 07:34:43,738 INFO L78 Accepts]: Start accepts. Automaton has has 111 states, 111 states have (on average 1.4594594594594594) internal successors, (162), 111 states have internal predecessors, (162), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-12-14 07:34:43,738 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:34:43,741 INFO L225 Difference]: With dead ends: 2712 [2022-12-14 07:34:43,741 INFO L226 Difference]: Without dead ends: 2686 [2022-12-14 07:34:43,745 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 423 GetRequests, 74 SyntacticMatches, 1 SemanticMatches, 348 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34368 ImplicationChecksByTransitivity, 107.9s TimeCoverageRelationStatistics Valid=11989, Invalid=110161, Unknown=0, NotChecked=0, Total=122150 [2022-12-14 07:34:43,746 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 3356 mSDsluCounter, 628 mSDsCounter, 0 mSdLazyCounter, 11392 mSolverCounterSat, 138 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3356 SdHoareTripleChecker+Valid, 647 SdHoareTripleChecker+Invalid, 11530 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 138 IncrementalHoareTripleChecker+Valid, 11392 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.7s IncrementalHoareTripleChecker+Time [2022-12-14 07:34:43,746 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3356 Valid, 647 Invalid, 11530 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [138 Valid, 11392 Invalid, 0 Unknown, 0 Unchecked, 6.7s Time] [2022-12-14 07:34:43,747 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2686 states. [2022-12-14 07:34:43,757 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2686 to 1189. [2022-12-14 07:34:43,757 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1189 states, 1186 states have (on average 1.1374367622259696) internal successors, (1349), 1188 states have internal predecessors, (1349), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:34:43,758 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1189 states to 1189 states and 1349 transitions. [2022-12-14 07:34:43,758 INFO L78 Accepts]: Start accepts. Automaton has 1189 states and 1349 transitions. Word has length 55 [2022-12-14 07:34:43,758 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:34:43,758 INFO L495 AbstractCegarLoop]: Abstraction has 1189 states and 1349 transitions. [2022-12-14 07:34:43,758 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 111 states, 111 states have (on average 1.4594594594594594) internal successors, (162), 111 states have internal predecessors, (162), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:34:43,759 INFO L276 IsEmpty]: Start isEmpty. Operand 1189 states and 1349 transitions. [2022-12-14 07:34:43,759 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-12-14 07:34:43,759 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:34:43,759 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:34:43,764 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Ended with exit code 0 [2022-12-14 07:34:43,960 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 48 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable58 [2022-12-14 07:34:43,960 INFO L420 AbstractCegarLoop]: === Iteration 60 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:34:43,961 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:34:43,961 INFO L85 PathProgramCache]: Analyzing trace with hash -226216297, now seen corresponding path program 13 times [2022-12-14 07:34:43,962 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:34:43,962 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1741945202] [2022-12-14 07:34:43,962 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:34:43,963 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:34:44,030 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:34:45,267 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 12 proven. 121 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 07:34:45,267 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:34:45,267 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1741945202] [2022-12-14 07:34:45,267 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1741945202] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:34:45,268 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1983014718] [2022-12-14 07:34:45,268 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 07:34:45,268 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:34:45,268 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:34:45,268 INFO L229 MonitoredProcess]: Starting monitored process 49 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:34:45,269 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Waiting until timeout for monitored process [2022-12-14 07:34:45,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:34:45,403 INFO L263 TraceCheckSpWp]: Trace formula consists of 449 conjuncts, 110 conjunts are in the unsatisfiable core [2022-12-14 07:34:45,406 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:34:45,411 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 07:34:45,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:34:45,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 07:34:46,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 07:34:46,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 07:34:46,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 07:34:46,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 07:34:46,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 07:34:47,025 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:34:47,027 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:34:47,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 07:34:47,031 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 12 proven. 85 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-12-14 07:34:47,031 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:34:47,182 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2428 (Array Int Int)) (v_ArrVal_2427 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2427) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_2428) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 1 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-12-14 07:34:47,187 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2428 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_2428) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-12-14 07:34:47,192 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2428 (Array Int Int)) (v_ArrVal_2426 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2426) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_2428) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-12-14 07:34:47,196 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2428 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_2428) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-12-14 07:34:47,202 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2428 (Array Int Int)) (v_ArrVal_2425 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2425) |c_ULTIMATE.start_cstrcat_~s~0#1.base| v_ArrVal_2428) |c_ULTIMATE.start_cstrcat_~s2#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~s2#1.offset|)) 0)) is different from false [2022-12-14 07:34:52,235 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:34:52,236 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 07:34:52,243 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:34:52,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 36 [2022-12-14 07:34:52,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:34:53,034 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 12 proven. 