./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/cstrncat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/cstrncat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d8697c629a22dee8b5a51c26261db89d3e1115a5e0c1bc03fd54c09ffc3b9b0d --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 12:08:12,208 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 12:08:12,210 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 12:08:12,222 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 12:08:12,223 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 12:08:12,224 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 12:08:12,224 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 12:08:12,225 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 12:08:12,227 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 12:08:12,227 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 12:08:12,228 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 12:08:12,229 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 12:08:12,229 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 12:08:12,230 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 12:08:12,230 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 12:08:12,231 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 12:08:12,232 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 12:08:12,233 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 12:08:12,234 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 12:08:12,235 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 12:08:12,236 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 12:08:12,237 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 12:08:12,238 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 12:08:12,238 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 12:08:12,241 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 12:08:12,241 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 12:08:12,241 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 12:08:12,242 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 12:08:12,242 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 12:08:12,242 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 12:08:12,243 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 12:08:12,243 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 12:08:12,244 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 12:08:12,244 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 12:08:12,245 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 12:08:12,245 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 12:08:12,246 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 12:08:12,246 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 12:08:12,246 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 12:08:12,246 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 12:08:12,247 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 12:08:12,248 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-12-14 12:08:12,262 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 12:08:12,262 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 12:08:12,263 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 12:08:12,263 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 12:08:12,263 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 12:08:12,263 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 12:08:12,263 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 12:08:12,264 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 12:08:12,264 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 12:08:12,264 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 12:08:12,264 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 12:08:12,264 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 12:08:12,264 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 12:08:12,264 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 12:08:12,264 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 12:08:12,264 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 12:08:12,265 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 12:08:12,265 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 12:08:12,265 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-14 12:08:12,265 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-14 12:08:12,265 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 12:08:12,266 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 12:08:12,266 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-14 12:08:12,266 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 12:08:12,266 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 12:08:12,266 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 12:08:12,266 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-12-14 12:08:12,266 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-12-14 12:08:12,266 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-12-14 12:08:12,266 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 12:08:12,267 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-12-14 12:08:12,267 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 12:08:12,267 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 12:08:12,267 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 12:08:12,267 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 12:08:12,267 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 12:08:12,267 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 12:08:12,267 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 12:08:12,268 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 12:08:12,268 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 12:08:12,268 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 12:08:12,268 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 12:08:12,268 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d8697c629a22dee8b5a51c26261db89d3e1115a5e0c1bc03fd54c09ffc3b9b0d [2022-12-14 12:08:12,445 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 12:08:12,463 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 12:08:12,465 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 12:08:12,466 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 12:08:12,466 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 12:08:12,467 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/array-memsafety/cstrncat-alloca-2.i [2022-12-14 12:08:15,052 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 12:08:15,268 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 12:08:15,273 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/sv-benchmarks/c/array-memsafety/cstrncat-alloca-2.i [2022-12-14 12:08:15,285 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/data/c22fe843d/69d40a995d6240799aa59f695b3c43a1/FLAG302a610a5 [2022-12-14 12:08:15,610 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/data/c22fe843d/69d40a995d6240799aa59f695b3c43a1 [2022-12-14 12:08:15,612 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 12:08:15,613 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 12:08:15,614 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 12:08:15,614 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 12:08:15,617 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 12:08:15,618 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 12:08:15" (1/1) ... [2022-12-14 12:08:15,619 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7f4126c2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15, skipping insertion in model container [2022-12-14 12:08:15,619 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 12:08:15" (1/1) ... [2022-12-14 12:08:15,624 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 12:08:15,653 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 12:08:15,841 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 12:08:15,849 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 12:08:15,879 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 12:08:15,896 INFO L208 MainTranslator]: Completed translation [2022-12-14 12:08:15,896 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15 WrapperNode [2022-12-14 12:08:15,896 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 12:08:15,897 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 12:08:15,897 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 12:08:15,897 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 12:08:15,903 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15" (1/1) ... [2022-12-14 12:08:15,913 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15" (1/1) ... [2022-12-14 12:08:15,928 INFO L138 Inliner]: procedures = 117, calls = 18, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 107 [2022-12-14 12:08:15,928 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 12:08:15,929 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 12:08:15,929 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 12:08:15,929 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 12:08:15,936 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15" (1/1) ... [2022-12-14 12:08:15,936 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15" (1/1) ... [2022-12-14 12:08:15,939 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15" (1/1) ... [2022-12-14 12:08:15,940 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15" (1/1) ... [2022-12-14 12:08:15,943 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15" (1/1) ... [2022-12-14 12:08:15,946 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15" (1/1) ... [2022-12-14 12:08:15,946 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15" (1/1) ... [2022-12-14 12:08:15,947 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15" (1/1) ... [2022-12-14 12:08:15,949 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 12:08:15,949 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 12:08:15,949 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 12:08:15,949 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 12:08:15,950 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15" (1/1) ... [2022-12-14 12:08:15,955 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 12:08:15,962 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:08:15,972 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 12:08:15,974 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 12:08:16,004 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-12-14 12:08:16,005 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-12-14 12:08:16,005 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-12-14 12:08:16,005 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-12-14 12:08:16,005 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 12:08:16,005 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 12:08:16,085 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 12:08:16,087 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 12:08:16,289 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 12:08:16,342 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 12:08:16,342 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-12-14 12:08:16,345 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 12:08:16 BoogieIcfgContainer [2022-12-14 12:08:16,345 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 12:08:16,348 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 12:08:16,348 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 12:08:16,351 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 12:08:16,352 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 12:08:15" (1/3) ... [2022-12-14 12:08:16,352 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@56f7bd7f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 12:08:16, skipping insertion in model container [2022-12-14 12:08:16,352 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 12:08:15" (2/3) ... [2022-12-14 12:08:16,353 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@56f7bd7f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 12:08:16, skipping insertion in model container [2022-12-14 12:08:16,353 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 12:08:16" (3/3) ... [2022-12-14 12:08:16,354 INFO L112 eAbstractionObserver]: Analyzing ICFG cstrncat-alloca-2.i [2022-12-14 12:08:16,374 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 12:08:16,374 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 19 error locations. [2022-12-14 12:08:16,418 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 12:08:16,424 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@70254ab3, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 12:08:16,424 INFO L358 AbstractCegarLoop]: Starting to check reachability of 19 error locations. [2022-12-14 12:08:16,428 INFO L276 IsEmpty]: Start isEmpty. Operand has 40 states, 20 states have (on average 2.4) internal successors, (48), 39 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:16,433 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-12-14 12:08:16,434 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:16,434 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-12-14 12:08:16,435 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:16,438 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:16,439 INFO L85 PathProgramCache]: Analyzing trace with hash 169012, now seen corresponding path program 1 times [2022-12-14 12:08:16,446 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:16,446 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1677487594] [2022-12-14 12:08:16,446 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:16,447 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:16,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:16,592 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:16,592 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:16,592 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1677487594] [2022-12-14 12:08:16,593 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1677487594] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:16,593 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:16,593 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-12-14 12:08:16,595 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1680129954] [2022-12-14 12:08:16,596 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:16,600 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 12:08:16,601 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:16,636 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 12:08:16,636 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 12:08:16,638 INFO L87 Difference]: Start difference. First operand has 40 states, 20 states have (on average 2.4) internal successors, (48), 39 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:16,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:16,696 INFO L93 Difference]: Finished difference Result 41 states and 47 transitions. [2022-12-14 12:08:16,698 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 12:08:16,699 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-12-14 12:08:16,699 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:16,706 INFO L225 Difference]: With dead ends: 41 [2022-12-14 12:08:16,706 INFO L226 Difference]: Without dead ends: 39 [2022-12-14 12:08:16,708 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 12:08:16,711 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 1 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 56 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:16,712 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 56 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 12:08:16,728 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2022-12-14 12:08:16,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 39. [2022-12-14 12:08:16,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 20 states have (on average 2.2) internal successors, (44), 38 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:16,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 44 transitions. [2022-12-14 12:08:16,738 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 44 transitions. Word has length 3 [2022-12-14 12:08:16,738 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:16,739 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 44 transitions. [2022-12-14 12:08:16,739 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:16,739 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 44 transitions. [2022-12-14 12:08:16,739 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 12:08:16,739 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:16,739 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 12:08:16,739 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 12:08:16,740 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:16,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:16,740 INFO L85 PathProgramCache]: Analyzing trace with hash 5238508, now seen corresponding path program 1 times [2022-12-14 12:08:16,740 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:16,741 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1266560878] [2022-12-14 12:08:16,741 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:16,741 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:16,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:16,909 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:16,910 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:16,910 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1266560878] [2022-12-14 12:08:16,910 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1266560878] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:16,910 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:16,910 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 12:08:16,911 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1929551999] [2022-12-14 12:08:16,911 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:16,911 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 12:08:16,912 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:16,912 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 12:08:16,912 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 12:08:16,912 INFO L87 Difference]: Start difference. First operand 39 states and 44 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:16,942 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:16,942 INFO L93 Difference]: Finished difference Result 37 states and 42 transitions. [2022-12-14 12:08:16,942 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 12:08:16,942 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 12:08:16,942 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:16,943 INFO L225 Difference]: With dead ends: 37 [2022-12-14 12:08:16,943 INFO L226 Difference]: Without dead ends: 37 [2022-12-14 12:08:16,943 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 12:08:16,944 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:16,944 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 20 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 12:08:16,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-12-14 12:08:16,947 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 37. [2022-12-14 12:08:16,948 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 20 states have (on average 2.1) internal successors, (42), 36 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:16,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 42 transitions. [2022-12-14 12:08:16,948 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 42 transitions. Word has length 4 [2022-12-14 12:08:16,949 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:16,949 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 42 transitions. [2022-12-14 12:08:16,949 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:16,949 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 42 transitions. [2022-12-14 12:08:16,949 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 12:08:16,949 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:16,949 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 12:08:16,949 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 12:08:16,950 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:16,950 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:16,950 INFO L85 PathProgramCache]: Analyzing trace with hash 5238509, now seen corresponding path program 1 times [2022-12-14 12:08:16,950 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:16,951 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [329923284] [2022-12-14 12:08:16,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:16,951 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:16,971 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:17,185 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:17,186 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:17,186 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [329923284] [2022-12-14 12:08:17,186 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [329923284] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:17,186 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:17,186 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 12:08:17,187 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1266993847] [2022-12-14 12:08:17,187 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:17,187 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 12:08:17,187 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:17,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 12:08:17,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 12:08:17,188 INFO L87 Difference]: Start difference. First operand 37 states and 42 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:17,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:17,353 INFO L93 Difference]: Finished difference Result 71 states and 81 transitions. [2022-12-14 12:08:17,353 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 12:08:17,353 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 12:08:17,354 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:17,354 INFO L225 Difference]: With dead ends: 71 [2022-12-14 12:08:17,354 INFO L226 Difference]: Without dead ends: 71 [2022-12-14 12:08:17,354 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-14 12:08:17,363 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 147 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 70 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 55 SdHoareTripleChecker+Invalid, 71 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 70 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:17,363 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [147 Valid, 55 Invalid, 71 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 70 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 12:08:17,364 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2022-12-14 12:08:17,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 39. [2022-12-14 12:08:17,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 22 states have (on average 2.0454545454545454) internal successors, (45), 38 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:17,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 45 transitions. [2022-12-14 12:08:17,368 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 45 transitions. Word has length 4 [2022-12-14 12:08:17,368 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:17,368 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 45 transitions. [2022-12-14 12:08:17,369 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:17,369 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 45 transitions. [2022-12-14 12:08:17,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 12:08:17,369 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:17,369 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 12:08:17,369 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 12:08:17,369 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:17,370 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:17,370 INFO L85 PathProgramCache]: Analyzing trace with hash 162495202, now seen corresponding path program 1 times [2022-12-14 12:08:17,370 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:17,370 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [302035954] [2022-12-14 12:08:17,370 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:17,370 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:17,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:17,406 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:17,406 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:17,406 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [302035954] [2022-12-14 12:08:17,407 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [302035954] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:17,407 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:17,407 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 12:08:17,407 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1234090356] [2022-12-14 12:08:17,407 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:17,407 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 12:08:17,407 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:17,408 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 12:08:17,408 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 12:08:17,408 INFO L87 Difference]: Start difference. First operand 39 states and 45 transitions. Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:17,433 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:17,433 INFO L93 Difference]: Finished difference Result 37 states and 43 transitions. [2022-12-14 12:08:17,433 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 12:08:17,433 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 12:08:17,433 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:17,434 INFO L225 Difference]: With dead ends: 37 [2022-12-14 12:08:17,434 INFO L226 Difference]: Without dead ends: 37 [2022-12-14 12:08:17,434 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 12:08:17,435 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 34 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:17,436 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 20 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 12:08:17,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-12-14 12:08:17,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 37. [2022-12-14 12:08:17,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 22 states have (on average 1.9545454545454546) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:17,438 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-12-14 12:08:17,438 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 5 [2022-12-14 12:08:17,438 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:17,438 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-12-14 12:08:17,438 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:17,438 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-12-14 12:08:17,438 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 12:08:17,439 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:17,439 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 12:08:17,439 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-14 12:08:17,439 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:17,439 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:17,439 INFO L85 PathProgramCache]: Analyzing trace with hash 162495203, now seen corresponding path program 1 times [2022-12-14 12:08:17,439 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:17,439 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1923117139] [2022-12-14 12:08:17,439 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:17,440 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:17,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:17,480 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:17,480 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:17,480 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1923117139] [2022-12-14 12:08:17,480 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1923117139] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:17,480 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:17,480 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 12:08:17,481 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [176020310] [2022-12-14 12:08:17,481 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:17,481 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 12:08:17,481 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:17,482 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 12:08:17,482 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 12:08:17,482 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 4 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:17,529 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:17,529 INFO L93 Difference]: Finished difference Result 65 states and 74 transitions. [2022-12-14 12:08:17,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 12:08:17,530 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 12:08:17,530 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:17,531 INFO L225 Difference]: With dead ends: 65 [2022-12-14 12:08:17,531 INFO L226 Difference]: Without dead ends: 65 [2022-12-14 12:08:17,531 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 12:08:17,532 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 64 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 39 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 80 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 39 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:17,533 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [64 Valid, 80 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 39 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 12:08:17,534 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-12-14 12:08:17,537 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 38. [2022-12-14 12:08:17,537 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 23 states have (on average 1.9130434782608696) internal successors, (44), 37 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:17,538 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 44 transitions. [2022-12-14 12:08:17,538 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 44 transitions. Word has length 5 [2022-12-14 12:08:17,538 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:17,538 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 44 transitions. [2022-12-14 12:08:17,539 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:17,539 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 44 transitions. [2022-12-14 12:08:17,539 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 12:08:17,539 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:17,539 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 12:08:17,539 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 12:08:17,539 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:17,540 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:17,540 INFO L85 PathProgramCache]: Analyzing trace with hash 162498002, now seen corresponding path program 1 times [2022-12-14 12:08:17,540 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:17,540 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1395491837] [2022-12-14 12:08:17,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:17,540 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:17,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:17,769 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:17,769 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:17,770 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1395491837] [2022-12-14 12:08:17,770 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1395491837] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:17,770 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:17,770 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 12:08:17,770 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [892922249] [2022-12-14 12:08:17,770 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:17,770 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 12:08:17,771 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:17,771 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 12:08:17,771 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-12-14 12:08:17,771 INFO L87 Difference]: Start difference. First operand 38 states and 44 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:17,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:17,939 INFO L93 Difference]: Finished difference Result 64 states and 73 transitions. [2022-12-14 12:08:17,939 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 12:08:17,940 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 12:08:17,940 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:17,940 INFO L225 Difference]: With dead ends: 64 [2022-12-14 12:08:17,940 INFO L226 Difference]: Without dead ends: 64 [2022-12-14 12:08:17,940 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2022-12-14 12:08:17,941 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 131 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 131 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 49 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:17,942 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [131 Valid, 32 Invalid, 49 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 12:08:17,942 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64 states. [2022-12-14 12:08:17,945 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64 to 39. [2022-12-14 12:08:17,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 24 states have (on average 1.875) internal successors, (45), 38 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:17,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 45 transitions. [2022-12-14 12:08:17,946 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 45 transitions. Word has length 5 [2022-12-14 12:08:17,946 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:17,946 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 45 transitions. [2022-12-14 12:08:17,946 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:17,946 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 45 transitions. [2022-12-14 12:08:17,946 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 12:08:17,946 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:17,947 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-12-14 12:08:17,947 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-14 12:08:17,947 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:17,947 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:17,947 INFO L85 PathProgramCache]: Analyzing trace with hash 739335090, now seen corresponding path program 1 times [2022-12-14 12:08:17,948 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:17,948 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [363105961] [2022-12-14 12:08:17,948 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:17,948 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:17,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:18,272 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:18,272 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:18,273 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [363105961] [2022-12-14 12:08:18,273 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [363105961] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:08:18,273 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [557193733] [2022-12-14 12:08:18,273 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:18,273 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:18,273 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:08:18,274 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:08:18,275 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 12:08:18,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:18,327 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 21 conjunts are in the unsatisfiable core [2022-12-14 12:08:18,332 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:08:18,426 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:18,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 12:08:18,438 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:08:18,563 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:18,563 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:08:18,705 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:08:18,725 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:18,726 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [557193733] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:08:18,726 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1359574651] [2022-12-14 12:08:18,744 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-12-14 12:08:18,745 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:08:18,749 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:08:18,754 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:08:18,754 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:08:18,844 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:18,847 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:18,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:08:18,900 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:08:18,984 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:19,018 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:19,038 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:08:19,364 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '665#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:08:19,364 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:08:19,364 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:08:19,364 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 4, 4] total 13 [2022-12-14 12:08:19,364 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1666482001] [2022-12-14 12:08:19,365 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:08:19,365 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2022-12-14 12:08:19,365 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:19,365 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2022-12-14 12:08:19,366 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=265, Unknown=0, NotChecked=0, Total=342 [2022-12-14 12:08:19,366 INFO L87 Difference]: Start difference. First operand 39 states and 45 transitions. Second operand has 15 states, 14 states have (on average 1.2857142857142858) internal successors, (18), 14 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:19,719 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:19,719 INFO L93 Difference]: Finished difference Result 94 states and 108 transitions. [2022-12-14 12:08:19,719 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-14 12:08:19,719 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 14 states have (on average 1.2857142857142858) internal successors, (18), 14 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 12:08:19,720 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:19,720 INFO L225 Difference]: With dead ends: 94 [2022-12-14 12:08:19,720 INFO L226 Difference]: Without dead ends: 94 [2022-12-14 12:08:19,721 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=126, Invalid=380, Unknown=0, NotChecked=0, Total=506 [2022-12-14 12:08:19,721 INFO L413 NwaCegarLoop]: 47 mSDtfsCounter, 372 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 245 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 372 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 249 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 245 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:19,722 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [372 Valid, 188 Invalid, 249 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 245 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 12:08:19,722 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-12-14 12:08:19,725 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 37. [2022-12-14 12:08:19,725 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 23 states have (on average 1.8695652173913044) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:19,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-12-14 