43 refuted. 0 times theorem prover too weak. 36 trivial. 42 not checked. [2022-12-14 07:34:53,034 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1983014718] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:34:53,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [850079981] [2022-12-14 07:34:53,035 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:34:53,035 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:34:53,035 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:34:53,035 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:34:53,036 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:34:53,059 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:34:53,061 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:34:53,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:34:53,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:34:53,114 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:34:53,132 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:34:53,171 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 07:34:53,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-12-14 07:34:53,220 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:34:53,245 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:34:53,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:34:53,307 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:34:53,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:34:53,384 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:34:53,415 INFO L321 Elim1Store]: treesize reduction 142, result has 23.7 percent of original size [2022-12-14 07:34:53,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 46 treesize of output 63 [2022-12-14 07:34:53,495 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:34:53,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:34:53,571 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:34:53,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:34:53,604 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:34:56,591 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '60802#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:34:56,591 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:34:56,591 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:34:56,591 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [38, 25, 25] total 80 [2022-12-14 07:34:56,591 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1751354029] [2022-12-14 07:34:56,591 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:34:56,592 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 80 states [2022-12-14 07:34:56,592 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:34:56,592 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 80 interpolants. [2022-12-14 07:34:56,593 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=306, Invalid=7481, Unknown=65, NotChecked=890, Total=8742 [2022-12-14 07:34:56,593 INFO L87 Difference]: Start difference. First operand 1189 states and 1349 transitions. Second operand has 80 states, 80 states have (on average 1.6875) internal successors, (135), 80 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:35:01,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:35:01,944 INFO L93 Difference]: Finished difference Result 1818 states and 2037 transitions. [2022-12-14 07:35:01,945 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 43 states. [2022-12-14 07:35:01,945 INFO L78 Accepts]: Start accepts. Automaton has has 80 states, 80 states have (on average 1.6875) internal successors, (135), 80 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-12-14 07:35:01,945 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:35:01,947 INFO L225 Difference]: With dead ends: 1818 [2022-12-14 07:35:01,947 INFO L226 Difference]: Without dead ends: 1598 [2022-12-14 07:35:01,948 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 248 GetRequests, 112 SyntacticMatches, 4 SemanticMatches, 132 ConstructedPredicates, 5 IntricatePredicates, 1 DeprecatedPredicates, 3904 ImplicationChecksByTransitivity, 13.5s TimeCoverageRelationStatistics Valid=854, Invalid=15610, Unknown=68, NotChecked=1290, Total=17822 [2022-12-14 07:35:01,948 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 439 mSDsluCounter, 1500 mSDsCounter, 0 mSdLazyCounter, 4554 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 439 SdHoareTripleChecker+Valid, 1552 SdHoareTripleChecker+Invalid, 5267 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 4554 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 681 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-12-14 07:35:01,948 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [439 Valid, 1552 Invalid, 5267 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 4554 Invalid, 0 Unknown, 681 Unchecked, 2.2s Time] [2022-12-14 07:35:01,949 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1598 states. [2022-12-14 07:35:01,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1598 to 1388. [2022-12-14 07:35:01,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1388 states, 1385 states have (on average 1.1501805054151624) internal successors, (1593), 1387 states have internal predecessors, (1593), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:35:01,957 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1388 states to 1388 states and 1593 transitions. [2022-12-14 07:35:01,957 INFO L78 Accepts]: Start accepts. Automaton has 1388 states and 1593 transitions. Word has length 56 [2022-12-14 07:35:01,957 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:35:01,957 INFO L495 AbstractCegarLoop]: Abstraction has 1388 states and 1593 transitions. [2022-12-14 07:35:01,957 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 80 states, 80 states have (on average 1.6875) internal successors, (135), 80 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:35:01,957 INFO L276 IsEmpty]: Start isEmpty. Operand 1388 states and 1593 transitions. [2022-12-14 07:35:01,958 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-12-14 07:35:01,958 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:35:01,958 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 5, 5, 5, 5, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:35:01,963 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Ended with exit code 0 [2022-12-14 07:35:02,158 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 49 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable59 [2022-12-14 07:35:02,158 INFO L420 AbstractCegarLoop]: === Iteration 61 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:35:02,159 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:35:02,159 INFO L85 PathProgramCache]: Analyzing trace with hash 317101089, now seen corresponding path program 14 times [2022-12-14 07:35:02,159 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:35:02,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1522927986] [2022-12-14 07:35:02,159 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:35:02,159 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:35:02,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:35:02,703 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 13 proven. 