12:08:19,725 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 6 [2022-12-14 12:08:19,726 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:19,726 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-12-14 12:08:19,726 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 14 states have (on average 1.2857142857142858) internal successors, (18), 14 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:19,726 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-12-14 12:08:19,726 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 12:08:19,726 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:19,727 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-12-14 12:08:19,732 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 12:08:19,927 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:19,928 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:19,928 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:19,929 INFO L85 PathProgramCache]: Analyzing trace with hash 742470770, now seen corresponding path program 1 times [2022-12-14 12:08:19,929 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:19,929 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [344611842] [2022-12-14 12:08:19,929 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:19,929 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:19,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:20,148 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:20,149 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:20,149 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [344611842] [2022-12-14 12:08:20,149 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [344611842] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:20,149 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:20,149 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 12:08:20,149 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1408611296] [2022-12-14 12:08:20,149 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:20,150 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 12:08:20,150 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:20,150 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 12:08:20,150 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 12:08:20,150 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:20,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:20,239 INFO L93 Difference]: Finished difference Result 62 states and 71 transitions. [2022-12-14 12:08:20,239 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 12:08:20,239 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 12:08:20,239 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:20,240 INFO L225 Difference]: With dead ends: 62 [2022-12-14 12:08:20,240 INFO L226 Difference]: Without dead ends: 62 [2022-12-14 12:08:20,240 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2022-12-14 12:08:20,241 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 96 mSDsluCounter, 30 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 47 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:20,241 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 47 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 12:08:20,242 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-12-14 12:08:20,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 38. [2022-12-14 12:08:20,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 24 states have (on average 1.8333333333333333) internal successors, (44), 37 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:20,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 44 transitions. [2022-12-14 12:08:20,245 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 44 transitions. Word has length 6 [2022-12-14 12:08:20,245 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:20,245 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 44 transitions. [2022-12-14 12:08:20,245 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:20,245 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 44 transitions. [2022-12-14 12:08:20,245 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 12:08:20,245 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:20,245 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:20,246 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-14 12:08:20,246 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:20,246 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:20,246 INFO L85 PathProgramCache]: Analyzing trace with hash 1444652734, now seen corresponding path program 1 times [2022-12-14 12:08:20,246 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:20,246 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1492585209] [2022-12-14 12:08:20,247 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:20,247 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:20,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:20,382 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:20,382 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:20,382 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1492585209] [2022-12-14 12:08:20,383 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1492585209] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:08:20,383 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1500181810] [2022-12-14 12:08:20,383 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:20,383 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:20,383 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:08:20,384 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:08:20,385 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 12:08:20,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:20,427 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 14 conjunts are in the unsatisfiable core [2022-12-14 12:08:20,429 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:08:20,475 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 12:08:20,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 12:08:20,575 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 12:08:20,575 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 12:08:20,575 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1500181810] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:20,576 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 12:08:20,576 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [5] total 9 [2022-12-14 12:08:20,576 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [39143588] [2022-12-14 12:08:20,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:20,576 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 12:08:20,576 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:20,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 12:08:20,577 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2022-12-14 12:08:20,577 INFO L87 Difference]: Start difference. First operand 38 states and 44 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:20,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:20,654 INFO L93 Difference]: Finished difference Result 36 states and 42 transitions. [2022-12-14 12:08:20,654 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 12:08:20,654 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 12:08:20,655 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:20,655 INFO L225 Difference]: With dead ends: 36 [2022-12-14 12:08:20,655 INFO L226 Difference]: Without dead ends: 36 [2022-12-14 12:08:20,655 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=75, Unknown=0, NotChecked=0, Total=110 [2022-12-14 12:08:20,656 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 63 mSDsluCounter, 17 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 33 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:20,656 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 33 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 12:08:20,657 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-12-14 12:08:20,658 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 35. [2022-12-14 12:08:20,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 23 states have (on average 1.7826086956521738) internal successors, (41), 34 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:20,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 41 transitions. [2022-12-14 12:08:20,659 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 41 transitions. Word has length 7 [2022-12-14 12:08:20,659 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:20,659 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 41 transitions. [2022-12-14 12:08:20,659 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:20,659 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 41 transitions. [2022-12-14 12:08:20,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 12:08:20,659 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:20,660 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:20,665 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 12:08:20,860 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-12-14 12:08:20,862 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:20,863 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:20,863 INFO L85 PathProgramCache]: Analyzing trace with hash 1444655533, now seen corresponding path program 1 times [2022-12-14 12:08:20,864 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:20,864 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1831871516] [2022-12-14 12:08:20,864 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:20,865 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:20,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:21,275 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:21,275 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:21,275 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1831871516] [2022-12-14 12:08:21,275 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1831871516] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:08:21,275 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [310758489] [2022-12-14 12:08:21,275 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:21,275 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:21,275 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:08:21,276 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:08:21,277 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 12:08:21,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:21,322 INFO L263 TraceCheckSpWp]: Trace formula consists of 73 conjuncts, 24 conjunts are in the unsatisfiable core [2022-12-14 12:08:21,324 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:08:21,359 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:21,360 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 12:08:21,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:08:21,505 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:21,505 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:08:21,631 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:08:21,651 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:21,651 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [310758489] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:08:21,651 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [548713800] [2022-12-14 12:08:21,653 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-12-14 12:08:21,654 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:08:21,654 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:08:21,654 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:08:21,654 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:08:21,687 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:21,690 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:21,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:08:21,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:21,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:21,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:21,838 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:08:22,381 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1069#(and (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (or (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~length1~0#1|) (+ |ULTIMATE.start_main_~n~0#1| (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|)))) (not (<= (+ |ULTIMATE.start_main_~n~0#1| 1) (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~length1~0#1|)))) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (not (< (+ |ULTIMATE.start_main_~i~0#1| |ULTIMATE.start_main_~n~0#1| 1) |ULTIMATE.start_main_~length1~0#1|)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (not (< (+ |ULTIMATE.start_main_~i~1#1| 1) |ULTIMATE.start_main_~length2~0#1|)) (<= 0 |#NULL.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:08:22,382 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:08:22,382 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:08:22,382 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-12-14 12:08:22,382 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [50735653] [2022-12-14 12:08:22,382 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:08:22,382 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-12-14 12:08:22,382 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:22,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-12-14 12:08:22,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=133, Invalid=373, Unknown=0, NotChecked=0, Total=506 [2022-12-14 12:08:22,383 INFO L87 Difference]: Start difference. First operand 35 states and 41 transitions. Second operand has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:22,600 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:22,600 INFO L93 Difference]: Finished difference Result 59 states and 68 transitions. [2022-12-14 12:08:22,600 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 12:08:22,601 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 12:08:22,601 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:22,601 INFO L225 Difference]: With dead ends: 59 [2022-12-14 12:08:22,601 INFO L226 Difference]: Without dead ends: 59 [2022-12-14 12:08:22,601 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 25 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 200 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=188, Invalid=514, Unknown=0, NotChecked=0, Total=702 [2022-12-14 12:08:22,602 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 328 mSDsluCounter, 63 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 328 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 119 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:22,602 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [328 Valid, 94 Invalid, 119 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 12:08:22,602 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-12-14 12:08:22,603 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 33. [2022-12-14 12:08:22,603 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 32 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:22,603 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2022-12-14 12:08:22,604 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 7 [2022-12-14 12:08:22,604 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:22,604 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2022-12-14 12:08:22,604 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:22,604 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2022-12-14 12:08:22,604 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 12:08:22,604 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:22,604 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:22,609 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 12:08:22,805 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:22,805 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:22,805 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:22,806 INFO L85 PathProgramCache]: Analyzing trace with hash 1541759354, now seen corresponding path program 1 times [2022-12-14 12:08:22,806 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:22,806 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [313013990] [2022-12-14 12:08:22,806 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:22,806 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:22,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:22,853 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:22,853 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:22,853 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [313013990] [2022-12-14 12:08:22,853 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [313013990] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:22,853 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:22,853 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 12:08:22,853 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1191354019] [2022-12-14 12:08:22,853 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:22,853 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 12:08:22,853 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:22,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 12:08:22,854 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 12:08:22,854 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:22,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:22,883 INFO L93 Difference]: Finished difference Result 29 states and 35 transitions. [2022-12-14 12:08:22,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 12:08:22,883 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 12:08:22,883 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:22,883 INFO L225 Difference]: With dead ends: 29 [2022-12-14 12:08:22,883 INFO L226 Difference]: Without dead ends: 29 [2022-12-14 12:08:22,883 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 12:08:22,884 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 45 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 45 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:22,884 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [45 Valid, 14 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 12:08:22,884 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-12-14 12:08:22,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-12-14 12:08:22,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 22 states have (on average 1.5909090909090908) internal successors, (35), 28 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:22,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 35 transitions. [2022-12-14 12:08:22,885 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 35 transitions. Word has length 7 [2022-12-14 12:08:22,885 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:22,885 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 35 transitions. [2022-12-14 12:08:22,886 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:22,886 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 35 transitions. [2022-12-14 12:08:22,886 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 12:08:22,886 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:22,886 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:22,886 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-12-14 12:08:22,886 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:22,886 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:22,886 INFO L85 PathProgramCache]: Analyzing trace with hash 1541759355, now seen corresponding path program 1 times [2022-12-14 12:08:22,886 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:22,886 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [813880918] [2022-12-14 12:08:22,886 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:22,887 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:22,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:22,939 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:22,939 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:22,939 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [813880918] [2022-12-14 12:08:22,939 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [813880918] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:22,939 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:22,939 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 12:08:22,940 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [823434025] [2022-12-14 12:08:22,940 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:22,940 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 12:08:22,940 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:22,940 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 12:08:22,940 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-12-14 12:08:22,941 INFO L87 Difference]: Start difference. First operand 29 states and 35 transitions. Second operand has 5 states, 4 states have (on average 1.75) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:22,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:22,989 INFO L93 Difference]: Finished difference Result 46 states and 55 transitions. [2022-12-14 12:08:22,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 12:08:22,990 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 12:08:22,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:22,990 INFO L225 Difference]: With dead ends: 46 [2022-12-14 12:08:22,990 INFO L226 Difference]: Without dead ends: 46 [2022-12-14 12:08:22,990 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-12-14 12:08:22,991 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 107 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:22,991 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 26 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 12:08:22,991 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2022-12-14 12:08:22,992 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 39. [2022-12-14 12:08:22,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 32 states have (on average 1.59375) internal successors, (51), 38 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:22,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 51 transitions. [2022-12-14 12:08:22,992 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 51 transitions. Word has length 7 [2022-12-14 12:08:22,992 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:22,992 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 51 transitions. [2022-12-14 12:08:22,993 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:22,993 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 51 transitions. [2022-12-14 12:08:22,993 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-12-14 12:08:22,993 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:22,993 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:22,993 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-12-14 12:08:22,993 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:22,993 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:22,993 INFO L85 PathProgramCache]: Analyzing trace with hash -132976364, now seen corresponding path program 1 times [2022-12-14 12:08:22,993 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:22,993 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1513175663] [2022-12-14 12:08:22,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:22,994 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:23,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:23,260 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:23,261 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:23,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1513175663] [2022-12-14 12:08:23,261 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1513175663] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:08:23,261 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [869678355] [2022-12-14 12:08:23,261 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:23,261 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:23,261 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:08:23,262 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:08:23,263 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-12-14 12:08:23,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:23,322 INFO L263 TraceCheckSpWp]: Trace formula consists of 111 conjuncts, 35 conjunts are in the unsatisfiable core [2022-12-14 12:08:23,324 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:08:23,331 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:08:23,374 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:08:23,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 12:08:23,471 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:08:23,473 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:08:23,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-12-14 12:08:23,489 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:23,489 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 12:08:23,489 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [869678355] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:23,489 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 12:08:23,489 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [5] total 12 [2022-12-14 12:08:23,489 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [965960865] [2022-12-14 12:08:23,489 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:23,490 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-12-14 12:08:23,490 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:23,490 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-14 12:08:23,490 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=111, Unknown=0, NotChecked=0, Total=132 [2022-12-14 12:08:23,490 INFO L87 Difference]: Start difference. First operand 39 states and 51 transitions. Second operand has 7 states, 7 states have (on average 1.2857142857142858) internal successors, (9), 7 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:23,713 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:23,713 INFO L93 Difference]: Finished difference Result 93 states and 113 transitions. [2022-12-14 12:08:23,713 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-14 12:08:23,713 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 1.2857142857142858) internal successors, (9), 7 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-12-14 12:08:23,713 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:23,715 INFO L225 Difference]: With dead ends: 93 [2022-12-14 12:08:23,715 INFO L226 Difference]: Without dead ends: 93 [2022-12-14 12:08:23,716 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=49, Invalid=191, Unknown=0, NotChecked=0, Total=240 [2022-12-14 12:08:23,716 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 142 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 104 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:23,716 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 128 Invalid, 104 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 12:08:23,717 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-12-14 12:08:23,720 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 43. [2022-12-14 12:08:23,720 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 36 states have (on average 1.5277777777777777) internal successors, (55), 42 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:23,721 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 55 transitions. [2022-12-14 12:08:23,721 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 55 transitions. Word has length 9 [2022-12-14 12:08:23,721 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:23,721 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 55 transitions. [2022-12-14 12:08:23,721 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 1.2857142857142858) internal successors, (9), 7 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:23,721 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 55 transitions. [2022-12-14 12:08:23,721 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 12:08:23,722 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:23,722 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:23,727 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-12-14 12:08:23,922 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-12-14 12:08:23,922 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:23,923 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:23,923 INFO L85 PathProgramCache]: Analyzing trace with hash -1736460433, now seen corresponding path program 1 times [2022-12-14 12:08:23,923 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:23,923 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [406237109] [2022-12-14 12:08:23,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:23,923 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:23,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:24,032 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:24,033 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:24,033 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [406237109] [2022-12-14 12:08:24,033 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [406237109] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:08:24,033 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [500129159] [2022-12-14 12:08:24,033 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:24,033 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:24,033 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:08:24,034 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:08:24,035 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-12-14 12:08:24,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:24,091 INFO L263 TraceCheckSpWp]: Trace formula consists of 124 conjuncts, 20 conjunts are in the unsatisfiable core [2022-12-14 12:08:24,092 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:08:24,144 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:24,144 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:08:24,205 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 12:08:24,223 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:24,223 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [500129159] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:08:24,223 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [812319785] [2022-12-14 12:08:24,225 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:08:24,225 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:08:24,225 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:08:24,225 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:08:24,225 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:08:24,265 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:24,267 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:24,268 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:08:24,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:08:24,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:24,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:24,433 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:08:24,480 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:08:24,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:08:24,613 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:08:25,771 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1588#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:08:25,771 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:08:25,771 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:08:25,771 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 16 [2022-12-14 12:08:25,771 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [477845827] [2022-12-14 12:08:25,771 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:08:25,772 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-12-14 12:08:25,772 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:25,772 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-12-14 12:08:25,773 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=92, Invalid=558, Unknown=0, NotChecked=0, Total=650 [2022-12-14 12:08:25,773 INFO L87 Difference]: Start difference. First operand 43 states and 55 transitions. Second operand has 17 states, 16 states have (on average 1.5625) internal successors, (25), 17 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:25,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:25,976 INFO L93 Difference]: Finished difference Result 98 states and 118 transitions. [2022-12-14 12:08:25,976 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-12-14 12:08:25,976 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.5625) internal successors, (25), 17 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 12:08:25,977 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:25,977 INFO L225 Difference]: With dead ends: 98 [2022-12-14 12:08:25,977 INFO L226 Difference]: Without dead ends: 98 [2022-12-14 12:08:25,978 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 12 SyntacticMatches, 2 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 264 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=153, Invalid=839, Unknown=0, NotChecked=0, Total=992 [2022-12-14 12:08:25,979 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 455 mSDsluCounter, 152 mSDsCounter, 0 mSdLazyCounter, 294 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 455 SdHoareTripleChecker+Valid, 184 SdHoareTripleChecker+Invalid, 311 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 294 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:25,979 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [455 Valid, 184 Invalid, 311 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 294 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 12:08:25,979 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2022-12-14 12:08:25,982 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 46. [2022-12-14 12:08:25,982 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 40 states have (on average 1.525) internal successors, (61), 45 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:25,982 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 61 transitions. [2022-12-14 12:08:25,982 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 61 transitions. Word has length 11 [2022-12-14 12:08:25,982 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:25,982 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 61 transitions. [2022-12-14 12:08:25,983 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.5625) internal successors, (25), 17 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:25,983 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 61 transitions. [2022-12-14 12:08:25,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 12:08:25,983 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:25,983 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:25,988 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-12-14 12:08:26,184 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-12-14 12:08:26,185 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:26,186 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:26,186 INFO L85 PathProgramCache]: Analyzing trace with hash 1058687876, now seen corresponding path program 1 times [2022-12-14 12:08:26,187 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:26,187 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1383231807] [2022-12-14 12:08:26,188 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:26,188 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:26,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:26,249 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:26,250 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:26,250 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1383231807] [2022-12-14 12:08:26,250 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1383231807] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:26,250 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:26,250 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 12:08:26,250 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1386618483] [2022-12-14 12:08:26,250 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:26,251 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 12:08:26,251 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:26,251 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 12:08:26,251 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 12:08:26,251 INFO L87 Difference]: Start difference. First operand 46 states and 61 transitions. Second operand has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:26,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:26,282 INFO L93 Difference]: Finished difference Result 47 states and 62 transitions. [2022-12-14 12:08:26,283 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 12:08:26,283 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 12:08:26,283 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:26,283 INFO L225 Difference]: With dead ends: 47 [2022-12-14 12:08:26,283 INFO L226 Difference]: Without dead ends: 47 [2022-12-14 12:08:26,283 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 12:08:26,284 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 18 mSDsluCounter, 12 mSDsCounter, 0 mSdLazyCounter, 40 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 40 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:26,284 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 30 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 40 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 12:08:26,284 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2022-12-14 12:08:26,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 45. [2022-12-14 12:08:26,285 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 40 states have (on average 1.45) internal successors, (58), 44 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:26,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 58 transitions. [2022-12-14 12:08:26,286 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 58 transitions. Word has length 11 [2022-12-14 12:08:26,286 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:26,286 INFO L495 AbstractCegarLoop]: Abstraction has 45 states and 58 transitions. [2022-12-14 12:08:26,286 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:26,286 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 58 transitions. [2022-12-14 12:08:26,286 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 12:08:26,286 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:26,287 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:26,287 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-12-14 12:08:26,287 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:26,287 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:26,287 INFO L85 PathProgramCache]: Analyzing trace with hash 1058687877, now seen corresponding path program 1 times [2022-12-14 12:08:26,287 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:26,287 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1696070924] [2022-12-14 12:08:26,287 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:26,288 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:26,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:26,389 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:26,389 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:26,389 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1696070924] [2022-12-14 12:08:26,389 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1696070924] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:26,389 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:26,389 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 12:08:26,389 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1704453150] [2022-12-14 12:08:26,389 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:26,390 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 12:08:26,390 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:26,390 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 12:08:26,390 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 12:08:26,390 INFO L87 Difference]: Start difference. First operand 45 states and 58 transitions. Second operand has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:26,457 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:26,457 INFO L93 Difference]: Finished difference Result 66 states and 84 transitions. [2022-12-14 12:08:26,457 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 12:08:26,457 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 12:08:26,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:26,458 INFO L225 Difference]: With dead ends: 66 [2022-12-14 12:08:26,458 INFO L226 Difference]: Without dead ends: 66 [2022-12-14 12:08:26,458 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-14 12:08:26,459 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 57 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:26,459 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 29 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 12:08:26,460 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2022-12-14 12:08:26,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 54. [2022-12-14 12:08:26,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 49 states have (on average 1.4489795918367347) internal successors, (71), 53 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:26,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 71 transitions. [2022-12-14 12:08:26,462 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 71 transitions. Word has length 11 [2022-12-14 12:08:26,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:26,462 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 71 transitions. [2022-12-14 12:08:26,462 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:26,462 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 71 transitions. [2022-12-14 12:08:26,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-12-14 12:08:26,463 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:26,463 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:26,463 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-12-14 12:08:26,463 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:26,464 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:26,464 INFO L85 PathProgramCache]: Analyzing trace with hash 2003802632, now seen corresponding path program 2 times [2022-12-14 12:08:26,464 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:26,464 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [191456930] [2022-12-14 12:08:26,464 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:26,464 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:26,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:26,813 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:26,813 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:26,813 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [191456930] [2022-12-14 12:08:26,813 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [191456930] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:08:26,813 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1856730567] [2022-12-14 12:08:26,813 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:08:26,813 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:26,813 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:08:26,814 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:08:26,815 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-12-14 12:08:26,883 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 12:08:26,883 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:08:26,884 INFO L263 TraceCheckSpWp]: Trace formula consists of 135 conjuncts, 46 conjunts are in the unsatisfiable core [2022-12-14 12:08:26,886 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:08:27,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:08:27,052 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:27,052 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 26 [2022-12-14 12:08:27,256 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:27,257 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:27,257 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:08:27,258 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:08:27,265 INFO L321 Elim1Store]: treesize reduction 4, result has 66.7 percent of original size [2022-12-14 12:08:27,265 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 38 treesize of output 21 [2022-12-14 12:08:27,288 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 2 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:27,288 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:08:27,410 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:08:27,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 93 treesize of output 83 [2022-12-14 12:08:27,589 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:27,589 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1856730567] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:08:27,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1399588075] [2022-12-14 12:08:27,591 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:08:27,591 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:08:27,591 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:08:27,591 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:08:27,591 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:08:27,627 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:27,631 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:27,631 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:08:27,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:27,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:27,764 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:27,824 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:08:27,871 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:08:27,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:08:27,976 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:08:29,298 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2081#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:08:29,298 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:08:29,298 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:08:29,298 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 12, 12] total 29 [2022-12-14 12:08:29,298 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [709465726] [2022-12-14 12:08:29,298 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:08:29,298 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-12-14 12:08:29,299 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:29,299 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-12-14 12:08:29,300 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=124, Invalid=1282, Unknown=0, NotChecked=0, Total=1406 [2022-12-14 12:08:29,300 INFO L87 Difference]: Start difference. First operand 54 states and 71 transitions. Second operand has 29 states, 29 states have (on average 1.2413793103448276) internal successors, (36), 29 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:35,456 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:35,456 INFO L93 Difference]: Finished difference Result 435 states and 504 transitions. [2022-12-14 12:08:35,456 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2022-12-14 12:08:35,456 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 1.2413793103448276) internal successors, (36), 29 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-12-14 12:08:35,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:35,459 INFO L225 Difference]: With dead ends: 435 [2022-12-14 12:08:35,459 INFO L226 Difference]: Without dead ends: 435 [2022-12-14 12:08:35,463 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 89 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1928 ImplicationChecksByTransitivity, 7.0s TimeCoverageRelationStatistics Valid=1264, Invalid=6926, Unknown=0, NotChecked=0, Total=8190 [2022-12-14 12:08:35,464 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 1778 mSDsluCounter, 756 mSDsCounter, 0 mSdLazyCounter, 1245 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1778 SdHoareTripleChecker+Valid, 789 SdHoareTripleChecker+Invalid, 1299 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 1245 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:35,464 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1778 Valid, 789 Invalid, 1299 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 1245 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-12-14 12:08:35,464 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 435 states. [2022-12-14 12:08:35,468 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 435 to 75. [2022-12-14 12:08:35,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 70 states have (on average 1.4428571428571428) internal successors, (101), 74 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:35,469 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 101 transitions. [2022-12-14 12:08:35,469 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 101 transitions. Word has length 13 [2022-12-14 12:08:35,469 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:35,469 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 101 transitions. [2022-12-14 12:08:35,470 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 1.2413793103448276) internal successors, (36), 29 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:35,470 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 101 transitions. [2022-12-14 12:08:35,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-12-14 12:08:35,470 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:35,470 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:35,476 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-12-14 12:08:35,671 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:35,672 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:35,673 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:35,673 INFO L85 PathProgramCache]: Analyzing trace with hash 1516924107, now seen corresponding path program 1 times [2022-12-14 12:08:35,673 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:35,673 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [891978606] [2022-12-14 12:08:35,674 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:35,674 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:35,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:35,748 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:35,748 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:35,748 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [891978606] [2022-12-14 12:08:35,748 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [891978606] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:35,748 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:35,748 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 12:08:35,748 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2037272569] [2022-12-14 12:08:35,748 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:35,749 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 12:08:35,749 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:35,749 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 12:08:35,749 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 12:08:35,750 INFO L87 Difference]: Start difference. First operand 75 states and 101 transitions. Second operand has 5 states, 5 states have (on average 3.0) internal successors, (15), 4 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:35,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:35,790 INFO L93 Difference]: Finished difference Result 78 states and 98 transitions. [2022-12-14 12:08:35,790 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 12:08:35,790 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 3.0) internal successors, (15), 4 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-12-14 12:08:35,791 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:35,791 INFO L225 Difference]: With dead ends: 78 [2022-12-14 12:08:35,791 INFO L226 Difference]: Without dead ends: 78 [2022-12-14 12:08:35,791 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-12-14 12:08:35,792 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 55 mSDsluCounter, 24 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 40 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:35,792 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 40 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 12:08:35,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-12-14 12:08:35,794 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 68. [2022-12-14 12:08:35,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 63 states have (on average 1.3650793650793651) internal successors, (86), 67 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:35,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 86 transitions. [2022-12-14 12:08:35,795 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 86 transitions. Word has length 15 [2022-12-14 12:08:35,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:35,795 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 86 transitions. [2022-12-14 12:08:35,796 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 3.0) internal successors, (15), 4 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:35,796 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 86 transitions. [2022-12-14 12:08:35,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-12-14 12:08:35,796 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:35,796 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:35,796 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-12-14 12:08:35,796 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:35,796 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:35,796 INFO L85 PathProgramCache]: Analyzing trace with hash 61487347, now seen corresponding path program 1 times [2022-12-14 12:08:35,796 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:35,797 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2072370485] [2022-12-14 12:08:35,797 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:35,797 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:35,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:35,937 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:35,937 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:35,937 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2072370485] [2022-12-14 12:08:35,937 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2072370485] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:35,937 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:35,937 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-14 12:08:35,937 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [383319456] [2022-12-14 12:08:35,937 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:35,938 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-12-14 12:08:35,938 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:35,938 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-14 12:08:35,938 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-12-14 12:08:35,938 INFO L87 Difference]: Start difference. First operand 68 states and 86 transitions. Second operand has 8 states, 8 states have (on average 2.0) internal successors, (16), 8 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:36,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:36,145 INFO L93 Difference]: Finished difference Result 81 states and 98 transitions. [2022-12-14 12:08:36,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 12:08:36,146 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.0) internal successors, (16), 8 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-12-14 12:08:36,146 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:36,146 INFO L225 Difference]: With dead ends: 81 [2022-12-14 12:08:36,146 INFO L226 Difference]: Without dead ends: 81 [2022-12-14 12:08:36,147 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2022-12-14 12:08:36,147 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 34 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 110 SdHoareTripleChecker+Invalid, 102 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:36,148 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 110 Invalid, 102 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 12:08:36,148 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-12-14 12:08:36,149 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 73. [2022-12-14 12:08:36,149 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 68 states have (on average 1.3235294117647058) internal successors, (90), 72 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:36,150 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 90 transitions. [2022-12-14 12:08:36,150 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 90 transitions. Word has length 16 [2022-12-14 12:08:36,150 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:36,150 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 90 transitions. [2022-12-14 12:08:36,150 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.0) internal successors, (16), 8 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:36,150 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 90 transitions. [2022-12-14 12:08:36,151 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 12:08:36,151 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:36,151 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:36,151 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-12-14 12:08:36,151 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:36,152 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:36,152 INFO L85 PathProgramCache]: Analyzing trace with hash -653750148, now seen corresponding path program 3 times [2022-12-14 12:08:36,152 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:36,152 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1336514312] [2022-12-14 12:08:36,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:36,152 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:36,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:36,485 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:36,485 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:36,486 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1336514312] [2022-12-14 12:08:36,486 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1336514312] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:08:36,486 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2137481234] [2022-12-14 12:08:36,486 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 12:08:36,486 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:36,486 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:08:36,487 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:08:36,488 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-12-14 12:08:36,551 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 12:08:36,551 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:08:36,552 INFO L263 TraceCheckSpWp]: Trace formula consists of 159 conjuncts, 45 conjunts are in the unsatisfiable core [2022-12-14 12:08:36,555 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:08:36,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:08:36,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:08:36,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 12:08:36,828 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-12-14 12:08:36,828 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-12-14 12:08:36,846 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:36,846 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:08:36,962 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:08:36,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-12-14 12:08:36,967 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:08:36,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-12-14 12:08:37,107 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:37,107 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2137481234] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:08:37,107 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1618533458] [2022-12-14 12:08:37,108 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:08:37,108 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:08:37,108 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:08:37,108 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:08:37,109 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:08:37,136 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:37,139 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:37,139 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:08:37,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:08:37,213 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:37,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:37,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:08:37,310 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:08:37,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:08:37,397 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:08:38,644 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3158#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:08:38,644 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:08:38,644 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:08:38,644 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 12, 12] total 27 [2022-12-14 12:08:38,644 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1698485567] [2022-12-14 12:08:38,644 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:08:38,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-12-14 12:08:38,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:38,645 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-12-14 12:08:38,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=105, Invalid=1150, Unknown=5, NotChecked=0, Total=1260 [2022-12-14 12:08:38,646 INFO L87 Difference]: Start difference. First operand 73 states and 90 transitions. Second operand has 27 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 27 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:41,884 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:41,884 INFO L93 Difference]: Finished difference Result 296 states and 325 transitions. [2022-12-14 12:08:41,884 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-12-14 12:08:41,884 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 27 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-12-14 12:08:41,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:41,885 INFO L225 Difference]: With dead ends: 296 [2022-12-14 12:08:41,885 INFO L226 Difference]: Without dead ends: 296 [2022-12-14 12:08:41,885 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 22 SyntacticMatches, 2 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 3 DeprecatedPredicates, 964 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=583, Invalid=4104, Unknown=5, NotChecked=0, Total=4692 [2022-12-14 12:08:41,886 INFO L413 NwaCegarLoop]: 65 mSDtfsCounter, 1212 mSDsluCounter, 993 mSDsCounter, 0 mSdLazyCounter, 1549 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1212 SdHoareTripleChecker+Valid, 1058 SdHoareTripleChecker+Invalid, 1586 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 1549 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:41,886 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1212 Valid, 1058 Invalid, 1586 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 1549 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-14 12:08:41,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 296 states. [2022-12-14 12:08:41,889 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 296 to 91. [2022-12-14 12:08:41,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 86 states have (on average 1.3372093023255813) internal successors, (115), 90 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:41,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 115 transitions. [2022-12-14 12:08:41,890 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 115 transitions. Word has length 17 [2022-12-14 12:08:41,890 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:41,890 INFO L495 AbstractCegarLoop]: Abstraction has 91 states and 115 transitions. [2022-12-14 12:08:41,890 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 27 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:41,890 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 115 transitions. [2022-12-14 12:08:41,891 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 12:08:41,891 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:41,891 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:41,895 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2022-12-14 12:08:42,091 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable19 [2022-12-14 12:08:42,093 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:42,093 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:42,093 INFO L85 PathProgramCache]: Analyzing trace with hash 1904945257, now seen corresponding path program 1 times [2022-12-14 12:08:42,094 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:42,094 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [299506992] [2022-12-14 12:08:42,094 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:42,095 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:42,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:42,254 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:42,254 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:42,254 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [299506992] [2022-12-14 12:08:42,254 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [299506992] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:42,254 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:42,255 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 12:08:42,255 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1394444397] [2022-12-14 12:08:42,255 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:42,255 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 12:08:42,255 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:42,256 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 12:08:42,256 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-12-14 12:08:42,256 INFO L87 Difference]: Start difference. First operand 91 states and 115 transitions. Second operand has 5 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:42,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:42,279 INFO L93 Difference]: Finished difference Result 90 states and 114 transitions. [2022-12-14 12:08:42,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 12:08:42,279 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-12-14 12:08:42,279 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:42,280 INFO L225 Difference]: With dead ends: 90 [2022-12-14 12:08:42,280 INFO L226 Difference]: Without dead ends: 75 [2022-12-14 12:08:42,280 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-12-14 12:08:42,281 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 15 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:42,281 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 30 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 12:08:42,282 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-12-14 12:08:42,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 75. [2022-12-14 12:08:42,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75 states, 71 states have (on average 1.267605633802817) internal successors, (90), 74 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:42,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75 states to 75 states and 90 transitions. [2022-12-14 12:08:42,284 INFO L78 Accepts]: Start accepts. Automaton has 75 states and 90 transitions. Word has length 17 [2022-12-14 12:08:42,284 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:42,284 INFO L495 AbstractCegarLoop]: Abstraction has 75 states and 90 transitions. [2022-12-14 12:08:42,284 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 4.25) internal successors, (17), 4 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:42,284 INFO L276 IsEmpty]: Start isEmpty. Operand 75 states and 90 transitions. [2022-12-14 12:08:42,284 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-12-14 12:08:42,284 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:42,285 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:42,285 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2022-12-14 12:08:42,285 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:42,285 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:42,285 INFO L85 PathProgramCache]: Analyzing trace with hash 1736287800, now seen corresponding path program 1 times [2022-12-14 12:08:42,285 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:42,285 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1792232748] [2022-12-14 12:08:42,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:42,286 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:42,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:42,435 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 12:08:42,435 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:42,435 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1792232748] [2022-12-14 12:08:42,435 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1792232748] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 12:08:42,435 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 12:08:42,435 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-12-14 12:08:42,435 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [483639181] [2022-12-14 12:08:42,435 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 12:08:42,436 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-12-14 12:08:42,436 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:42,436 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-12-14 12:08:42,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2022-12-14 12:08:42,436 INFO L87 Difference]: Start difference. First operand 75 states and 90 transitions. Second operand has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:42,613 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:42,613 INFO L93 Difference]: Finished difference Result 123 states and 143 transitions. [2022-12-14 12:08:42,613 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-12-14 12:08:42,614 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-12-14 12:08:42,614 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:42,614 INFO L225 Difference]: With dead ends: 123 [2022-12-14 12:08:42,614 INFO L226 Difference]: Without dead ends: 93 [2022-12-14 12:08:42,614 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=61, Invalid=149, Unknown=0, NotChecked=0, Total=210 [2022-12-14 12:08:42,614 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 46 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 80 SdHoareTripleChecker+Invalid, 88 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:42,615 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 80 Invalid, 88 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 12:08:42,615 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2022-12-14 12:08:42,616 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 89. [2022-12-14 12:08:42,616 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 85 states have (on average 1.2470588235294118) internal successors, (106), 88 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:42,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 106 transitions. [2022-12-14 12:08:42,616 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 106 transitions. Word has length 18 [2022-12-14 12:08:42,616 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:42,616 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 106 transitions. [2022-12-14 12:08:42,616 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:42,616 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 106 transitions. [2022-12-14 12:08:42,617 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-12-14 12:08:42,617 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:42,617 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:42,617 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-12-14 12:08:42,617 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:42,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:42,617 INFO L85 PathProgramCache]: Analyzing trace with hash 1506467912, now seen corresponding path program 1 times [2022-12-14 12:08:42,617 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:42,617 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1122181595] [2022-12-14 12:08:42,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:42,617 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:42,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:42,759 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 12:08:42,759 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:42,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1122181595] [2022-12-14 12:08:42,759 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1122181595] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:08:42,759 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [564394981] [2022-12-14 12:08:42,759 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:42,759 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:42,760 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:08:42,760 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:08:42,761 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-12-14 12:08:42,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:42,830 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 24 conjunts are in the unsatisfiable core [2022-12-14 12:08:42,832 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:08:42,893 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 12:08:42,894 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:08:42,982 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 12:08:42,999 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 12:08:42,999 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [564394981] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:08:42,999 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [743246769] [2022-12-14 12:08:43,001 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:08:43,001 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:08:43,002 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:08:43,002 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:08:43,002 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:08:43,035 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:43,038 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:43,039 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:08:43,072 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:43,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:43,136 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:43,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:08:43,205 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:43,219 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:43,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:08:43,288 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:08:43,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:08:43,395 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:08:43,398 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:08:43,435 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-12-14 12:08:43,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-12-14 12:08:43,561 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:08:43,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:08:43,649 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:08:43,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:08:43,691 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:08:45,404 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4155#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:08:45,404 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:08:45,404 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:08:45,404 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 7, 7] total 17 [2022-12-14 12:08:45,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1605875280] [2022-12-14 12:08:45,404 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:08:45,405 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-12-14 12:08:45,405 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:45,405 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-12-14 12:08:45,405 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=149, Invalid=843, Unknown=0, NotChecked=0, Total=992 [2022-12-14 12:08:45,405 INFO L87 Difference]: Start difference. First operand 89 states and 106 transitions. Second operand has 18 states, 17 states have (on average 2.6470588235294117) internal successors, (45), 18 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:45,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:45,564 INFO L93 Difference]: Finished difference Result 117 states and 132 transitions. [2022-12-14 12:08:45,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-14 12:08:45,564 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 17 states have (on average 2.6470588235294117) internal successors, (45), 18 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-12-14 12:08:45,565 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:45,565 INFO L225 Difference]: With dead ends: 117 [2022-12-14 12:08:45,565 INFO L226 Difference]: Without dead ends: 117 [2022-12-14 12:08:45,566 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 35 SyntacticMatches, 2 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 376 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=218, Invalid=1264, Unknown=0, NotChecked=0, Total=1482 [2022-12-14 12:08:45,567 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 150 mSDsluCounter, 78 mSDsCounter, 0 mSdLazyCounter, 208 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 150 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 213 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 208 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:45,567 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [150 Valid, 95 Invalid, 213 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 208 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 12:08:45,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2022-12-14 12:08:45,568 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 104. [2022-12-14 12:08:45,568 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 104 states, 100 states have (on average 1.21) internal successors, (121), 103 states have internal predecessors, (121), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:45,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 104 states to 104 states and 121 transitions. [2022-12-14 12:08:45,569 INFO L78 Accepts]: Start accepts. Automaton has 104 states and 121 transitions. Word has length 20 [2022-12-14 12:08:45,569 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:45,569 INFO L495 AbstractCegarLoop]: Abstraction has 104 states and 121 transitions. [2022-12-14 12:08:45,569 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 17 states have (on average 2.6470588235294117) internal successors, (45), 18 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:45,569 INFO L276 IsEmpty]: Start isEmpty. Operand 104 states and 121 transitions. [2022-12-14 12:08:45,569 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-12-14 12:08:45,569 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:45,570 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:45,574 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2022-12-14 12:08:45,770 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-12-14 12:08:45,771 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:45,772 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:45,772 INFO L85 PathProgramCache]: Analyzing trace with hash -1843448720, now seen corresponding path program 4 times [2022-12-14 12:08:45,773 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:45,773 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2136481435] [2022-12-14 12:08:45,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:45,774 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:45,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:46,213 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 1 proven. 