52 refuted. 0 times theorem prover too weak. 57 trivial. 0 not checked. [2022-12-14 07:35:02,703 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:35:02,703 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1522927986] [2022-12-14 07:35:02,703 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1522927986] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:35:02,703 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1495780292] [2022-12-14 07:35:02,703 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:35:02,703 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:35:02,704 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:35:02,704 INFO L229 MonitoredProcess]: Starting monitored process 50 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:35:02,705 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Waiting until timeout for monitored process [2022-12-14 07:35:03,621 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-12-14 07:35:03,621 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:35:03,626 INFO L263 TraceCheckSpWp]: Trace formula consists of 433 conjuncts, 77 conjunts are in the unsatisfiable core [2022-12-14 07:35:03,628 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:35:03,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:04,499 INFO L321 Elim1Store]: treesize reduction 4, result has 87.9 percent of original size [2022-12-14 07:35:04,499 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 26 treesize of output 39 [2022-12-14 07:35:04,935 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 22 proven. 70 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-12-14 07:35:04,935 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:35:05,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 23 [2022-12-14 07:35:05,586 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 07:35:05,586 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 43 treesize of output 47 [2022-12-14 07:35:05,733 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 43 treesize of output 35 [2022-12-14 07:35:06,301 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 25 proven. 67 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2022-12-14 07:35:06,301 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1495780292] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:35:06,301 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2009313844] [2022-12-14 07:35:06,302 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:35:06,302 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:35:06,302 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:35:06,302 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:35:06,302 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:35:06,326 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:35:06,328 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:35:06,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:35:06,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:35:06,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:06,396 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:35:06,437 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 07:35:06,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 86 [2022-12-14 07:35:06,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:06,508 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:06,541 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:06,574 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 07:35:06,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 07:35:06,702 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:35:06,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:35:06,772 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:35:06,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:35:06,852 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:35:06,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:35:06,882 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:35:09,357 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '64500#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:35:09,357 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:35:09,357 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:35:09,357 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 21, 21] total 58 [2022-12-14 07:35:09,357 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [608489746] [2022-12-14 07:35:09,357 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:35:09,358 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 58 states [2022-12-14 07:35:09,358 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:35:09,358 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 58 interpolants. [2022-12-14 07:35:09,359 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=373, Invalid=4739, Unknown=0, NotChecked=0, Total=5112 [2022-12-14 07:35:09,359 INFO L87 Difference]: Start difference. First operand 1388 states and 1593 transitions. Second operand has 58 states, 58 states have (on average 2.2758620689655173) internal successors, (132), 58 states have internal predecessors, (132), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:35:17,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:35:17,190 INFO L93 Difference]: Finished difference Result 1750 states and 1951 transitions. [2022-12-14 07:35:17,190 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 81 states. [2022-12-14 07:35:17,190 INFO L78 Accepts]: Start accepts. Automaton has has 58 states, 58 states have (on average 2.2758620689655173) internal successors, (132), 58 states have internal predecessors, (132), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-12-14 07:35:17,190 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:35:17,195 INFO L225 Difference]: With dead ends: 1750 [2022-12-14 07:35:17,195 INFO L226 Difference]: Without dead ends: 1723 [2022-12-14 07:35:17,196 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 266 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 149 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5405 ImplicationChecksByTransitivity, 11.5s TimeCoverageRelationStatistics Valid=4200, Invalid=18450, Unknown=0, NotChecked=0, Total=22650 [2022-12-14 07:35:17,196 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 1210 mSDsluCounter, 124 mSDsCounter, 0 mSdLazyCounter, 1388 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1210 SdHoareTripleChecker+Valid, 134 SdHoareTripleChecker+Invalid, 1446 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 1388 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 07:35:17,197 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1210 Valid, 134 Invalid, 1446 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 1388 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-14 07:35:17,198 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1723 states. [2022-12-14 