24 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:46,213 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:46,213 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2136481435] [2022-12-14 12:08:46,213 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2136481435] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:08:46,213 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1633761693] [2022-12-14 12:08:46,213 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 12:08:46,213 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:46,213 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:08:46,214 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:08:46,215 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-12-14 12:08:46,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:46,286 INFO L263 TraceCheckSpWp]: Trace formula consists of 183 conjuncts, 51 conjunts are in the unsatisfiable core [2022-12-14 12:08:46,288 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:08:46,292 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:08:46,411 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:08:46,455 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 12:08:46,642 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-12-14 12:08:46,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-12-14 12:08:46,665 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:46,665 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:08:46,774 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_335 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_335) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-12-14 12:08:46,778 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:08:46,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-12-14 12:08:46,783 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:08:46,783 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-12-14 12:08:46,916 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:46,916 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1633761693] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:08:46,916 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [83810580] [2022-12-14 12:08:46,917 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:08:46,917 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:08:46,918 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:08:46,918 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:08:46,918 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:08:46,941 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:46,943 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:46,944 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:08:46,970 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:08:47,000 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:47,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:47,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:08:47,099 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:08:47,099 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:08:47,173 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:08:48,672 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4556#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:08:48,672 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:08:48,673 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:08:48,673 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 14, 14] total 32 [2022-12-14 12:08:48,673 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1291410146] [2022-12-14 12:08:48,673 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:08:48,673 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-12-14 12:08:48,673 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:48,673 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-12-14 12:08:48,674 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=118, Invalid=1445, Unknown=1, NotChecked=76, Total=1640 [2022-12-14 12:08:48,674 INFO L87 Difference]: Start difference. First operand 104 states and 121 transitions. Second operand has 32 states, 32 states have (on average 1.6875) internal successors, (54), 32 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:51,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:51,201 INFO L93 Difference]: Finished difference Result 305 states and 333 transitions. [2022-12-14 12:08:51,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-12-14 12:08:51,202 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.6875) internal successors, (54), 32 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-12-14 12:08:51,202 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:51,202 INFO L225 Difference]: With dead ends: 305 [2022-12-14 12:08:51,202 INFO L226 Difference]: Without dead ends: 291 [2022-12-14 12:08:51,203 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 31 SyntacticMatches, 2 SemanticMatches, 63 ConstructedPredicates, 1 IntricatePredicates, 4 DeprecatedPredicates, 765 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=417, Invalid=3618, Unknown=1, NotChecked=124, Total=4160 [2022-12-14 12:08:51,203 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 973 mSDsluCounter, 527 mSDsCounter, 0 mSdLazyCounter, 1298 mSolverCounterSat, 22 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 973 SdHoareTripleChecker+Valid, 562 SdHoareTripleChecker+Invalid, 1459 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 1298 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 137 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:51,203 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [973 Valid, 562 Invalid, 1459 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 1298 Invalid, 2 Unknown, 137 Unchecked, 0.8s Time] [2022-12-14 12:08:51,204 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 291 states. [2022-12-14 12:08:51,205 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 291 to 130. [2022-12-14 12:08:51,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 130 states, 126 states have (on average 1.2063492063492063) internal successors, (152), 129 states have internal predecessors, (152), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:51,206 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130 states to 130 states and 152 transitions. [2022-12-14 12:08:51,206 INFO L78 Accepts]: Start accepts. Automaton has 130 states and 152 transitions. Word has length 21 [2022-12-14 12:08:51,206 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:51,206 INFO L495 AbstractCegarLoop]: Abstraction has 130 states and 152 transitions. [2022-12-14 12:08:51,206 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.6875) internal successors, (54), 32 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:51,206 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 152 transitions. [2022-12-14 12:08:51,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-14 12:08:51,207 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:51,207 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:51,212 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2022-12-14 12:08:51,408 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:51,408 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:51,409 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:51,410 INFO L85 PathProgramCache]: Analyzing trace with hash -1615010332, now seen corresponding path program 5 times [2022-12-14 12:08:51,410 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:51,410 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [473001310] [2022-12-14 12:08:51,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:51,411 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:51,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:51,908 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 4 proven. 37 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:51,908 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:51,908 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [473001310] [2022-12-14 12:08:51,909 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [473001310] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:08:51,909 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1595609804] [2022-12-14 12:08:51,909 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:08:51,909 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:51,909 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:08:51,910 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:08:51,911 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-12-14 12:08:51,991 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-12-14 12:08:51,992 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:08:51,993 INFO L263 TraceCheckSpWp]: Trace formula consists of 207 conjuncts, 55 conjunts are in the unsatisfiable core [2022-12-14 12:08:51,996 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:08:52,000 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:08:52,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:08:52,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 12:08:52,477 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-12-14 12:08:52,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-12-14 12:08:52,507 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 5 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:52,508 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:08:52,689 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_373 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_373) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 4 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-12-14 12:08:52,693 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:08:52,693 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-12-14 12:08:52,698 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:08:52,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-12-14 12:08:52,852 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 5 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:52,852 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1595609804] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:08:52,852 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [541343691] [2022-12-14 12:08:52,853 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:08:52,853 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:08:52,853 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:08:52,853 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:08:52,854 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:08:52,882 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:52,885 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:52,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:08:52,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:52,972 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:52,987 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:53,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:08:53,061 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:08:53,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:08:53,126 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:08:54,518 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5229#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:08:54,518 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:08:54,518 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:08:54,518 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 16, 16] total 37 [2022-12-14 12:08:54,518 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1702306023] [2022-12-14 12:08:54,518 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:08:54,519 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-12-14 12:08:54,519 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:08:54,519 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-12-14 12:08:54,519 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=132, Invalid=1851, Unknown=1, NotChecked=86, Total=2070 [2022-12-14 12:08:54,520 INFO L87 Difference]: Start difference. First operand 130 states and 152 transitions. Second operand has 37 states, 37 states have (on average 1.7297297297297298) internal successors, (64), 37 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:57,284 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:08:57,284 INFO L93 Difference]: Finished difference Result 414 states and 452 transitions. [2022-12-14 12:08:57,284 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-12-14 12:08:57,285 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 37 states have (on average 1.7297297297297298) internal successors, (64), 37 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-12-14 12:08:57,285 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:08:57,286 INFO L225 Difference]: With dead ends: 414 [2022-12-14 12:08:57,286 INFO L226 Difference]: Without dead ends: 398 [2022-12-14 12:08:57,286 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 114 GetRequests, 40 SyntacticMatches, 2 SemanticMatches, 72 ConstructedPredicates, 1 IntricatePredicates, 5 DeprecatedPredicates, 1022 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=497, Invalid=4762, Unknown=1, NotChecked=142, Total=5402 [2022-12-14 12:08:57,287 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 985 mSDsluCounter, 829 mSDsCounter, 0 mSdLazyCounter, 1966 mSolverCounterSat, 27 mSolverCounterUnsat, 8 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 985 SdHoareTripleChecker+Valid, 875 SdHoareTripleChecker+Invalid, 2142 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 1966 IncrementalHoareTripleChecker+Invalid, 8 IncrementalHoareTripleChecker+Unknown, 141 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 12:08:57,287 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [985 Valid, 875 Invalid, 2142 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 1966 Invalid, 8 Unknown, 141 Unchecked, 0.8s Time] [2022-12-14 12:08:57,287 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 398 states. [2022-12-14 12:08:57,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 398 to 156. [2022-12-14 12:08:57,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 152 states have (on average 1.2039473684210527) internal successors, (183), 155 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:57,290 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 183 transitions. [2022-12-14 12:08:57,290 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 183 transitions. Word has length 25 [2022-12-14 12:08:57,291 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:08:57,291 INFO L495 AbstractCegarLoop]: Abstraction has 156 states and 183 transitions. [2022-12-14 12:08:57,291 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 37 states have (on average 1.7297297297297298) internal successors, (64), 37 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:08:57,291 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 183 transitions. [2022-12-14 12:08:57,291 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-14 12:08:57,291 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:08:57,292 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:08:57,296 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2022-12-14 12:08:57,492 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:57,493 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:08:57,493 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:08:57,494 INFO L85 PathProgramCache]: Analyzing trace with hash -252238320, now seen corresponding path program 2 times [2022-12-14 12:08:57,494 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:08:57,494 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2016721177] [2022-12-14 12:08:57,494 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:08:57,495 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:08:57,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:08:57,872 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:57,872 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:08:57,872 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2016721177] [2022-12-14 12:08:57,872 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2016721177] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:08:57,872 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1845995540] [2022-12-14 12:08:57,872 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:08:57,872 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:08:57,873 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:08:57,873 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:08:57,874 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-12-14 12:08:57,963 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 12:08:57,964 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:08:57,966 INFO L263 TraceCheckSpWp]: Trace formula consists of 208 conjuncts, 49 conjunts are in the unsatisfiable core [2022-12-14 12:08:57,968 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:08:57,975 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:08:58,062 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:58,147 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 12:08:58,209 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 12:08:58,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 12:08:58,212 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 6 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:08:58,212 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:08:58,242 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_411 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_411) |c_ULTIMATE.start_cstrncat_~s2#1.base|) |c_ULTIMATE.start_cstrncat_~s2#1.offset|) 0)) is different from false [2022-12-14 12:08:58,246 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_411 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_411) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 1)) 0)) is different from false [2022-12-14 12:08:58,254 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:08:58,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 12:08:58,257 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:08:58,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 12:08:58,364 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 7 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 4 not checked. [2022-12-14 12:08:58,364 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1845995540] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:08:58,364 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1386570768] [2022-12-14 12:08:58,366 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:08:58,366 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:08:58,366 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:08:58,366 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:08:58,366 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:08:58,401 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:58,403 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:08:58,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:08:58,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:08:58,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:58,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:58,585 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:08:58,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:58,648 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:08:58,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:08:58,746 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:08:58,746 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:08:58,858 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:08:58,862 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:08:58,906 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-12-14 12:08:58,906 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-12-14 12:08:58,999 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:08:59,000 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:08:59,068 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:08:59,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:08:59,100 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:09:00,877 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6036#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:09:00,877 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:09:00,877 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:09:00,877 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12, 12] total 28 [2022-12-14 12:09:00,877 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [966317929] [2022-12-14 12:09:00,877 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:09:00,878 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-12-14 12:09:00,878 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:09:00,878 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-12-14 12:09:00,879 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=167, Invalid=1399, Unknown=2, NotChecked=154, Total=1722 [2022-12-14 12:09:00,879 INFO L87 Difference]: Start difference. First operand 156 states and 183 transitions. Second operand has 28 states, 28 states have (on average 2.142857142857143) internal successors, (60), 28 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:01,211 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:09:01,211 INFO L93 Difference]: Finished difference Result 182 states and 208 transitions. [2022-12-14 12:09:01,211 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-12-14 12:09:01,211 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 2.142857142857143) internal successors, (60), 28 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-12-14 12:09:01,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:09:01,212 INFO L225 Difference]: With dead ends: 182 [2022-12-14 12:09:01,212 INFO L226 Difference]: Without dead ends: 153 [2022-12-14 12:09:01,212 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 45 SyntacticMatches, 4 SemanticMatches, 47 ConstructedPredicates, 2 IntricatePredicates, 2 DeprecatedPredicates, 588 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=236, Invalid=1932, Unknown=2, NotChecked=182, Total=2352 [2022-12-14 12:09:01,213 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 22 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 259 mSolverCounterSat, 10 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 22 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 325 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 259 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 55 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 12:09:01,213 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [22 Valid, 120 Invalid, 325 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 259 Invalid, 1 Unknown, 55 Unchecked, 0.1s Time] [2022-12-14 12:09:01,213 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153 states. [2022-12-14 12:09:01,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153 to 151. [2022-12-14 12:09:01,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 151 states, 147 states have (on average 1.1972789115646258) internal successors, (176), 150 states have internal predecessors, (176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:01,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 151 states to 151 states and 176 transitions. [2022-12-14 12:09:01,215 INFO L78 Accepts]: Start accepts. Automaton has 151 states and 176 transitions. Word has length 25 [2022-12-14 12:09:01,215 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:09:01,215 INFO L495 AbstractCegarLoop]: Abstraction has 151 states and 176 transitions. [2022-12-14 12:09:01,215 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 2.142857142857143) internal successors, (60), 28 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:01,215 INFO L276 IsEmpty]: Start isEmpty. Operand 151 states and 176 transitions. [2022-12-14 12:09:01,215 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-12-14 12:09:01,215 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:09:01,215 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:09:01,219 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-12-14 12:09:01,416 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-12-14 12:09:01,416 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:09:01,417 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:09:01,417 INFO L85 PathProgramCache]: Analyzing trace with hash 1199167083, now seen corresponding path program 3 times [2022-12-14 12:09:01,417 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:09:01,418 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [636520069] [2022-12-14 12:09:01,418 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:09:01,418 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:09:01,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:09:01,770 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:09:01,771 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:09:01,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [636520069] [2022-12-14 12:09:01,771 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [636520069] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:09:01,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [451721649] [2022-12-14 12:09:01,771 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 12:09:01,771 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:09:01,771 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:09:01,772 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:09:01,773 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-12-14 12:09:01,853 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 12:09:01,853 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:09:01,855 INFO L263 TraceCheckSpWp]: Trace formula consists of 221 conjuncts, 58 conjunts are in the unsatisfiable core [2022-12-14 12:09:01,856 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:09:01,954 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 12:09:02,127 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-12-14 12:09:02,127 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 48 treesize of output 56 [2022-12-14 12:09:02,148 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:09:02,149 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:02,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 34 treesize of output 20 [2022-12-14 12:09:02,301 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:02,301 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:09:02,303 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:02,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-12-14 12:09:02,306 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:09:02,306 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:09:02,583 INFO L321 Elim1Store]: treesize reduction 16, result has 66.7 percent of original size [2022-12-14 12:09:02,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 71 treesize of output 87 [2022-12-14 12:09:02,592 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:02,592 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 49 treesize of output 51 [2022-12-14 12:09:02,598 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:09:02,624 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 4 [2022-12-14 12:09:02,642 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:02,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 45 treesize of output 55 [2022-12-14 12:09:02,824 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 11 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:09:02,824 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [451721649] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:09:02,824 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1371931971] [2022-12-14 12:09:02,825 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:09:02,825 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:09:02,826 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:09:02,826 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:09:02,826 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:09:02,853 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:02,856 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:02,857 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:09:02,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:02,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:02,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:02,969 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:03,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:03,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:03,062 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:09:03,101 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:09:03,101 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:09:03,185 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:09:03,187 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:09:03,220 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-12-14 12:09:03,220 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-12-14 12:09:03,317 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:09:03,317 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:09:03,372 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:09:03,372 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:09:03,404 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:09:05,398 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6595#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:09:05,398 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:09:05,398 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:09:05,398 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 17, 17] total 40 [2022-12-14 12:09:05,398 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1555204142] [2022-12-14 12:09:05,398 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:09:05,398 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-12-14 12:09:05,399 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:09:05,399 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-12-14 12:09:05,399 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=261, Invalid=2590, Unknown=11, NotChecked=0, Total=2862 [2022-12-14 12:09:05,399 INFO L87 Difference]: Start difference. First operand 151 states and 176 transitions. Second operand has 40 states, 40 states have (on average 1.575) internal successors, (63), 40 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:06,603 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:09:06,603 INFO L93 Difference]: Finished difference Result 281 states and 316 transitions. [2022-12-14 12:09:06,603 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-12-14 12:09:06,603 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 40 states have (on average 1.575) internal successors, (63), 40 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-12-14 12:09:06,604 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:09:06,604 INFO L225 Difference]: With dead ends: 281 [2022-12-14 12:09:06,604 INFO L226 Difference]: Without dead ends: 193 [2022-12-14 12:09:06,605 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 117 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 76 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1477 ImplicationChecksByTransitivity, 3.6s TimeCoverageRelationStatistics Valid=781, Invalid=5214, Unknown=11, NotChecked=0, Total=6006 [2022-12-14 12:09:06,605 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 234 mSDsluCounter, 209 mSDsCounter, 0 mSdLazyCounter, 521 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 234 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 538 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 521 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 12:09:06,605 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [234 Valid, 222 Invalid, 538 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 521 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 12:09:06,606 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193 states. [2022-12-14 12:09:06,608 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193 to 183. [2022-12-14 12:09:06,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 183 states, 179 states have (on average 1.1843575418994414) internal successors, (212), 182 states have internal predecessors, (212), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:06,609 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 183 states to 183 states and 212 transitions. [2022-12-14 12:09:06,609 INFO L78 Accepts]: Start accepts. Automaton has 183 states and 212 transitions. Word has length 27 [2022-12-14 12:09:06,609 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:09:06,609 INFO L495 AbstractCegarLoop]: Abstraction has 183 states and 212 transitions. [2022-12-14 12:09:06,609 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 40 states have (on average 1.575) internal successors, (63), 40 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:06,609 INFO L276 IsEmpty]: Start isEmpty. Operand 183 states and 212 transitions. [2022-12-14 12:09:06,610 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-12-14 12:09:06,610 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:09:06,610 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:09:06,614 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2022-12-14 12:09:06,810 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-12-14 12:09:06,811 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:09:06,812 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:09:06,812 INFO L85 PathProgramCache]: Analyzing trace with hash 1689453784, now seen corresponding path program 6 times [2022-12-14 12:09:06,812 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:09:06,813 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [768425445] [2022-12-14 12:09:06,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:09:06,813 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:09:06,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:09:07,263 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 9 proven. 52 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:09:07,263 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:09:07,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [768425445] [2022-12-14 12:09:07,263 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [768425445] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:09:07,263 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1120422497] [2022-12-14 12:09:07,263 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 12:09:07,263 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:09:07,263 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:09:07,264 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:09:07,265 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-12-14 12:09:07,339 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 12:09:07,339 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:09:07,341 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 61 conjunts are in the unsatisfiable core [2022-12-14 12:09:07,343 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:09:07,347 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:09:07,504 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:09:07,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 12:09:07,879 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-12-14 12:09:07,879 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-12-14 12:09:07,906 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 6 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:09:07,906 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:09:08,137 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_494 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_494) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 5 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-12-14 12:09:08,141 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:08,142 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-12-14 12:09:08,147 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:08,147 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-12-14 12:09:08,328 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 6 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:09:08,329 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1120422497] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:09:08,329 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1352838409] [2022-12-14 12:09:08,330 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:09:08,330 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:09:08,330 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:09:08,330 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:09:08,331 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:09:08,359 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:08,361 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:08,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:09:08,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:09:08,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:08,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:08,486 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:09:08,537 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:09:08,538 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:09:08,593 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:09:10,014 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7331#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:09:10,014 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:09:10,014 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:09:10,015 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 18, 18] total 42 [2022-12-14 12:09:10,015 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [297143003] [2022-12-14 12:09:10,015 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:09:10,015 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2022-12-14 12:09:10,015 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:09:10,016 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2022-12-14 12:09:10,017 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=147, Invalid=2306, Unknown=1, NotChecked=96, Total=2550 [2022-12-14 12:09:10,017 INFO L87 Difference]: Start difference. First operand 183 states and 212 transitions. Second operand has 42 states, 42 states have (on average 1.7619047619047619) internal successors, (74), 42 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:14,019 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:09:14,019 INFO L93 Difference]: Finished difference Result 571 states and 624 transitions. [2022-12-14 12:09:14,019 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-12-14 12:09:14,019 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 1.7619047619047619) internal successors, (74), 42 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-12-14 12:09:14,019 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:09:14,022 INFO L225 Difference]: With dead ends: 571 [2022-12-14 12:09:14,022 INFO L226 Difference]: Without dead ends: 521 [2022-12-14 12:09:14,024 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 136 GetRequests, 49 SyntacticMatches, 2 SemanticMatches, 85 ConstructedPredicates, 1 IntricatePredicates, 6 DeprecatedPredicates, 1479 ImplicationChecksByTransitivity, 4.9s TimeCoverageRelationStatistics Valid=686, Invalid=6627, Unknown=1, NotChecked=168, Total=7482 [2022-12-14 12:09:14,024 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 1735 mSDsluCounter, 1135 mSDsCounter, 0 mSdLazyCounter, 2644 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1735 SdHoareTripleChecker+Valid, 1184 SdHoareTripleChecker+Invalid, 2880 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 2644 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 199 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-12-14 12:09:14,024 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1735 Valid, 1184 Invalid, 2880 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 2644 Invalid, 0 Unknown, 199 Unchecked, 1.4s Time] [2022-12-14 12:09:14,025 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 521 states. [2022-12-14 12:09:14,027 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 521 to 213. [2022-12-14 12:09:14,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 213 states, 209 states have (on average 1.1818181818181819) internal successors, (247), 212 states have internal predecessors, (247), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:14,028 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 213 states to 213 states and 247 transitions. [2022-12-14 12:09:14,028 INFO L78 Accepts]: Start accepts. Automaton has 213 states and 247 transitions. Word has length 29 [2022-12-14 12:09:14,028 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:09:14,028 INFO L495 AbstractCegarLoop]: Abstraction has 213 states and 247 transitions. [2022-12-14 12:09:14,028 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 42 states have (on average 1.7619047619047619) internal successors, (74), 42 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:14,028 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 247 transitions. [2022-12-14 12:09:14,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-12-14 12:09:14,029 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:09:14,029 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:09:14,033 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-12-14 12:09:14,229 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable27,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:09:14,230 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:09:14,230 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:09:14,231 INFO L85 PathProgramCache]: Analyzing trace with hash -2132836453, now seen corresponding path program 4 times [2022-12-14 12:09:14,231 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:09:14,231 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [7174285] [2022-12-14 12:09:14,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:09:14,232 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:09:14,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:09:14,517 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:09:14,517 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:09:14,517 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [7174285] [2022-12-14 12:09:14,517 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [7174285] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:09:14,517 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [431750140] [2022-12-14 12:09:14,518 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 12:09:14,518 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:09:14,518 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:09:14,519 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:09:14,519 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-12-14 12:09:14,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:09:14,591 INFO L263 TraceCheckSpWp]: Trace formula consists of 234 conjuncts, 33 conjunts are in the unsatisfiable core [2022-12-14 12:09:14,592 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:09:14,671 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:09:14,671 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:09:14,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 12:09:14,804 INFO L134 CoverageAnalysis]: Checked inductivity of 19 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:09:14,804 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [431750140] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:09:14,804 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [190336096] [2022-12-14 12:09:14,806 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:09:14,806 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:09:14,806 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:09:14,806 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:09:14,806 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:09:14,834 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:14,837 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:14,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:09:14,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:09:14,902 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:14,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:14,958 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:09:14,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:15,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:15,041 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:09:15,072 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:09:15,072 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:09:15,166 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:09:15,168 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:09:15,200 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-12-14 12:09:15,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-12-14 12:09:15,308 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:09:15,308 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:09:15,375 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:09:15,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:09:15,405 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:09:16,963 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8385#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:09:16,963 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:09:16,963 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:09:16,963 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 9, 9] total 20 [2022-12-14 12:09:16,963 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [537983879] [2022-12-14 12:09:16,963 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:09:16,963 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-12-14 12:09:16,963 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:09:16,964 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-12-14 12:09:16,964 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=143, Invalid=1047, Unknown=0, NotChecked=0, Total=1190 [2022-12-14 12:09:16,964 INFO L87 Difference]: Start difference. First operand 213 states and 247 transitions. Second operand has 21 states, 20 states have (on average 2.95) internal successors, (59), 21 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:17,377 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:09:17,378 INFO L93 Difference]: Finished difference Result 262 states and 290 transitions. [2022-12-14 12:09:17,378 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-12-14 12:09:17,378 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 20 states have (on average 2.95) internal successors, (59), 21 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-12-14 12:09:17,378 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:09:17,378 INFO L225 Difference]: With dead ends: 262 [2022-12-14 12:09:17,379 INFO L226 Difference]: Without dead ends: 262 [2022-12-14 12:09:17,379 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 106 GetRequests, 59 SyntacticMatches, 3 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 522 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=273, Invalid=1797, Unknown=0, NotChecked=0, Total=2070 [2022-12-14 12:09:17,379 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 247 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 363 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 247 SdHoareTripleChecker+Valid, 126 SdHoareTripleChecker+Invalid, 368 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 363 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 12:09:17,379 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [247 Valid, 126 Invalid, 368 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 363 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 12:09:17,380 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 262 states. [2022-12-14 12:09:17,382 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 262 to 239. [2022-12-14 12:09:17,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 239 states, 235 states have (on average 1.1659574468085105) internal successors, (274), 238 states have internal predecessors, (274), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:17,382 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 239 states to 239 states and 274 transitions. [2022-12-14 12:09:17,382 INFO L78 Accepts]: Start accepts. Automaton has 239 states and 274 transitions. Word has length 29 [2022-12-14 12:09:17,382 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:09:17,382 INFO L495 AbstractCegarLoop]: Abstraction has 239 states and 274 transitions. [2022-12-14 12:09:17,382 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 20 states have (on average 2.95) internal successors, (59), 21 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:17,382 INFO L276 IsEmpty]: Start isEmpty. Operand 239 states and 274 transitions. [2022-12-14 12:09:17,383 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-12-14 12:09:17,383 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:09:17,383 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:09:17,387 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2022-12-14 12:09:17,583 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-12-14 12:09:17,584 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:09:17,585 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:09:17,585 INFO L85 PathProgramCache]: Analyzing trace with hash 127594828, now seen corresponding path program 7 times [2022-12-14 12:09:17,585 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:09:17,586 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1299748951] [2022-12-14 12:09:17,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:09:17,586 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:09:17,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:09:18,165 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 16 proven. 69 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:09:18,165 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:09:18,165 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1299748951] [2022-12-14 12:09:18,165 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1299748951] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:09:18,165 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1286662356] [2022-12-14 12:09:18,166 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 12:09:18,166 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:09:18,166 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:09:18,167 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:09:18,169 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-12-14 12:09:18,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:09:18,245 INFO L263 TraceCheckSpWp]: Trace formula consists of 255 conjuncts, 73 conjunts are in the unsatisfiable core [2022-12-14 12:09:18,247 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:09:18,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:09:18,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:09:18,534 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 21 [2022-12-14 12:09:18,933 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:09:18,934 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:18,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 10 [2022-12-14 12:09:18,965 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 7 proven. 78 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:09:18,966 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:09:19,212 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:19,212 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-12-14 12:09:19,216 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:19,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-12-14 12:09:19,219 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 12:09:19,562 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 7 proven. 78 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:09:19,563 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1286662356] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:09:19,563 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [506896497] [2022-12-14 12:09:19,563 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:09:19,564 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:09:19,564 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:09:19,564 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:09:19,564 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:09:19,594 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:19,597 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:19,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:09:19,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:19,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:19,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:19,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:09:19,752 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:09:19,752 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:09:19,820 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:09:21,381 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9168#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:09:21,382 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:09:21,382 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:09:21,382 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 20, 20] total 54 [2022-12-14 12:09:21,382 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [357617258] [2022-12-14 12:09:21,382 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:09:21,382 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-12-14 12:09:21,382 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:09:21,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-12-14 12:09:21,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=181, Invalid=3717, Unknown=8, NotChecked=0, Total=3906 [2022-12-14 12:09:21,383 INFO L87 Difference]: Start difference. First operand 239 states and 274 transitions. Second operand has 54 states, 54 states have (on average 1.7777777777777777) internal successors, (96), 54 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:25,869 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:09:25,869 INFO L93 Difference]: Finished difference Result 846 states and 918 transitions. [2022-12-14 12:09:25,869 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-12-14 12:09:25,870 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 1.7777777777777777) internal successors, (96), 54 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-12-14 12:09:25,870 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:09:25,871 INFO L225 Difference]: With dead ends: 846 [2022-12-14 12:09:25,871 INFO L226 Difference]: Without dead ends: 792 [2022-12-14 12:09:25,872 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 149 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 96 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1479 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=718, Invalid=8780, Unknown=8, NotChecked=0, Total=9506 [2022-12-14 12:09:25,872 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 1744 mSDsluCounter, 2174 mSDsCounter, 0 mSdLazyCounter, 4893 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1744 SdHoareTripleChecker+Valid, 2234 SdHoareTripleChecker+Invalid, 4939 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 4893 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-12-14 12:09:25,872 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1744 Valid, 2234 Invalid, 4939 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 4893 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-12-14 12:09:25,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 792 states. [2022-12-14 12:09:25,876 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 792 to 274. [2022-12-14 12:09:25,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 274 states, 270 states have (on average 1.162962962962963) internal successors, (314), 273 states have internal predecessors, (314), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:25,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 274 states to 274 states and 314 transitions. [2022-12-14 12:09:25,877 INFO L78 Accepts]: Start accepts. Automaton has 274 states and 314 transitions. Word has length 33 [2022-12-14 12:09:25,877 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:09:25,877 INFO L495 AbstractCegarLoop]: Abstraction has 274 states and 314 transitions. [2022-12-14 12:09:25,877 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 1.7777777777777777) internal successors, (96), 54 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:25,877 INFO L276 IsEmpty]: Start isEmpty. Operand 274 states and 314 transitions. [2022-12-14 12:09:25,877 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-12-14 12:09:25,877 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:09:25,877 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:09:25,881 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-12-14 12:09:26,078 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:09:26,078 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:09:26,079 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:09:26,079 INFO L85 PathProgramCache]: Analyzing trace with hash -158326115, now seen corresponding path program 5 times [2022-12-14 12:09:26,079 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:09:26,079 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1004205230] [2022-12-14 12:09:26,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:09:26,079 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:09:26,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:09:26,845 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 12 proven. 20 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:09:26,845 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:09:26,845 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1004205230] [2022-12-14 12:09:26,845 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1004205230] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:09:26,845 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [356288029] [2022-12-14 12:09:26,845 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:09:26,845 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:09:26,846 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:09:26,846 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:09:26,847 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-12-14 12:09:27,008 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-12-14 12:09:27,008 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:09:27,010 INFO L263 TraceCheckSpWp]: Trace formula consists of 266 conjuncts, 72 conjunts are in the unsatisfiable core [2022-12-14 12:09:27,012 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:09:27,018 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:09:27,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 12:09:27,258 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 12:09:27,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 12:09:27,346 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 12:09:27,349 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 10 proven. 22 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:09:27,349 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:09:27,358 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_634 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_634) |c_ULTIMATE.start_cstrncat_~s2#1.base|) |c_ULTIMATE.start_cstrncat_~s2#1.offset|) 0)) is different from false [2022-12-14 12:09:27,362 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_634 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_634) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 1)) 0)) is different from false [2022-12-14 12:09:27,417 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:27,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 12:09:27,421 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:27,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 12:09:27,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 12:09:27,627 INFO L134 CoverageAnalysis]: Checked inductivity of 32 backedges. 13 proven. 7 refuted. 0 times theorem prover too weak. 0 trivial. 12 not checked. [2022-12-14 12:09:27,628 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [356288029] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:09:27,628 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [388666911] [2022-12-14 12:09:27,628 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:09:27,629 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:09:27,629 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:09:27,629 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:09:27,629 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:09:27,657 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:27,661 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:27,661 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:09:27,685 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:27,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:27,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:27,769 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:27,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:27,817 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:27,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:09:27,885 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:09:27,885 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:09:27,965 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:09:27,968 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:09:28,008 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-12-14 12:09:28,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-12-14 12:09:28,115 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:09:28,115 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:09:28,175 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:09:28,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:09:28,208 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:09:30,071 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10603#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:09:30,071 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:09:30,071 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:09:30,071 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 15, 15] total 38 [2022-12-14 12:09:30,071 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [158452422] [2022-12-14 12:09:30,071 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:09:30,072 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-12-14 12:09:30,072 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:09:30,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-12-14 12:09:30,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=226, Invalid=2216, Unknown=16, NotChecked=194, Total=2652 [2022-12-14 12:09:30,072 INFO L87 Difference]: Start difference. First operand 274 states and 314 transitions. Second operand has 38 states, 38 states have (on average 2.1842105263157894) internal successors, (83), 38 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:30,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:09:30,699 INFO L93 Difference]: Finished difference Result 328 states and 368 transitions. [2022-12-14 12:09:30,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-12-14 12:09:30,699 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 2.1842105263157894) internal successors, (83), 38 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-12-14 12:09:30,699 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:09:30,700 INFO L225 Difference]: With dead ends: 328 [2022-12-14 12:09:30,700 INFO L226 Difference]: Without dead ends: 298 [2022-12-14 12:09:30,700 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 134 GetRequests, 70 SyntacticMatches, 2 SemanticMatches, 62 ConstructedPredicates, 2 IntricatePredicates, 1 DeprecatedPredicates, 892 ImplicationChecksByTransitivity, 3.0s TimeCoverageRelationStatistics Valid=364, Invalid=3408, Unknown=18, NotChecked=242, Total=4032 [2022-12-14 12:09:30,701 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 104 mSDsluCounter, 115 mSDsCounter, 0 mSdLazyCounter, 424 mSolverCounterSat, 12 mSolverCounterUnsat, 7 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 104 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 537 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 424 IncrementalHoareTripleChecker+Invalid, 7 IncrementalHoareTripleChecker+Unknown, 94 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 12:09:30,701 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [104 Valid, 124 Invalid, 537 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 424 Invalid, 7 Unknown, 94 Unchecked, 0.2s Time] [2022-12-14 12:09:30,701 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 298 states. [2022-12-14 12:09:30,704 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 298 to 285. [2022-12-14 12:09:30,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 285 states, 281 states have (on average 1.1565836298932384) internal successors, (325), 284 states have internal predecessors, (325), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:30,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 285 states to 285 states and 325 transitions. [2022-12-14 12:09:30,705 INFO L78 Accepts]: Start accepts. Automaton has 285 states and 325 transitions. Word has length 34 [2022-12-14 12:09:30,705 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:09:30,705 INFO L495 AbstractCegarLoop]: Abstraction has 285 states and 325 transitions. [2022-12-14 12:09:30,705 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 2.1842105263157894) internal successors, (83), 38 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:30,705 INFO L276 IsEmpty]: Start isEmpty. Operand 285 states and 325 transitions. [2022-12-14 12:09:30,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-12-14 12:09:30,706 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:09:30,706 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:09:30,711 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-12-14 12:09:30,906 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:09:30,907 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:09:30,908 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:09:30,908 INFO L85 PathProgramCache]: Analyzing trace with hash -1237617920, now seen corresponding path program 1 times [2022-12-14 12:09:30,908 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:09:30,908 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1099358624] [2022-12-14 12:09:30,909 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:09:30,909 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:09:30,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:09:31,392 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 17 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:09:31,392 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:09:31,392 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1099358624] [2022-12-14 12:09:31,393 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1099358624] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:09:31,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1122935778] [2022-12-14 12:09:31,393 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:09:31,393 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:09:31,393 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:09:31,394 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:09:31,394 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-12-14 12:09:31,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:09:31,468 INFO L263 TraceCheckSpWp]: Trace formula consists of 249 conjuncts, 61 conjunts are in the unsatisfiable core [2022-12-14 12:09:31,470 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:09:31,478 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:31,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 12:09:31,481 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:09:31,974 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 21 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:09:31,974 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:09:32,417 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 21 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:09:32,417 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1122935778] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:09:32,418 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [613011357] [2022-12-14 12:09:32,418 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 12:09:32,418 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:09:32,419 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:09:32,419 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:09:32,419 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:09:32,449 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:32,452 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:32,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:09:32,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:09:32,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:32,540 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:32,584 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:32,610 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:32,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:32,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:09:32,705 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:09:32,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:09:32,857 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:09:32,857 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:09:32,956 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:09:32,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:09:33,027 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:09:33,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:09:33,088 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:09:34,794 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11495#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:09:34,794 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:09:34,794 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:09:34,794 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 14, 14] total 41 [2022-12-14 12:09:34,794 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [363985532] [2022-12-14 12:09:34,794 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:09:34,794 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2022-12-14 12:09:34,794 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:09:34,795 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2022-12-14 12:09:34,795 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=217, Invalid=2753, Unknown=0, NotChecked=0, Total=2970 [2022-12-14 12:09:34,795 INFO L87 Difference]: Start difference. First operand 285 states and 325 transitions. Second operand has 42 states, 41 states have (on average 2.292682926829268) internal successors, (94), 42 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:40,995 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:09:40,995 INFO L93 Difference]: Finished difference Result 606 states and 669 transitions. [2022-12-14 12:09:40,996 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 86 states. [2022-12-14 12:09:40,996 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 41 states have (on average 2.292682926829268) internal successors, (94), 42 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-12-14 12:09:40,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:09:40,999 INFO L225 Difference]: With dead ends: 606 [2022-12-14 12:09:41,000 INFO L226 Difference]: Without dead ends: 604 [2022-12-14 12:09:41,001 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 132 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4932 ImplicationChecksByTransitivity, 8.2s TimeCoverageRelationStatistics Valid=2133, Invalid=15689, Unknown=0, NotChecked=0, Total=17822 [2022-12-14 12:09:41,001 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 827 mSDsluCounter, 163 mSDsCounter, 0 mSdLazyCounter, 945 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 827 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 1015 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 945 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 12:09:41,002 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [827 Valid, 171 Invalid, 1015 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 945 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 12:09:41,002 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 604 states. [2022-12-14 12:09:41,008 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 604 to 292. [2022-12-14 12:09:41,009 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 292 states, 288 states have (on average 1.1527777777777777) internal successors, (332), 291 states have internal predecessors, (332), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:41,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 292 states to 292 states and 332 transitions. [2022-12-14 12:09:41,010 INFO L78 Accepts]: Start accepts. Automaton has 292 states and 332 transitions. Word has length 34 [2022-12-14 12:09:41,010 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:09:41,010 INFO L495 AbstractCegarLoop]: Abstraction has 292 states and 332 transitions. [2022-12-14 12:09:41,010 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 41 states have (on average 2.292682926829268) internal successors, (94), 42 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:41,010 INFO L276 IsEmpty]: Start isEmpty. Operand 292 states and 332 transitions. [2022-12-14 12:09:41,011 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-12-14 12:09:41,011 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:09:41,011 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:09:41,017 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2022-12-14 12:09:41,211 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-12-14 12:09:41,211 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:09:41,212 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:09:41,212 INFO L85 PathProgramCache]: Analyzing trace with hash -1237626956, now seen corresponding path program 1 times [2022-12-14 12:09:41,212 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:09:41,212 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1100203317] [2022-12-14 12:09:41,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:09:41,212 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:09:41,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:09:41,769 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 19 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:09:41,769 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:09:41,769 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1100203317] [2022-12-14 12:09:41,769 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1100203317] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:09:41,769 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1632430928] [2022-12-14 12:09:41,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:09:41,770 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:09:41,770 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:09:41,770 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:09:41,771 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-12-14 12:09:41,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:09:41,869 INFO L263 TraceCheckSpWp]: Trace formula consists of 262 conjuncts, 67 conjunts are in the unsatisfiable core [2022-12-14 12:09:41,871 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:09:41,905 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:41,905 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 12:09:41,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:09:42,585 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 0 proven. 23 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:09:42,585 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:09:43,382 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:09:43,426 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 0 proven. 