07:35:17,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1723 to 1284. [2022-12-14 07:35:17,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1284 states, 1281 states have (on average 1.1483216237314597) internal successors, (1471), 1283 states have internal predecessors, (1471), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:35:17,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1284 states to 1284 states and 1471 transitions. [2022-12-14 07:35:17,216 INFO L78 Accepts]: Start accepts. Automaton has 1284 states and 1471 transitions. Word has length 57 [2022-12-14 07:35:17,216 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:35:17,216 INFO L495 AbstractCegarLoop]: Abstraction has 1284 states and 1471 transitions. [2022-12-14 07:35:17,216 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 58 states, 58 states have (on average 2.2758620689655173) internal successors, (132), 58 states have internal predecessors, (132), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:35:17,216 INFO L276 IsEmpty]: Start isEmpty. Operand 1284 states and 1471 transitions. [2022-12-14 07:35:17,218 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-12-14 07:35:17,218 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:35:17,218 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 5, 5, 5, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:35:17,224 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Ended with exit code 0 [2022-12-14 07:35:17,418 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable60,50 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:35:17,419 INFO L420 AbstractCegarLoop]: === Iteration 62 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:35:17,419 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:35:17,419 INFO L85 PathProgramCache]: Analyzing trace with hash 1914537255, now seen corresponding path program 15 times [2022-12-14 07:35:17,419 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:35:17,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1661148036] [2022-12-14 07:35:17,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:35:17,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:35:17,462 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:35:18,381 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 12 proven. 71 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-12-14 07:35:18,381 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:35:18,382 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1661148036] [2022-12-14 07:35:18,382 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1661148036] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:35:18,382 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [18875330] [2022-12-14 07:35:18,382 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 07:35:18,382 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:35:18,382 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:35:18,383 INFO L229 MonitoredProcess]: Starting monitored process 51 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:35:18,383 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Waiting until timeout for monitored process [2022-12-14 07:35:18,707 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 07:35:18,707 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:35:18,710 INFO L263 TraceCheckSpWp]: Trace formula consists of 437 conjuncts, 86 conjunts are in the unsatisfiable core [2022-12-14 07:35:18,712 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:35:19,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 07:35:19,549 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 21 proven. 62 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2022-12-14 07:35:19,549 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:35:19,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 51 [2022-12-14 07:35:19,787 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 6 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 45 [2022-12-14 07:35:20,799 INFO L134 CoverageAnalysis]: Checked inductivity of 121 backedges. 36 proven. 49 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2022-12-14 07:35:20,799 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [18875330] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:35:20,799 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1656381667] [2022-12-14 07:35:20,800 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:35:20,800 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:35:20,800 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:35:20,800 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:35:20,800 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:35:20,834 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:35:20,836 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:35:20,836 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:35:20,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 07:35:20,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:20,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:20,960 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-12-14 07:35:20,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:21,018 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:21,108 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-12-14 07:35:21,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-12-14 07:35:21,263 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-12-14 07:35:21,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-12-14 07:35:21,760 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 07:35:21,761 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 07:35:21,829 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:35:21,830 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:35:21,911 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:35:21,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:35:21,955 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:35:24,936 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '68101#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (= (select |#valid| |ULTIMATE.start_cstrcat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrcat_#t~post5#1.base|) |ULTIMATE.start_cstrcat_#t~post5#1.offset|) |ULTIMATE.start_cstrcat_#t~mem6#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 07:35:24,936 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:35:24,936 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:35:24,936 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 22, 24] total 59 [2022-12-14 07:35:24,936 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1426393167] [2022-12-14 07:35:24,937 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:35:24,937 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2022-12-14 07:35:24,937 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:35:24,937 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2022-12-14 07:35:24,937 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=542, Invalid=4714, Unknown=0, NotChecked=0, Total=5256 [2022-12-14 07:35:24,937 INFO L87 Difference]: Start difference. First operand 1284 states and 1471 transitions. Second operand has 59 states, 59 states have (on average 1.7627118644067796) internal