23 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:09:43,426 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1632430928] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:09:43,426 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [494338667] [2022-12-14 12:09:43,428 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:09:43,428 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:09:43,428 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:09:43,428 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:09:43,428 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:09:43,458 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:43,460 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:43,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:09:43,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:09:43,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:43,535 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:43,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:09:43,600 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:43,618 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:43,659 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:09:43,692 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:09:43,693 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:09:43,798 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:09:43,798 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:09:43,867 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:09:43,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:09:43,934 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:09:43,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:09:43,967 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:09:46,682 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12813#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:09:46,683 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:09:46,683 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:09:46,683 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 17, 18] total 49 [2022-12-14 12:09:46,683 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1776236813] [2022-12-14 12:09:46,683 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:09:46,683 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-12-14 12:09:46,683 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:09:46,684 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-12-14 12:09:46,684 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=395, Invalid=3895, Unknown=0, NotChecked=0, Total=4290 [2022-12-14 12:09:46,684 INFO L87 Difference]: Start difference. First operand 292 states and 332 transitions. Second operand has 51 states, 50 states have (on average 1.92) internal successors, (96), 50 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:50,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:09:50,777 INFO L93 Difference]: Finished difference Result 515 states and 571 transitions. [2022-12-14 12:09:50,778 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-12-14 12:09:50,778 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 50 states have (on average 1.92) internal successors, (96), 50 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-12-14 12:09:50,778 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:09:50,779 INFO L225 Difference]: With dead ends: 515 [2022-12-14 12:09:50,779 INFO L226 Difference]: Without dead ends: 486 [2022-12-14 12:09:50,779 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 159 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 109 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3357 ImplicationChecksByTransitivity, 7.6s TimeCoverageRelationStatistics Valid=1845, Invalid=10365, Unknown=0, NotChecked=0, Total=12210 [2022-12-14 12:09:50,780 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 767 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 842 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 767 SdHoareTripleChecker+Valid, 91 SdHoareTripleChecker+Invalid, 908 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 842 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 12:09:50,780 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [767 Valid, 91 Invalid, 908 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 842 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 12:09:50,780 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 486 states. [2022-12-14 12:09:50,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 486 to 317. [2022-12-14 12:09:50,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 317 states, 313 states have (on average 1.1693290734824282) internal successors, (366), 316 states have internal predecessors, (366), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:50,783 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 317 states to 317 states and 366 transitions. [2022-12-14 12:09:50,783 INFO L78 Accepts]: Start accepts. Automaton has 317 states and 366 transitions. Word has length 34 [2022-12-14 12:09:50,783 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:09:50,783 INFO L495 AbstractCegarLoop]: Abstraction has 317 states and 366 transitions. [2022-12-14 12:09:50,784 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 50 states have (on average 1.92) internal successors, (96), 50 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:50,784 INFO L276 IsEmpty]: Start isEmpty. Operand 317 states and 366 transitions. [2022-12-14 12:09:50,784 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-12-14 12:09:50,784 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:09:50,784 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:09:50,789 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Ended with exit code 0 [2022-12-14 12:09:50,985 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-12-14 12:09:50,985 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:09:50,986 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:09:50,986 INFO L85 PathProgramCache]: Analyzing trace with hash 640592034, now seen corresponding path program 6 times [2022-12-14 12:09:50,987 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:09:50,987 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [486500361] [2022-12-14 12:09:50,987 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:09:50,987 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:09:51,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:09:51,700 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 11 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:09:51,701 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:09:51,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [486500361] [2022-12-14 12:09:51,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [486500361] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:09:51,701 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [944838261] [2022-12-14 12:09:51,701 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 12:09:51,701 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:09:51,701 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:09:51,702 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:09:51,703 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-12-14 12:09:51,819 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 12:09:51,819 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:09:51,821 INFO L263 TraceCheckSpWp]: Trace formula consists of 279 conjuncts, 75 conjunts are in the unsatisfiable core [2022-12-14 12:09:51,823 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:09:51,946 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:09:52,067 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-12-14 12:09:52,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 46 treesize of output 54 [2022-12-14 12:09:52,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 12:09:52,091 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:09:52,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 32 treesize of output 20 [2022-12-14 12:09:52,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 22 [2022-12-14 12:09:52,347 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:52,348 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 11 [2022-12-14 12:09:52,350 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 9 proven. 19 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:09:52,351 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:09:52,741 INFO L321 Elim1Store]: treesize reduction 16, result has 66.7 percent of original size [2022-12-14 12:09:52,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 71 treesize of output 87 [2022-12-14 12:09:52,749 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:52,749 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 49 treesize of output 51 [2022-12-14 12:09:52,754 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:09:52,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 4 [2022-12-14 12:09:52,784 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:52,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 45 treesize of output 55 [2022-12-14 12:09:52,972 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 14 proven. 14 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:09:52,972 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [944838261] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:09:52,972 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [887875122] [2022-12-14 12:09:52,973 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:09:52,973 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:09:52,973 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:09:52,973 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:09:52,974 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:09:52,996 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:53,000 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:53,001 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:09:53,031 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:09:53,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:53,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:53,107 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:53,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:53,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:53,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:09:53,235 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:09:53,235 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:09:53,333 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:09:53,336 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:09:53,381 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-12-14 12:09:53,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-12-14 12:09:53,483 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:09:53,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:09:53,546 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:09:53,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:09:53,573 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:09:55,692 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14009#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:09:55,692 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:09:55,692 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:09:55,692 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 21, 20] total 49 [2022-12-14 12:09:55,692 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [955982595] [2022-12-14 12:09:55,692 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:09:55,692 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-12-14 12:09:55,693 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:09:55,693 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-12-14 12:09:55,693 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=314, Invalid=3552, Unknown=40, NotChecked=0, Total=3906 [2022-12-14 12:09:55,694 INFO L87 Difference]: Start difference. First operand 317 states and 366 transitions. Second operand has 49 states, 49 states have (on average 1.5714285714285714) internal successors, (77), 49 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:56,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:09:56,939 INFO L93 Difference]: Finished difference Result 608 states and 686 transitions. [2022-12-14 12:09:56,939 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-12-14 12:09:56,939 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 1.5714285714285714) internal successors, (77), 49 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-12-14 12:09:56,939 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:09:56,940 INFO L225 Difference]: With dead ends: 608 [2022-12-14 12:09:56,940 INFO L226 Difference]: Without dead ends: 548 [2022-12-14 12:09:56,940 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 149 GetRequests, 67 SyntacticMatches, 2 SemanticMatches, 80 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2008 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=619, Invalid=5983, Unknown=40, NotChecked=0, Total=6642 [2022-12-14 12:09:56,941 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 204 mSDsluCounter, 315 mSDsCounter, 0 mSdLazyCounter, 1011 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 204 SdHoareTripleChecker+Valid, 339 SdHoareTripleChecker+Invalid, 1033 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 1011 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 12:09:56,941 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [204 Valid, 339 Invalid, 1033 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 1011 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 12:09:56,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 548 states. [2022-12-14 12:09:56,944 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 548 to 347. [2022-12-14 12:09:56,944 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 347 states, 343 states have (on average 1.1690962099125364) internal successors, (401), 346 states have internal predecessors, (401), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:56,945 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 347 states to 347 states and 401 transitions. [2022-12-14 12:09:56,945 INFO L78 Accepts]: Start accepts. Automaton has 347 states and 401 transitions. Word has length 36 [2022-12-14 12:09:56,945 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:09:56,945 INFO L495 AbstractCegarLoop]: Abstraction has 347 states and 401 transitions. [2022-12-14 12:09:56,945 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 1.5714285714285714) internal successors, (77), 49 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:09:56,945 INFO L276 IsEmpty]: Start isEmpty. Operand 347 states and 401 transitions. [2022-12-14 12:09:56,945 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-12-14 12:09:56,945 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:09:56,945 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:09:56,950 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2022-12-14 12:09:57,146 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2022-12-14 12:09:57,147 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:09:57,148 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:09:57,148 INFO L85 PathProgramCache]: Analyzing trace with hash 1356204864, now seen corresponding path program 8 times [2022-12-14 12:09:57,148 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:09:57,149 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [801978509] [2022-12-14 12:09:57,149 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:09:57,149 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:09:57,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:09:57,954 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 25 proven. 88 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:09:57,954 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:09:57,954 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [801978509] [2022-12-14 12:09:57,954 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [801978509] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:09:57,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [454689083] [2022-12-14 12:09:57,955 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:09:57,955 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:09:57,955 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:09:57,955 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:09:57,956 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-12-14 12:09:58,093 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2022-12-14 12:09:58,093 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:09:58,095 INFO L263 TraceCheckSpWp]: Trace formula consists of 279 conjuncts, 73 conjunts are in the unsatisfiable core [2022-12-14 12:09:58,097 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:09:58,100 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:09:58,372 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:09:58,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 12:09:58,918 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-12-14 12:09:58,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-12-14 12:09:58,955 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 8 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:09:58,955 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:09:59,319 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_830 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_830) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 7 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-12-14 12:09:59,324 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:59,324 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-12-14 12:09:59,329 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:09:59,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-12-14 12:09:59,552 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 8 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:09:59,552 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [454689083] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:09:59,552 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [684380049] [2022-12-14 12:09:59,553 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:09:59,553 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:09:59,553 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:09:59,554 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:09:59,554 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:09:59,576 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:59,579 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:09:59,580 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:09:59,609 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:09:59,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:59,664 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:09:59,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:09:59,731 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:09:59,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:09:59,799 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:10:01,585 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15284#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:10:01,585 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:10:01,585 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:10:01,585 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 22, 22] total 52 [2022-12-14 12:10:01,586 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1211527459] [2022-12-14 12:10:01,586 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:10:01,586 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-12-14 12:10:01,586 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:10:01,587 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-12-14 12:10:01,587 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=179, Invalid=3364, Unknown=1, NotChecked=116, Total=3660 [2022-12-14 12:10:01,587 INFO L87 Difference]: Start difference. First operand 347 states and 401 transitions. Second operand has 52 states, 52 states have (on average 1.8076923076923077) internal successors, (94), 52 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:07,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:10:07,759 INFO L93 Difference]: Finished difference Result 1088 states and 1190 transitions. [2022-12-14 12:10:07,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-12-14 12:10:07,760 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 52 states have (on average 1.8076923076923077) internal successors, (94), 52 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-12-14 12:10:07,760 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:10:07,762 INFO L225 Difference]: With dead ends: 1088 [2022-12-14 12:10:07,762 INFO L226 Difference]: Without dead ends: 1030 [2022-12-14 12:10:07,763 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 67 SyntacticMatches, 2 SemanticMatches, 105 ConstructedPredicates, 1 IntricatePredicates, 8 DeprecatedPredicates, 2275 ImplicationChecksByTransitivity, 7.4s TimeCoverageRelationStatistics Valid=936, Invalid=10197, Unknown=1, NotChecked=208, Total=11342 [2022-12-14 12:10:07,763 INFO L413 NwaCegarLoop]: 63 mSDtfsCounter, 2180 mSDsluCounter, 1655 mSDsCounter, 0 mSdLazyCounter, 3874 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2180 SdHoareTripleChecker+Valid, 1718 SdHoareTripleChecker+Invalid, 4138 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 3874 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 215 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:10:07,764 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2180 Valid, 1718 Invalid, 4138 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 3874 Invalid, 0 Unknown, 215 Unchecked, 2.0s Time] [2022-12-14 12:10:07,764 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1030 states. [2022-12-14 12:10:07,772 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1030 to 394. [2022-12-14 12:10:07,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 394 states, 390 states have (on average 1.1717948717948719) internal successors, (457), 393 states have internal predecessors, (457), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:07,773 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 394 states to 394 states and 457 transitions. [2022-12-14 12:10:07,773 INFO L78 Accepts]: Start accepts. Automaton has 394 states and 457 transitions. Word has length 37 [2022-12-14 12:10:07,773 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:10:07,773 INFO L495 AbstractCegarLoop]: Abstraction has 394 states and 457 transitions. [2022-12-14 12:10:07,773 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 52 states have (on average 1.8076923076923077) internal successors, (94), 52 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:07,774 INFO L276 IsEmpty]: Start isEmpty. Operand 394 states and 457 transitions. [2022-12-14 12:10:07,774 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-12-14 12:10:07,774 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:10:07,774 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:10:07,779 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Ended with exit code 0 [2022-12-14 12:10:07,975 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable34,21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:10:07,976 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:10:07,976 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:10:07,977 INFO L85 PathProgramCache]: Analyzing trace with hash 880270386, now seen corresponding path program 7 times [2022-12-14 12:10:07,977 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:10:07,977 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [516892386] [2022-12-14 12:10:07,977 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:10:07,978 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:10:08,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:10:08,220 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 1 proven. 32 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:10:08,220 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:10:08,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [516892386] [2022-12-14 12:10:08,220 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [516892386] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:10:08,220 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1916103421] [2022-12-14 12:10:08,220 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 12:10:08,220 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:10:08,220 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:10:08,221 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:10:08,222 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-12-14 12:10:08,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:10:08,303 INFO L263 TraceCheckSpWp]: Trace formula consists of 292 conjuncts, 42 conjunts are in the unsatisfiable core [2022-12-14 12:10:08,304 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:10:08,389 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 4 proven. 29 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:10:08,389 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:10:08,488 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 12:10:08,516 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 4 proven. 29 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:10:08,516 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1916103421] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:10:08,516 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [830980566] [2022-12-14 12:10:08,517 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:10:08,517 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:10:08,517 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:10:08,517 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:10:08,517 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:10:08,539 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:08,541 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:08,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:10:08,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:10:08,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:08,614 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:08,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:08,673 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:08,689 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:08,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:10:08,753 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:10:08,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:10:08,849 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:10:08,851 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:10:08,881 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-12-14 12:10:08,881 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-12-14 12:10:08,970 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:10:08,970 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:10:09,045 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:10:09,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:10:09,071 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:10:10,645 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17114#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:10:10,645 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:10:10,645 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:10:10,645 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 11, 11] total 24 [2022-12-14 12:10:10,645 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2102408927] [2022-12-14 12:10:10,645 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:10:10,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-12-14 12:10:10,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:10:10,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-12-14 12:10:10,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=176, Invalid=1306, Unknown=0, NotChecked=0, Total=1482 [2022-12-14 12:10:10,646 INFO L87 Difference]: Start difference. First operand 394 states and 457 transitions. Second operand has 25 states, 24 states have (on average 3.0416666666666665) internal successors, (73), 25 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:11,084 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:10:11,084 INFO L93 Difference]: Finished difference Result 677 states and 764 transitions. [2022-12-14 12:10:11,084 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-12-14 12:10:11,084 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 24 states have (on average 3.0416666666666665) internal successors, (73), 25 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-12-14 12:10:11,084 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:10:11,085 INFO L225 Difference]: With dead ends: 677 [2022-12-14 12:10:11,085 INFO L226 Difference]: Without dead ends: 677 [2022-12-14 12:10:11,085 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 83 SyntacticMatches, 4 SemanticMatches, 52 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 719 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=391, Invalid=2471, Unknown=0, NotChecked=0, Total=2862 [2022-12-14 12:10:11,086 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 248 mSDsluCounter, 199 mSDsCounter, 0 mSdLazyCounter, 532 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 248 SdHoareTripleChecker+Valid, 227 SdHoareTripleChecker+Invalid, 537 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 532 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 12:10:11,086 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [248 Valid, 227 Invalid, 537 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 532 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 12:10:11,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 677 states. [2022-12-14 12:10:11,091 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 677 to 491. [2022-12-14 12:10:11,091 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 491 states, 487 states have (on average 1.188911704312115) internal successors, (579), 490 states have internal predecessors, (579), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:11,092 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 491 states to 491 states and 579 transitions. [2022-12-14 12:10:11,092 INFO L78 Accepts]: Start accepts. Automaton has 491 states and 579 transitions. Word has length 38 [2022-12-14 12:10:11,092 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:10:11,092 INFO L495 AbstractCegarLoop]: Abstraction has 491 states and 579 transitions. [2022-12-14 12:10:11,092 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 24 states have (on average 3.0416666666666665) internal successors, (73), 25 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:11,093 INFO L276 IsEmpty]: Start isEmpty. Operand 491 states and 579 transitions. [2022-12-14 12:10:11,093 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-12-14 12:10:11,093 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:10:11,093 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:10:11,099 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2022-12-14 12:10:11,294 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable35,22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:10:11,294 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:10:11,294 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:10:11,294 INFO L85 PathProgramCache]: Analyzing trace with hash 559970473, now seen corresponding path program 1 times [2022-12-14 12:10:11,294 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:10:11,294 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1292315466] [2022-12-14 12:10:11,294 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:10:11,295 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:10:11,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:10:11,862 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 9 proven. 28 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 12:10:11,862 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:10:11,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1292315466] [2022-12-14 12:10:11,862 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1292315466] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:10:11,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1645664484] [2022-12-14 12:10:11,862 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:10:11,862 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:10:11,862 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:10:11,863 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:10:11,864 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-12-14 12:10:11,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:10:11,979 INFO L263 TraceCheckSpWp]: Trace formula consists of 290 conjuncts, 65 conjunts are in the unsatisfiable core [2022-12-14 12:10:11,981 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:10:11,985 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:10:12,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:12,150 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 12:10:12,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 12:10:12,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 12:10:12,167 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 9 proven. 19 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-12-14 12:10:12,167 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:10:12,175 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_940 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_940) |c_ULTIMATE.start_cstrncat_~s2#1.base|) |c_ULTIMATE.start_cstrncat_~s2#1.offset|) 0)) is different from false [2022-12-14 12:10:12,229 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_940 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_940) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrncat_~s2#1.offset|)) 0)) is different from false [2022-12-14 12:10:12,239 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:10:12,240 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 12:10:12,244 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:10:12,244 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 12:10:12,353 INFO L134 CoverageAnalysis]: Checked inductivity of 39 backedges. 9 proven. 11 refuted. 0 times theorem prover too weak. 11 trivial. 8 not checked. [2022-12-14 12:10:12,353 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1645664484] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:10:12,353 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2108085811] [2022-12-14 12:10:12,354 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:10:12,354 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:10:12,354 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:10:12,354 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:10:12,354 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:10:12,375 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:12,378 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:12,378 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:10:12,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:12,435 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:12,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:12,488 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:12,514 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:12,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:12,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:10:12,590 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:10:12,590 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:10:12,705 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:10:12,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:10:12,770 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:10:12,770 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:10:12,827 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:10:12,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:10:12,861 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:10:15,016 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18580#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:10:15,016 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:10:15,016 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:10:15,016 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 15, 15] total 32 [2022-12-14 12:10:15,016 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [372299007] [2022-12-14 12:10:15,016 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:10:15,017 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-12-14 12:10:15,017 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:10:15,017 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-12-14 12:10:15,017 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=175, Invalid=1799, Unknown=14, NotChecked=174, Total=2162 [2022-12-14 12:10:15,018 INFO L87 Difference]: Start difference. First operand 491 states and 579 transitions. Second operand has 32 states, 32 states have (on average 2.25) internal successors, (72), 32 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:16,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:10:16,083 INFO L93 Difference]: Finished difference Result 640 states and 716 transitions. [2022-12-14 12:10:16,083 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-12-14 12:10:16,083 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 2.25) internal successors, (72), 32 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-12-14 12:10:16,083 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:10:16,084 INFO L225 Difference]: With dead ends: 640 [2022-12-14 12:10:16,084 INFO L226 Difference]: Without dead ends: 535 [2022-12-14 12:10:16,084 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 155 GetRequests, 87 SyntacticMatches, 3 SemanticMatches, 65 ConstructedPredicates, 2 IntricatePredicates, 2 DeprecatedPredicates, 1091 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=457, Invalid=3696, Unknown=15, NotChecked=254, Total=4422 [2022-12-14 12:10:16,084 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 192 mSDsluCounter, 332 mSDsCounter, 0 mSdLazyCounter, 816 mSolverCounterSat, 11 mSolverCounterUnsat, 32 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 192 SdHoareTripleChecker+Valid, 360 SdHoareTripleChecker+Invalid, 1005 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 816 IncrementalHoareTripleChecker+Invalid, 32 IncrementalHoareTripleChecker+Unknown, 146 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 12:10:16,085 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [192 Valid, 360 Invalid, 1005 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 816 Invalid, 32 Unknown, 146 Unchecked, 0.4s Time] [2022-12-14 12:10:16,085 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 535 states. [2022-12-14 12:10:16,088 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 535 to 487. [2022-12-14 12:10:16,088 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 487 states, 483 states have (on average 1.1511387163561078) internal successors, (556), 486 states have internal predecessors, (556), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:16,089 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 487 states to 487 states and 556 transitions. [2022-12-14 12:10:16,089 INFO L78 Accepts]: Start accepts. Automaton has 487 states and 556 transitions. Word has length 38 [2022-12-14 12:10:16,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:10:16,089 INFO L495 AbstractCegarLoop]: Abstraction has 487 states and 556 transitions. [2022-12-14 12:10:16,089 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 2.25) internal successors, (72), 32 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:16,089 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 556 transitions. [2022-12-14 12:10:16,090 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-12-14 12:10:16,090 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:10:16,090 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:10:16,094 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Ended with exit code 0 [2022-12-14 12:10:16,290 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-12-14 12:10:16,291 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:10:16,291 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:10:16,292 INFO L85 PathProgramCache]: Analyzing trace with hash -519321332, now seen corresponding path program 2 times [2022-12-14 12:10:16,292 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:10:16,292 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [152166900] [2022-12-14 12:10:16,292 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:10:16,293 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:10:16,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:10:16,824 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:10:16,824 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:10:16,824 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [152166900] [2022-12-14 12:10:16,824 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [152166900] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:10:16,824 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1403560793] [2022-12-14 12:10:16,824 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:10:16,824 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:10:16,824 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:10:16,825 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:10:16,826 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-12-14 12:10:17,006 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-12-14 12:10:17,006 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:10:17,008 INFO L263 TraceCheckSpWp]: Trace formula consists of 273 conjuncts, 51 conjunts are in the unsatisfiable core [2022-12-14 12:10:17,010 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:10:17,045 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:17,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 12:10:17,048 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:10:17,649 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:10:17,649 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:10:18,175 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:10:18,205 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:10:18,205 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1403560793] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:10:18,205 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [164616435] [2022-12-14 12:10:18,206 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 12:10:18,206 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:10:18,206 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:10:18,206 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:10:18,206 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:10:18,237 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:18,240 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:18,240 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:10:18,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:18,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:18,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:18,345 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:18,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:18,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:18,417 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:10:18,451 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:10:18,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:10:18,562 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:10:18,563 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:10:18,640 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:10:18,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:10:18,707 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:10:18,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:10:18,760 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:10:20,691 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20030#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:10:20,691 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:10:20,691 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:10:20,691 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 14, 14] total 45 [2022-12-14 12:10:20,691 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [405118144] [2022-12-14 12:10:20,691 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:10:20,691 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-12-14 12:10:20,692 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:10:20,692 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-12-14 12:10:20,692 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=257, Invalid=3283, Unknown=0, NotChecked=0, Total=3540 [2022-12-14 12:10:20,692 INFO L87 Difference]: Start difference. First operand 487 states and 556 transitions. Second operand has 46 states, 45 states have (on average 2.4) internal successors, (108), 46 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:32,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:10:32,022 INFO L93 Difference]: Finished difference Result 894 states and 983 transitions. [2022-12-14 12:10:32,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 104 states. [2022-12-14 12:10:32,022 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 45 states have (on average 2.4) internal successors, (108), 46 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-12-14 12:10:32,022 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:10:32,024 INFO L225 Difference]: With dead ends: 894 [2022-12-14 12:10:32,024 INFO L226 Difference]: Without dead ends: 852 [2022-12-14 12:10:32,026 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 230 GetRequests, 71 SyntacticMatches, 0 SemanticMatches, 159 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7138 ImplicationChecksByTransitivity, 13.3s TimeCoverageRelationStatistics Valid=4426, Invalid=21334, Unknown=0, NotChecked=0, Total=25760 [2022-12-14 12:10:32,026 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 1304 mSDsluCounter, 157 mSDsCounter, 0 mSdLazyCounter, 1492 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1304 SdHoareTripleChecker+Valid, 168 SdHoareTripleChecker+Invalid, 1593 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 1492 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-12-14 12:10:32,026 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1304 Valid, 168 Invalid, 1593 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 1492 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-12-14 12:10:32,027 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 852 states. [2022-12-14 12:10:32,033 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 852 to 524. [2022-12-14 12:10:32,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 524 states, 520 states have (on average 1.148076923076923) internal successors, (597), 523 states have internal predecessors, (597), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:32,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 524 states to 524 states and 597 transitions. [2022-12-14 12:10:32,035 INFO L78 Accepts]: Start accepts. Automaton has 524 states and 597 transitions. Word has length 38 [2022-12-14 12:10:32,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:10:32,035 INFO L495 AbstractCegarLoop]: Abstraction has 524 states and 597 transitions. [2022-12-14 12:10:32,035 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 45 states have (on average 2.4) internal successors, (108), 46 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:32,035 INFO L276 IsEmpty]: Start isEmpty. Operand 524 states and 597 transitions. [2022-12-14 12:10:32,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-12-14 12:10:32,036 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:10:32,036 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 8, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:10:32,041 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Ended with exit code 0 [2022-12-14 12:10:32,236 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-12-14 12:10:32,237 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:10:32,238 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:10:32,238 INFO L85 PathProgramCache]: Analyzing trace with hash 143504052, now seen corresponding path program 9 times [2022-12-14 12:10:32,238 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:10:32,239 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [180762220] [2022-12-14 12:10:32,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:10:32,239 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:10:32,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:10:32,958 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 36 proven. 