successors, (104), 59 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:35:28,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:35:28,090 INFO L93 Difference]: Finished difference Result 1537 states and 1713 transitions. [2022-12-14 07:35:28,090 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 61 states. [2022-12-14 07:35:28,090 INFO L78 Accepts]: Start accepts. Automaton has has 59 states, 59 states have (on average 1.7627118644067796) internal successors, (104), 59 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-12-14 07:35:28,090 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:35:28,092 INFO L225 Difference]: With dead ends: 1537 [2022-12-14 07:35:28,092 INFO L226 Difference]: Without dead ends: 1501 [2022-12-14 07:35:28,093 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 247 GetRequests, 119 SyntacticMatches, 1 SemanticMatches, 127 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4903 ImplicationChecksByTransitivity, 7.4s TimeCoverageRelationStatistics Valid=2574, Invalid=13938, Unknown=0, NotChecked=0, Total=16512 [2022-12-14 07:35:28,093 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 730 mSDsluCounter, 210 mSDsCounter, 0 mSdLazyCounter, 717 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 730 SdHoareTripleChecker+Valid, 240 SdHoareTripleChecker+Invalid, 739 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 717 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 07:35:28,093 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [730 Valid, 240 Invalid, 739 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 717 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 07:35:28,094 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1501 states. [2022-12-14 07:35:28,100 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1501 to 1238. [2022-12-14 07:35:28,101 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1238 states, 1235 states have (on average 1.1441295546558705) internal successors, (1413), 1237 states have internal predecessors, (1413), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:35:28,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1238 states to 1238 states and 1413 transitions. [2022-12-14 07:35:28,102 INFO L78 Accepts]: Start accepts. Automaton has 1238 states and 1413 transitions. Word has length 57 [2022-12-14 07:35:28,102 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:35:28,102 INFO L495 AbstractCegarLoop]: Abstraction has 1238 states and 1413 transitions. [2022-12-14 07:35:28,102 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 59 states, 59 states have (on average 1.7627118644067796) internal successors, (104), 59 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:35:28,102 INFO L276 IsEmpty]: Start isEmpty. Operand 1238 states and 1413 transitions. [2022-12-14 07:35:28,103 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-12-14 07:35:28,103 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:35:28,103 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:35:28,108 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Forceful destruction successful, exit code 0 [2022-12-14 07:35:28,304 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable61,51 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:35:28,304 INFO L420 AbstractCegarLoop]: === Iteration 63 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:35:28,305 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:35:28,305 INFO L85 PathProgramCache]: Analyzing trace with hash 680113285, now seen corresponding path program 14 times [2022-12-14 07:35:28,305 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:35:28,306 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [801333039] [2022-12-14 07:35:28,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:35:28,306 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:35:28,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:35:28,589 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 16 proven. 56 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-12-14 07:35:28,589 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:35:28,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [801333039] [2022-12-14 07:35:28,589 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [801333039] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:35:28,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [796211829] [2022-12-14 07:35:28,589 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 07:35:28,589 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:35:28,589 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:35:28,590 INFO L229 MonitoredProcess]: Starting monitored process 52 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:35:28,591 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Waiting until timeout for monitored process [2022-12-14 07:35:29,386 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-12-14 07:35:29,386 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 07:35:29,389 INFO L263 TraceCheckSpWp]: Trace formula consists of 462 conjuncts, 25 conjunts are in the unsatisfiable core [2022-12-14 07:35:29,391 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:35:29,710 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 25 proven. 47 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-12-14 07:35:29,710 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 07:35:30,019 INFO L134 CoverageAnalysis]: Checked inductivity of 144 backedges. 36 proven. 36 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-12-14 07:35:30,019 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [796211829] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 07:35:30,019 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [436586893] [2022-12-14 07:35:30,020 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 07:35:30,020 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 07:35:30,020 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 07:35:30,020 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 07:35:30,020 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 07:35:30,044 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:35:30,046 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 07:35:30,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 07:35:30,085 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:30,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:30,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:30,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-12-14 07:35:30,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:30,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 07:35:30,282 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-12-14 07:35:30,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 189 treesize of output 193 [2022-12-14 07:35:30,430 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-12-14 07:35:30,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 352 treesize of output 367 [2022-12-14 07:35:31,122 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 07:35:31,194 INFO L321 Elim1Store]: treesize reduction 201, result has 26.9 percent of original size [2022-12-14 07:35:31,194 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1028 