109 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:10:32,959 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:10:32,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [180762220] [2022-12-14 12:10:32,959 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [180762220] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:10:32,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1430993986] [2022-12-14 12:10:32,959 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 12:10:32,959 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:10:32,959 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:10:32,960 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:10:32,961 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-12-14 12:10:33,140 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 12:10:33,140 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:10:33,142 INFO L263 TraceCheckSpWp]: Trace formula consists of 303 conjuncts, 90 conjunts are in the unsatisfiable core [2022-12-14 12:10:33,145 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:10:33,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:10:33,520 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:33,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 25 [2022-12-14 12:10:34,417 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:10:34,418 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:34,419 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:34,419 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:10:34,424 INFO L321 Elim1Store]: treesize reduction 4, result has 66.7 percent of original size [2022-12-14 12:10:34,424 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 37 treesize of output 21 [2022-12-14 12:10:34,460 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 9 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:10:34,460 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:10:34,934 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:10:34,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 93 treesize of output 83 [2022-12-14 12:10:35,825 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 11 proven. 134 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:10:35,826 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1430993986] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:10:35,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1444726400] [2022-12-14 12:10:35,827 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:10:35,827 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:10:35,827 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:10:35,827 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:10:35,827 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:10:35,859 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:35,861 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:35,862 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:10:35,891 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:35,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:35,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:35,999 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:10:36,040 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:10:36,040 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:10:36,103 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:10:38,277 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21974#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:10:38,277 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:10:38,277 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:10:38,277 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 26, 26] total 70 [2022-12-14 12:10:38,277 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1406162935] [2022-12-14 12:10:38,277 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:10:38,278 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 70 states [2022-12-14 12:10:38,278 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:10:38,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 70 interpolants. [2022-12-14 12:10:38,279 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=239, Invalid=5923, Unknown=0, NotChecked=0, Total=6162 [2022-12-14 12:10:38,279 INFO L87 Difference]: Start difference. First operand 524 states and 597 transitions. Second operand has 70 states, 70 states have (on average 1.7142857142857142) internal successors, (120), 70 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:51,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:10:51,780 INFO L93 Difference]: Finished difference Result 1770 states and 1931 transitions. [2022-12-14 12:10:51,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 78 states. [2022-12-14 12:10:51,780 INFO L78 Accepts]: Start accepts. Automaton has has 70 states, 70 states have (on average 1.7142857142857142) internal successors, (120), 70 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-12-14 12:10:51,780 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:10:51,782 INFO L225 Difference]: With dead ends: 1770 [2022-12-14 12:10:51,782 INFO L226 Difference]: Without dead ends: 1694 [2022-12-14 12:10:51,783 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 152 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4354 ImplicationChecksByTransitivity, 14.6s TimeCoverageRelationStatistics Valid=1913, Invalid=21649, Unknown=0, NotChecked=0, Total=23562 [2022-12-14 12:10:51,784 INFO L413 NwaCegarLoop]: 70 mSDtfsCounter, 2370 mSDsluCounter, 2888 mSDsCounter, 0 mSdLazyCounter, 6839 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2370 SdHoareTripleChecker+Valid, 2958 SdHoareTripleChecker+Invalid, 6895 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 6839 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.4s IncrementalHoareTripleChecker+Time [2022-12-14 12:10:51,784 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2370 Valid, 2958 Invalid, 6895 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 6839 Invalid, 0 Unknown, 0 Unchecked, 3.4s Time] [2022-12-14 12:10:51,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1694 states. [2022-12-14 12:10:51,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1694 to 603. [2022-12-14 12:10:51,794 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 603 states, 599 states have (on average 1.1469115191986645) internal successors, (687), 602 states have internal predecessors, (687), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:51,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 603 states to 603 states and 687 transitions. [2022-12-14 12:10:51,795 INFO L78 Accepts]: Start accepts. Automaton has 603 states and 687 transitions. Word has length 41 [2022-12-14 12:10:51,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:10:51,795 INFO L495 AbstractCegarLoop]: Abstraction has 603 states and 687 transitions. [2022-12-14 12:10:51,795 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 70 states, 70 states have (on average 1.7142857142857142) internal successors, (120), 70 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:10:51,795 INFO L276 IsEmpty]: Start isEmpty. Operand 603 states and 687 transitions. [2022-12-14 12:10:51,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-12-14 12:10:51,796 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:10:51,796 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:10:51,801 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Ended with exit code 0 [2022-12-14 12:10:51,997 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable38,25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:10:51,997 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:10:51,998 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:10:51,998 INFO L85 PathProgramCache]: Analyzing trace with hash -475340392, now seen corresponding path program 3 times [2022-12-14 12:10:51,998 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:10:51,999 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1262927200] [2022-12-14 12:10:51,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:10:51,999 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:10:52,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:10:52,653 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 4 proven. 43 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:10:52,653 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:10:52,653 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1262927200] [2022-12-14 12:10:52,653 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1262927200] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:10:52,653 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [693533603] [2022-12-14 12:10:52,653 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 12:10:52,653 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:10:52,653 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:10:52,654 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:10:52,655 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-12-14 12:10:52,786 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 12:10:52,787 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:10:52,789 INFO L263 TraceCheckSpWp]: Trace formula consists of 297 conjuncts, 73 conjunts are in the unsatisfiable core [2022-12-14 12:10:52,791 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:10:52,796 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:52,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 12:10:52,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:10:53,550 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 0 proven. 47 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:10:53,550 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:10:54,318 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 0 proven. 47 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:10:54,318 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [693533603] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:10:54,318 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [849016583] [2022-12-14 12:10:54,319 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 12:10:54,319 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:10:54,319 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:10:54,319 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:10:54,319 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:10:54,341 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:54,345 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:10:54,346 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:10:54,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:54,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:54,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:54,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:54,488 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:54,504 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:10:54,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:10:54,572 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:10:54,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:10:54,683 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:10:54,683 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:10:54,753 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:10:54,753 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:10:54,820 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:10:54,820 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:10:54,878 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:10:57,455 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24805#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:10:57,455 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:10:57,455 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:10:57,455 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 17, 18] total 52 [2022-12-14 12:10:57,456 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1118484780] [2022-12-14 12:10:57,456 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:10:57,456 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 53 states [2022-12-14 12:10:57,456 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:10:57,457 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 53 interpolants. [2022-12-14 12:10:57,457 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=277, Invalid=4145, Unknown=0, NotChecked=0, Total=4422 [2022-12-14 12:10:57,457 INFO L87 Difference]: Start difference. First operand 603 states and 687 transitions. Second operand has 53 states, 52 states have (on average 2.269230769230769) internal successors, (118), 53 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:11:18,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:11:18,564 INFO L93 Difference]: Finished difference Result 1969 states and 2155 transitions. [2022-12-14 12:11:18,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 202 states. [2022-12-14 12:11:18,564 INFO L78 Accepts]: Start accepts. Automaton has has 53 states, 52 states have (on average 2.269230769230769) internal successors, (118), 53 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-12-14 12:11:18,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:11:18,567 INFO L225 Difference]: With dead ends: 1969 [2022-12-14 12:11:18,567 INFO L226 Difference]: Without dead ends: 1965 [2022-12-14 12:11:18,569 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 334 GetRequests, 78 SyntacticMatches, 0 SemanticMatches, 256 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 25398 ImplicationChecksByTransitivity, 23.7s TimeCoverageRelationStatistics Valid=8954, Invalid=57352, Unknown=0, NotChecked=0, Total=66306 [2022-12-14 12:11:18,569 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 3218 mSDsluCounter, 378 mSDsCounter, 0 mSdLazyCounter, 2006 mSolverCounterSat, 210 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3218 SdHoareTripleChecker+Valid, 395 SdHoareTripleChecker+Invalid, 2216 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 210 IncrementalHoareTripleChecker+Valid, 2006 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-12-14 12:11:18,570 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3218 Valid, 395 Invalid, 2216 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [210 Valid, 2006 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-12-14 12:11:18,570 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1965 states. [2022-12-14 12:11:18,581 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1965 to 641. [2022-12-14 12:11:18,581 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 641 states, 637 states have (on average 1.139717425431711) internal successors, (726), 640 states have internal predecessors, (726), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:11:18,582 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 641 states to 641 states and 726 transitions. [2022-12-14 12:11:18,582 INFO L78 Accepts]: Start accepts. Automaton has 641 states and 726 transitions. Word has length 42 [2022-12-14 12:11:18,583 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:11:18,583 INFO L495 AbstractCegarLoop]: Abstraction has 641 states and 726 transitions. [2022-12-14 12:11:18,583 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 53 states, 52 states have (on average 2.269230769230769) internal successors, (118), 53 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:11:18,583 INFO L276 IsEmpty]: Start isEmpty. Operand 641 states and 726 transitions. [2022-12-14 12:11:18,584 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-12-14 12:11:18,584 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:11:18,584 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:11:18,589 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Ended with exit code 0 [2022-12-14 12:11:18,785 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-12-14 12:11:18,785 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:11:18,786 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:11:18,786 INFO L85 PathProgramCache]: Analyzing trace with hash -475349428, now seen corresponding path program 2 times [2022-12-14 12:11:18,786 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:11:18,787 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1180027297] [2022-12-14 12:11:18,787 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:11:18,787 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:11:18,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:11:19,474 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 8 proven. 41 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:11:19,474 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:11:19,474 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1180027297] [2022-12-14 12:11:19,474 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1180027297] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:11:19,474 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1530360163] [2022-12-14 12:11:19,474 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:11:19,474 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:11:19,474 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:11:19,475 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:11:19,476 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-12-14 12:11:19,632 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 12:11:19,633 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:11:19,635 INFO L263 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 77 conjunts are in the unsatisfiable core [2022-12-14 12:11:19,637 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:11:19,686 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:11:19,686 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 12:11:19,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:11:20,713 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 0 proven. 49 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:11:20,713 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:11:21,638 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:11:21,698 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 16 proven. 33 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:11:21,698 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1530360163] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:11:21,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [392536786] [2022-12-14 12:11:21,699 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:11:21,699 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:11:21,699 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:11:21,699 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:11:21,699 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:11:21,732 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:11:21,735 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:11:21,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:11:21,768 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:11:21,799 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:11:21,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:11:21,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:11:21,881 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:11:21,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:11:21,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:11:21,975 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:11:21,975 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:11:22,086 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:11:22,086 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:11:22,152 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:11:22,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:11:22,217 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:11:22,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:11:22,250 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:11:24,784 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '28114#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:11:24,784 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:11:24,784 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:11:24,784 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 19] total 55 [2022-12-14 12:11:24,784 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1501994343] [2022-12-14 12:11:24,784 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:11:24,785 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 57 states [2022-12-14 12:11:24,785 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:11:24,785 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2022-12-14 12:11:24,786 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=475, Invalid=4637, Unknown=0, NotChecked=0, Total=5112 [2022-12-14 12:11:24,786 INFO L87 Difference]: Start difference. First operand 641 states and 726 transitions. Second operand has 57 states, 56 states have (on average 2.142857142857143) internal successors, (120), 56 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:11:28,650 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:11:28,650 INFO L93 Difference]: Finished difference Result 1021 states and 1114 transitions. [2022-12-14 12:11:28,650 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-12-14 12:11:28,650 INFO L78 Accepts]: Start accepts. Automaton has has 57 states, 56 states have (on average 2.142857142857143) internal successors, (120), 56 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-12-14 12:11:28,650 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:11:28,652 INFO L225 Difference]: With dead ends: 1021 [2022-12-14 12:11:28,652 INFO L226 Difference]: Without dead ends: 991 [2022-12-14 12:11:28,652 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 186 GetRequests, 71 SyntacticMatches, 1 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3988 ImplicationChecksByTransitivity, 7.2s TimeCoverageRelationStatistics Valid=1780, Invalid=11560, Unknown=0, NotChecked=0, Total=13340 [2022-12-14 12:11:28,652 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 804 mSDsluCounter, 250 mSDsCounter, 0 mSdLazyCounter, 1635 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 804 SdHoareTripleChecker+Valid, 264 SdHoareTripleChecker+Invalid, 1691 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 1635 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-12-14 12:11:28,653 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [804 Valid, 264 Invalid, 1691 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 1635 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-12-14 12:11:28,653 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 991 states. [2022-12-14 12:11:28,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 991 to 624. [2022-12-14 12:11:28,657 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 624 states, 620 states have (on average 1.1451612903225807) internal successors, (710), 623 states have internal predecessors, (710), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:11:28,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 624 states to 624 states and 710 transitions. [2022-12-14 12:11:28,658 INFO L78 Accepts]: Start accepts. Automaton has 624 states and 710 transitions. Word has length 42 [2022-12-14 12:11:28,658 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:11:28,658 INFO L495 AbstractCegarLoop]: Abstraction has 624 states and 710 transitions. [2022-12-14 12:11:28,658 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 57 states, 56 states have (on average 2.142857142857143) internal successors, (120), 56 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:11:28,658 INFO L276 IsEmpty]: Start isEmpty. Operand 624 states and 710 transitions. [2022-12-14 12:11:28,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-12-14 12:11:28,659 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:11:28,659 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:11:28,664 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2022-12-14 12:11:28,860 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable40 [2022-12-14 12:11:28,860 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:11:28,860 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:11:28,860 INFO L85 PathProgramCache]: Analyzing trace with hash -1048769434, now seen corresponding path program 8 times [2022-12-14 12:11:28,860 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:11:28,860 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [809143520] [2022-12-14 12:11:28,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:11:28,861 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:11:28,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:11:29,678 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 16 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:11:29,678 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:11:29,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [809143520] [2022-12-14 12:11:29,678 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [809143520] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:11:29,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [251509040] [2022-12-14 12:11:29,679 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:11:29,679 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:11:29,679 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:11:29,679 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:11:29,693 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-12-14 12:11:30,015 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 12:11:30,015 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:11:30,018 INFO L263 TraceCheckSpWp]: Trace formula consists of 324 conjuncts, 97 conjunts are in the unsatisfiable core [2022-12-14 12:11:30,021 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:11:30,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:11:30,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 12:11:30,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 12:11:30,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 12:11:30,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 12:11:30,671 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:11:30,672 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 15 [2022-12-14 12:11:30,821 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 6 proven. 53 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 12:11:30,821 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:11:35,719 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:11:35,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 12:11:35,726 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:11:35,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 34 [2022-12-14 12:11:35,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 12:11:35,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:11:36,135 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 4 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:11:36,135 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [251509040] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:11:36,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [624622394] [2022-12-14 12:11:36,136 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:11:36,136 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:11:36,136 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:11:36,136 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:11:36,136 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:11:36,160 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:11:36,163 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:11:36,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:11:36,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:11:36,230 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:11:36,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:11:36,284 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:11:36,319 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:11:36,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:11:36,365 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:11:36,415 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:11:36,415 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:11:36,503 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:11:36,506 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:11:36,542 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-12-14 12:11:36,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-12-14 12:11:36,644 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:11:36,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:11:36,710 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:11:36,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:11:36,734 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:11:39,373 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '30175#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:11:39,373 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:11:39,373 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:11:39,373 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 22, 18] total 61 [2022-12-14 12:11:39,373 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1651257297] [2022-12-14 12:11:39,373 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:11:39,373 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 61 states [2022-12-14 12:11:39,373 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:11:39,374 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 61 interpolants. [2022-12-14 12:11:39,374 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=347, Invalid=5199, Unknown=4, NotChecked=0, Total=5550 [2022-12-14 12:11:39,374 INFO L87 Difference]: Start difference. First operand 624 states and 710 transitions. Second operand has 61 states, 61 states have (on average 2.0163934426229506) internal successors, (123), 61 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:11:54,166 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0, 1] [2022-12-14 12:12:19,646 WARN L233 SmtUtils]: Spent 6.67s on a formula simplification. DAG size of input: 57 DAG size of output: 53 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 12:12:32,553 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2022-12-14 12:12:42,571 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:12:42,571 INFO L93 Difference]: Finished difference Result 944 states and 1014 transitions. [2022-12-14 12:12:42,571 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 107 states. [2022-12-14 12:12:42,571 INFO L78 Accepts]: Start accepts. Automaton has has 61 states, 61 states have (on average 2.0163934426229506) internal successors, (123), 61 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 43 [2022-12-14 12:12:42,571 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:12:42,572 INFO L225 Difference]: With dead ends: 944 [2022-12-14 12:12:42,572 INFO L226 Difference]: Without dead ends: 884 [2022-12-14 12:12:42,574 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 252 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 170 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7637 ImplicationChecksByTransitivity, 62.3s TimeCoverageRelationStatistics Valid=3983, Invalid=25397, Unknown=32, NotChecked=0, Total=29412 [2022-12-14 12:12:42,574 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 1212 mSDsluCounter, 314 mSDsCounter, 0 mSdLazyCounter, 1744 mSolverCounterSat, 169 mSolverCounterUnsat, 18 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1212 SdHoareTripleChecker+Valid, 327 SdHoareTripleChecker+Invalid, 1931 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 169 IncrementalHoareTripleChecker+Valid, 1744 IncrementalHoareTripleChecker+Invalid, 18 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.3s IncrementalHoareTripleChecker+Time [2022-12-14 12:12:42,574 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1212 Valid, 327 Invalid, 1931 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [169 Valid, 1744 Invalid, 18 Unknown, 0 Unchecked, 9.3s Time] [2022-12-14 12:12:42,574 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 884 states. [2022-12-14 12:12:42,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 884 to 683. [2022-12-14 12:12:42,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 683 states, 679 states have (on average 1.12960235640648) internal successors, (767), 682 states have internal predecessors, (767), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:12:42,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 683 states to 683 states and 767 transitions. [2022-12-14 12:12:42,579 INFO L78 Accepts]: Start accepts. Automaton has 683 states and 767 transitions. Word has length 43 [2022-12-14 12:12:42,579 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:12:42,579 INFO L495 AbstractCegarLoop]: Abstraction has 683 states and 767 transitions. [2022-12-14 12:12:42,579 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 61 states, 61 states have (on average 2.0163934426229506) internal successors, (123), 61 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:12:42,579 INFO L276 IsEmpty]: Start isEmpty. Operand 683 states and 767 transitions. [2022-12-14 12:12:42,580 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-12-14 12:12:42,580 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:12:42,580 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:12:42,585 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Ended with exit code 0 [2022-12-14 12:12:42,781 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:12:42,781 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:12:42,782 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:12:42,782 INFO L85 PathProgramCache]: Analyzing trace with hash -726448216, now seen corresponding path program 10 times [2022-12-14 12:12:42,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:12:42,783 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1858430732] [2022-12-14 12:12:42,783 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:12:42,783 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:12:42,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:12:43,697 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 49 proven. 132 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:12:43,697 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:12:43,697 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1858430732] [2022-12-14 12:12:43,697 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1858430732] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:12:43,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1851854878] [2022-12-14 12:12:43,698 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 12:12:43,698 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:12:43,698 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:12:43,699 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:12:43,699 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-12-14 12:12:43,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:12:43,825 INFO L263 TraceCheckSpWp]: Trace formula consists of 327 conjuncts, 87 conjunts are in the unsatisfiable core [2022-12-14 12:12:43,827 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:12:43,833 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:12:44,211 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:12:44,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 12:12:45,148 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-12-14 12:12:45,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-12-14 12:12:45,186 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 10 proven. 