treesize of output 1033 [2022-12-14 07:35:32,788 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:35:32,788 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:35:32,871 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 07:35:32,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 07:35:32,936 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 07:35:36,040 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '71391#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s2#1.base|) (<= 0 |#NULL.base|) (<= |ULTIMATE.start_cstrcat_~s1#1.offset| 0) (<= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= |ULTIMATE.start_cstrcat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s1#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s1#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~i~1#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s1#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#in~s2#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 1 |ULTIMATE.start_cstrcat_~s2#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-12-14 07:35:36,040 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 07:35:36,040 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 07:35:36,040 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 17, 17] total 47 [2022-12-14 07:35:36,040 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1372302701] [2022-12-14 07:35:36,040 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 07:35:36,040 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-12-14 07:35:36,041 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 07:35:36,041 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-12-14 07:35:36,041 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=491, Invalid=3169, Unknown=0, NotChecked=0, Total=3660 [2022-12-14 07:35:36,041 INFO L87 Difference]: Start difference. First operand 1238 states and 1413 transitions. Second operand has 47 states, 47 states have (on average 2.021276595744681) internal successors, (95), 47 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:35:37,120 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 07:35:37,120 INFO L93 Difference]: Finished difference Result 1357 states and 1526 transitions. [2022-12-14 07:35:37,120 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-12-14 07:35:37,120 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 2.021276595744681) internal successors, (95), 47 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2022-12-14 07:35:37,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 07:35:37,121 INFO L225 Difference]: With dead ends: 1357 [2022-12-14 07:35:37,121 INFO L226 Difference]: Without dead ends: 1355 [2022-12-14 07:35:37,122 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 215 GetRequests, 130 SyntacticMatches, 0 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2313 ImplicationChecksByTransitivity, 4.5s TimeCoverageRelationStatistics Valid=1274, Invalid=6208, Unknown=0, NotChecked=0, Total=7482 [2022-12-14 07:35:37,122 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 433 mSDsluCounter, 284 mSDsCounter, 0 mSdLazyCounter, 514 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 433 SdHoareTripleChecker+Valid, 307 SdHoareTripleChecker+Invalid, 522 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 514 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 07:35:37,122 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [433 Valid, 307 Invalid, 522 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 514 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 07:35:37,123 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1355 states. [2022-12-14 07:35:37,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1355 to 1234. [2022-12-14 07:35:37,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1234 states, 1231 states have (on average 1.1437855402112105) internal successors, (1408), 1233 states have internal predecessors, (1408), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:35:37,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1234 states to 1234 states and 1408 transitions. [2022-12-14 07:35:37,130 INFO L78 Accepts]: Start accepts. Automaton has 1234 states and 1408 transitions. Word has length 58 [2022-12-14 07:35:37,130 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 07:35:37,130 INFO L495 AbstractCegarLoop]: Abstraction has 1234 states and 1408 transitions. [2022-12-14 07:35:37,130 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 2.021276595744681) internal successors, (95), 47 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 07:35:37,131 INFO L276 IsEmpty]: Start isEmpty. Operand 1234 states and 1408 transitions. [2022-12-14 07:35:37,131 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-12-14 07:35:37,131 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 07:35:37,131 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 11, 10, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 07:35:37,137 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Forceful destruction successful, exit code 0 [2022-12-14 07:35:37,332 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable62,52 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:35:37,332 INFO L420 AbstractCegarLoop]: === Iteration 64 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 07:35:37,333 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 07:35:37,333 INFO L85 PathProgramCache]: Analyzing trace with hash -147467177, now seen corresponding path program 16 times [2022-12-14 07:35:37,333 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 07:35:37,334 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1236410024] [2022-12-14 07:35:37,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 07:35:37,334 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 07:35:37,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:35:38,205 INFO L134 CoverageAnalysis]: Checked inductivity of 235 backedges. 81 proven. 153 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 07:35:38,205 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 07:35:38,205 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1236410024] [2022-12-14 07:35:38,205 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1236410024] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 07:35:38,206 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [663761851] [2022-12-14 07:35:38,206 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 07:35:38,206 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 07:35:38,206 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 07:35:38,206 INFO L229 MonitoredProcess]: Starting monitored process 53 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 07:35:38,207 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_52031c84-29c2-4fd6-8804-87ae79c61fed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Waiting until timeout for monitored process [2022-12-14 07:35:38,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 07:35:38,371 INFO L263 TraceCheckSpWp]: Trace formula consists of 423 conjuncts, 101 conjunts are in the unsatisfiable core [2022-12-14 07:35:38,372 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 07:35:38,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10