171 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:12:45,186 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:12:45,769 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:12:45,769 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-12-14 12:12:45,774 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:12:45,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-12-14 12:12:45,984 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 10 proven. 171 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:12:45,984 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1851854878] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:12:45,984 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1847798344] [2022-12-14 12:12:45,984 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:12:45,984 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:12:45,985 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:12:45,985 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:12:45,985 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:12:46,008 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:12:46,012 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:12:46,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:12:46,043 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:12:46,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:12:46,095 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:12:46,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:12:46,167 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:12:46,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:12:46,217 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:12:47,579 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '32337#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:12:47,579 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:12:47,580 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:12:47,580 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 26, 26] total 62 [2022-12-14 12:12:47,580 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [151973416] [2022-12-14 12:12:47,580 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:12:47,580 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-12-14 12:12:47,580 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:12:47,581 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-12-14 12:12:47,581 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=218, Invalid=4740, Unknown=12, NotChecked=0, Total=4970 [2022-12-14 12:12:47,581 INFO L87 Difference]: Start difference. First operand 683 states and 767 transitions. Second operand has 62 states, 62 states have (on average 1.8387096774193548) internal successors, (114), 62 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:12:56,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:12:56,372 INFO L93 Difference]: Finished difference Result 2047 states and 2226 transitions. [2022-12-14 12:12:56,372 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 59 states. [2022-12-14 12:12:56,372 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 62 states have (on average 1.8387096774193548) internal successors, (114), 62 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-12-14 12:12:56,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:12:56,375 INFO L225 Difference]: With dead ends: 2047 [2022-12-14 12:12:56,375 INFO L226 Difference]: Without dead ends: 1967 [2022-12-14 12:12:56,375 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 212 GetRequests, 85 SyntacticMatches, 2 SemanticMatches, 125 ConstructedPredicates, 0 IntricatePredicates, 10 DeprecatedPredicates, 3394 ImplicationChecksByTransitivity, 8.9s TimeCoverageRelationStatistics Valid=1237, Invalid=14753, Unknown=12, NotChecked=0, Total=16002 [2022-12-14 12:12:56,376 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 2365 mSDsluCounter, 2736 mSDsCounter, 0 mSdLazyCounter, 6307 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2365 SdHoareTripleChecker+Valid, 2817 SdHoareTripleChecker+Invalid, 6368 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 6307 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.5s IncrementalHoareTripleChecker+Time [2022-12-14 12:12:56,376 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2365 Valid, 2817 Invalid, 6368 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 6307 Invalid, 0 Unknown, 0 Unchecked, 3.5s Time] [2022-12-14 12:12:56,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1967 states. [2022-12-14 12:12:56,383 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1967 to 774. [2022-12-14 12:12:56,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 774 states, 770 states have (on average 1.12987012987013) internal successors, (870), 773 states have internal predecessors, (870), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:12:56,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 774 states to 774 states and 870 transitions. [2022-12-14 12:12:56,384 INFO L78 Accepts]: Start accepts. Automaton has 774 states and 870 transitions. Word has length 45 [2022-12-14 12:12:56,384 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:12:56,384 INFO L495 AbstractCegarLoop]: Abstraction has 774 states and 870 transitions. [2022-12-14 12:12:56,384 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 62 states have (on average 1.8387096774193548) internal successors, (114), 62 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:12:56,384 INFO L276 IsEmpty]: Start isEmpty. Operand 774 states and 870 transitions. [2022-12-14 12:12:56,385 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-12-14 12:12:56,385 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:12:56,385 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:12:56,390 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Ended with exit code 0 [2022-12-14 12:12:56,585 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-12-14 12:12:56,586 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:12:56,587 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:12:56,587 INFO L85 PathProgramCache]: Analyzing trace with hash 1946206714, now seen corresponding path program 3 times [2022-12-14 12:12:56,587 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:12:56,588 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [595250361] [2022-12-14 12:12:56,588 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:12:56,588 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:12:56,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:12:57,386 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 14 proven. 34 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:12:57,386 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:12:57,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [595250361] [2022-12-14 12:12:57,386 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [595250361] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:12:57,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1485197459] [2022-12-14 12:12:57,386 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 12:12:57,386 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:12:57,386 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:12:57,387 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:12:57,387 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-12-14 12:12:57,564 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 12:12:57,564 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:12:57,567 INFO L263 TraceCheckSpWp]: Trace formula consists of 331 conjuncts, 105 conjunts are in the unsatisfiable core [2022-12-14 12:12:57,569 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:12:57,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:12:57,612 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 12:12:59,261 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 4 proven. 44 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:12:59,261 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:13:00,852 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:13:00,923 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:13:00,924 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1485197459] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:13:00,924 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1661036780] [2022-12-14 12:13:00,925 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:13:00,925 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:13:00,925 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:13:00,925 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:13:00,925 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:13:00,951 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:13:00,954 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:13:00,954 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:13:00,985 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:13:01,018 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:13:01,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:13:01,072 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:13:01,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:13:01,128 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:13:01,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:13:01,203 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:13:01,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:13:01,314 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:13:01,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:13:01,381 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:13:01,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:13:01,443 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:13:01,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:13:01,474 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:13:04,462 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '35610#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:13:04,462 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:13:04,462 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:13:04,462 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 22, 24] total 65 [2022-12-14 12:13:04,462 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2111603641] [2022-12-14 12:13:04,462 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:13:04,462 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 67 states [2022-12-14 12:13:04,462 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:13:04,463 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 67 interpolants. [2022-12-14 12:13:04,463 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=691, Invalid=5951, Unknown=0, NotChecked=0, Total=6642 [2022-12-14 12:13:04,463 INFO L87 Difference]: Start difference. First operand 774 states and 870 transitions. Second operand has 67 states, 66 states have (on average 1.8636363636363635) internal successors, (123), 66 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:13:12,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:13:12,775 INFO L93 Difference]: Finished difference Result 1000 states and 1094 transitions. [2022-12-14 12:13:12,776 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2022-12-14 12:13:12,776 INFO L78 Accepts]: Start accepts. Automaton has has 67 states, 66 states have (on average 1.8636363636363635) internal successors, (123), 66 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-12-14 12:13:12,776 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:13:12,777 INFO L225 Difference]: With dead ends: 1000 [2022-12-14 12:13:12,777 INFO L226 Difference]: Without dead ends: 964 [2022-12-14 12:13:12,778 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 214 GetRequests, 70 SyntacticMatches, 2 SemanticMatches, 142 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6171 ImplicationChecksByTransitivity, 13.0s TimeCoverageRelationStatistics Valid=3490, Invalid=17102, Unknown=0, NotChecked=0, Total=20592 [2022-12-14 12:13:12,778 INFO L413 NwaCegarLoop]: 5 mSDtfsCounter, 948 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 1102 mSolverCounterSat, 79 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 948 SdHoareTripleChecker+Valid, 72 SdHoareTripleChecker+Invalid, 1181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 79 IncrementalHoareTripleChecker+Valid, 1102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-12-14 12:13:12,778 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [948 Valid, 72 Invalid, 1181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [79 Valid, 1102 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-12-14 12:13:12,779 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 964 states. [2022-12-14 12:13:12,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 964 to 698. [2022-12-14 12:13:12,782 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 698 states, 694 states have (on average 1.1397694524495676) internal successors, (791), 697 states have internal predecessors, (791), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:13:12,783 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 698 states to 698 states and 791 transitions. [2022-12-14 12:13:12,783 INFO L78 Accepts]: Start accepts. Automaton has 698 states and 791 transitions. Word has length 45 [2022-12-14 12:13:12,783 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:13:12,783 INFO L495 AbstractCegarLoop]: Abstraction has 698 states and 791 transitions. [2022-12-14 12:13:12,783 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 67 states, 66 states have (on average 1.8636363636363635) internal successors, (123), 66 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:13:12,783 INFO L276 IsEmpty]: Start isEmpty. Operand 698 states and 791 transitions. [2022-12-14 12:13:12,784 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-12-14 12:13:12,784 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:13:12,784 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:13:12,789 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2022-12-14 12:13:12,985 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable43,30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:13:12,985 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:13:12,986 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:13:12,986 INFO L85 PathProgramCache]: Analyzing trace with hash 241917092, now seen corresponding path program 4 times [2022-12-14 12:13:12,986 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:13:12,987 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1674842438] [2022-12-14 12:13:12,987 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:13:12,987 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:13:13,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:13:13,634 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 4 proven. 62 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:13:13,634 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:13:13,635 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1674842438] [2022-12-14 12:13:13,635 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1674842438] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:13:13,635 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1520303928] [2022-12-14 12:13:13,635 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 12:13:13,635 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:13:13,635 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:13:13,636 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:13:13,636 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-12-14 12:13:13,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:13:13,745 INFO L263 TraceCheckSpWp]: Trace formula consists of 321 conjuncts, 76 conjunts are in the unsatisfiable core [2022-12-14 12:13:13,747 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:13:13,756 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:13:13,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 12:13:13,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:13:14,549 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 0 proven. 66 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:13:14,549 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:13:15,636 INFO L134 CoverageAnalysis]: Checked inductivity of 70 backedges. 0 proven. 66 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:13:15,636 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1520303928] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:13:15,636 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [890804126] [2022-12-14 12:13:15,637 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 12:13:15,637 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:13:15,637 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:13:15,638 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:13:15,638 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:13:15,668 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:13:15,671 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:13:15,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:13:15,700 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:13:15,735 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:13:15,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:13:15,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:13:15,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:13:15,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:13:15,880 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:13:15,919 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:13:15,919 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:13:16,078 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:13:16,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:13:16,164 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:13:16,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:13:16,233 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:13:16,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:13:16,293 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:13:18,762 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '37777#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:13:18,762 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:13:18,762 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:13:18,762 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 20, 20] total 59 [2022-12-14 12:13:18,762 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1796819645] [2022-12-14 12:13:18,762 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:13:18,763 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 60 states [2022-12-14 12:13:18,763 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:13:18,763 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 60 interpolants. [2022-12-14 12:13:18,764 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=301, Invalid=4955, Unknown=0, NotChecked=0, Total=5256 [2022-12-14 12:13:18,764 INFO L87 Difference]: Start difference. First operand 698 states and 791 transitions. Second operand has 60 states, 59 states have (on average 2.2033898305084745) internal successors, (130), 60 states have internal predecessors, (130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:13:52,296 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:13:52,296 INFO L93 Difference]: Finished difference Result 2521 states and 2766 transitions. [2022-12-14 12:13:52,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 253 states. [2022-12-14 12:13:52,296 INFO L78 Accepts]: Start accepts. Automaton has has 60 states, 59 states have (on average 2.2033898305084745) internal successors, (130), 60 states have internal predecessors, (130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 46 [2022-12-14 12:13:52,297 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:13:52,300 INFO L225 Difference]: With dead ends: 2521 [2022-12-14 12:13:52,300 INFO L226 Difference]: Without dead ends: 2491 [2022-12-14 12:13:52,303 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 403 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 317 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 36609 ImplicationChecksByTransitivity, 35.7s TimeCoverageRelationStatistics Valid=13048, Invalid=88394, Unknown=0, NotChecked=0, Total=101442 [2022-12-14 12:13:52,304 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 3290 mSDsluCounter, 594 mSDsCounter, 0 mSdLazyCounter, 3046 mSolverCounterSat, 251 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3290 SdHoareTripleChecker+Valid, 613 SdHoareTripleChecker+Invalid, 3297 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 251 IncrementalHoareTripleChecker+Valid, 3046 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-12-14 12:13:52,304 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3290 Valid, 613 Invalid, 3297 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [251 Valid, 3046 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-12-14 12:13:52,305 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2491 states. [2022-12-14 12:13:52,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2491 to 683. [2022-12-14 12:13:52,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 683 states, 679 states have (on average 1.1413843888070692) internal successors, (775), 682 states have internal predecessors, (775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:13:52,312 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 683 states to 683 states and 775 transitions. [2022-12-14 12:13:52,312 INFO L78 Accepts]: Start accepts. Automaton has 683 states and 775 transitions. Word has length 46 [2022-12-14 12:13:52,313 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:13:52,313 INFO L495 AbstractCegarLoop]: Abstraction has 683 states and 775 transitions. [2022-12-14 12:13:52,313 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 60 states, 59 states have (on average 2.2033898305084745) internal successors, (130), 60 states have internal predecessors, (130), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:13:52,313 INFO L276 IsEmpty]: Start isEmpty. Operand 683 states and 775 transitions. [2022-12-14 12:13:52,313 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-14 12:13:52,313 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:13:52,313 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 10, 10, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:13:52,318 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Ended with exit code 0 [2022-12-14 12:13:52,514 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable44 [2022-12-14 12:13:52,515 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:13:52,515 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:13:52,515 INFO L85 PathProgramCache]: Analyzing trace with hash -1761596900, now seen corresponding path program 11 times [2022-12-14 12:13:52,516 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:13:52,516 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1680912161] [2022-12-14 12:13:52,516 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:13:52,516 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:13:52,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:13:53,702 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 64 proven. 157 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:13:53,702 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:13:53,703 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1680912161] [2022-12-14 12:13:53,703 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1680912161] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:13:53,703 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [19392906] [2022-12-14 12:13:53,703 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:13:53,703 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:13:53,703 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:13:53,704 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:13:53,704 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-12-14 12:13:53,921 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 12 check-sat command(s) [2022-12-14 12:13:53,922 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:13:53,924 INFO L263 TraceCheckSpWp]: Trace formula consists of 351 conjuncts, 91 conjunts are in the unsatisfiable core [2022-12-14 12:13:53,926 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:13:53,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:13:54,303 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:13:54,369 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 12:13:55,385 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-12-14 12:13:55,386 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-12-14 12:13:55,440 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 11 proven. 210 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:13:55,440 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:13:56,250 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:13:56,250 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-12-14 12:13:56,255 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:13:56,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-12-14 12:13:56,523 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 11 proven. 210 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:13:56,523 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [19392906] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:13:56,523 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [970746400] [2022-12-14 12:13:56,524 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:13:56,524 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:13:56,524 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:13:56,524 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:13:56,524 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:13:56,551 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:13:56,555 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:13:56,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:13:56,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:13:56,617 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:13:56,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:13:56,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:13:56,709 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:13:56,709 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:13:56,776 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:13:58,838 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '41841#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:13:58,838 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:13:58,838 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:13:58,838 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 28, 28] total 67 [2022-12-14 12:13:58,838 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1206904203] [2022-12-14 12:13:58,838 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:13:58,838 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 67 states [2022-12-14 12:13:58,839 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:13:58,839 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 67 interpolants. [2022-12-14 12:13:58,839 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=238, Invalid=5443, Unknown=19, NotChecked=0, Total=5700 [2022-12-14 12:13:58,839 INFO L87 Difference]: Start difference. First operand 683 states and 775 transitions. Second operand has 67 states, 67 states have (on average 1.8507462686567164) internal successors, (124), 67 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:14:08,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:14:08,166 INFO L93 Difference]: Finished difference Result 2250 states and 2455 transitions. [2022-12-14 12:14:08,166 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2022-12-14 12:14:08,166 INFO L78 Accepts]: Start accepts. Automaton has has 67 states, 67 states have (on average 1.8507462686567164) internal successors, (124), 67 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-12-14 12:14:08,167 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:14:08,171 INFO L225 Difference]: With dead ends: 2250 [2022-12-14 12:14:08,171 INFO L226 Difference]: Without dead ends: 2166 [2022-12-14 12:14:08,172 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 231 GetRequests, 94 SyntacticMatches, 2 SemanticMatches, 135 ConstructedPredicates, 0 IntricatePredicates, 11 DeprecatedPredicates, 3983 ImplicationChecksByTransitivity, 10.1s TimeCoverageRelationStatistics Valid=1395, Invalid=17218, Unknown=19, NotChecked=0, Total=18632 [2022-12-14 12:14:08,172 INFO L413 NwaCegarLoop]: 84 mSDtfsCounter, 2404 mSDsluCounter, 3190 mSDsCounter, 0 mSdLazyCounter, 7359 mSolverCounterSat, 67 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2404 SdHoareTripleChecker+Valid, 3274 SdHoareTripleChecker+Invalid, 7426 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 67 IncrementalHoareTripleChecker+Valid, 7359 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:14:08,172 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2404 Valid, 3274 Invalid, 7426 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [67 Valid, 7359 Invalid, 0 Unknown, 0 Unchecked, 4.0s Time] [2022-12-14 12:14:08,173 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2166 states. [2022-12-14 12:14:08,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2166 to 774. [2022-12-14 12:14:08,179 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 774 states, 770 states have (on average 1.1402597402597403) internal successors, (878), 773 states have internal predecessors, (878), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:14:08,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 774 states to 774 states and 878 transitions. [2022-12-14 12:14:08,180 INFO L78 Accepts]: Start accepts. Automaton has 774 states and 878 transitions. Word has length 49 [2022-12-14 12:14:08,180 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:14:08,180 INFO L495 AbstractCegarLoop]: Abstraction has 774 states and 878 transitions. [2022-12-14 12:14:08,180 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 67 states, 67 states have (on average 1.8507462686567164) internal successors, (124), 67 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:14:08,180 INFO L276 IsEmpty]: Start isEmpty. Operand 774 states and 878 transitions. [2022-12-14 12:14:08,181 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-14 12:14:08,181 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:14:08,181 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:14:08,186 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Ended with exit code 0 [2022-12-14 12:14:08,381 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable45,32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:14:08,382 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:14:08,383 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:14:08,383 INFO L85 PathProgramCache]: Analyzing trace with hash 1222105648, now seen corresponding path program 5 times [2022-12-14 12:14:08,383 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:14:08,383 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [24930429] [2022-12-14 12:14:08,384 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:14:08,384 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:14:08,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:14:09,180 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 4 proven. 85 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:14:09,180 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:14:09,180 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [24930429] [2022-12-14 12:14:09,180 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [24930429] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:14:09,180 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [176813552] [2022-12-14 12:14:09,180 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:14:09,180 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:14:09,180 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:14:09,181 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:14:09,182 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-12-14 12:14:09,555 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-12-14 12:14:09,555 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:14:09,558 INFO L263 TraceCheckSpWp]: Trace formula consists of 345 conjuncts, 70 conjunts are in the unsatisfiable core [2022-12-14 12:14:09,560 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:14:09,612 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:14:09,613 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 12:14:09,616 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:14:10,831 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 25 proven. 64 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:14:10,831 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:14:11,932 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:14:11,988 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 36 proven. 53 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:14:11,988 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [176813552] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:14:11,989 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1801995903] [2022-12-14 12:14:11,989 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 12:14:11,989 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:14:11,990 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:14:11,990 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:14:11,990 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:14:12,019 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:14:12,022 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:14:12,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:14:12,050 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:14:12,089 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:14:12,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:14:12,143 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:14:12,170 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:14:12,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:14:12,218 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:14:12,265 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:14:12,265 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:14:12,380 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:14:12,380 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:14:12,458 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:14:12,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:14:12,528 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:14:12,528 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:14:12,593 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:14:15,546 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '45354#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:14:15,546 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:14:15,546 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:14:15,547 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 20, 20] total 63 [2022-12-14 12:14:15,547 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [173772637] [2022-12-14 12:14:15,547 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:14:15,547 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 64 states [2022-12-14 12:14:15,547 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:14:15,547 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 64 interpolants. [2022-12-14 12:14:15,548 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=405, Invalid=5601, Unknown=0, NotChecked=0, Total=6006 [2022-12-14 12:14:15,548 INFO L87 Difference]: Start difference. First operand 774 states and 878 transitions. Second operand has 64 states, 63 states have (on average 2.2857142857142856) internal successors, (144), 64 states have internal predecessors, (144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:15:01,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:15:01,493 INFO L93 Difference]: Finished difference Result 1685 states and 1827 transitions. [2022-12-14 12:15:01,493 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 252 states. [2022-12-14 12:15:01,493 INFO L78 Accepts]: Start accepts. Automaton has has 64 states, 63 states have (on average 2.2857142857142856) internal successors, (144), 64 states have internal predecessors, (144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-12-14 12:15:01,494 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:15:01,499 INFO L225 Difference]: With dead ends: 1685 [2022-12-14 12:15:01,499 INFO L226 Difference]: Without dead ends: 1667 [2022-12-14 12:15:01,503 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 420 GetRequests, 95 SyntacticMatches, 0 SemanticMatches, 325 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34435 ImplicationChecksByTransitivity, 47.9s TimeCoverageRelationStatistics Valid=20099, Invalid=86503, Unknown=0, NotChecked=0, Total=106602 [2022-12-14 12:15:01,504 INFO L413 NwaCegarLoop]: 27 mSDtfsCounter, 1979 mSDsluCounter, 493 mSDsCounter, 0 mSdLazyCounter, 4275 mSolverCounterSat, 192 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1979 SdHoareTripleChecker+Valid, 520 SdHoareTripleChecker+Invalid, 4467 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 192 IncrementalHoareTripleChecker+Valid, 4275 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.7s IncrementalHoareTripleChecker+Time [2022-12-14 12:15:01,504 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1979 Valid, 520 Invalid, 4467 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [192 Valid, 4275 Invalid, 0 Unknown, 0 Unchecked, 2.7s Time] [2022-12-14 12:15:01,505 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1667 states. [2022-12-14 12:15:01,512 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1667 to 793. [2022-12-14 12:15:01,512 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 793 states, 789 states have (on average 1.144486692015209) internal successors, (903), 792 states have internal predecessors, (903), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:15:01,513 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 793 states to 793 states and 903 transitions. [2022-12-14 12:15:01,513 INFO L78 Accepts]: Start accepts. Automaton has 793 states and 903 transitions. Word has length 50 [2022-12-14 12:15:01,513 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:15:01,513 INFO L495 AbstractCegarLoop]: Abstraction has 793 states and 903 transitions. [2022-12-14 12:15:01,513 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 64 states, 63 states have (on average 2.2857142857142856) internal successors, (144), 64 states have internal predecessors, (144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:15:01,513 INFO L276 IsEmpty]: Start isEmpty. Operand 793 states and 903 transitions. [2022-12-14 12:15:01,514 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-14 12:15:01,514 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:15:01,514 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:15:01,519 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Forceful destruction successful, exit code 0 [2022-12-14 12:15:01,715 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable46,33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:15:01,715 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:15:01,716 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:15:01,716 INFO L85 PathProgramCache]: Analyzing trace with hash 1222096612, now seen corresponding path program 4 times [2022-12-14 12:15:01,717 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:15:01,717 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1436265137] [2022-12-14 12:15:01,717 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:15:01,718 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:15:01,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:15:02,618 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 20 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:15:02,619 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:15:02,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1436265137] [2022-12-14 12:15:02,619 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1436265137] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:15:02,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [594056099] [2022-12-14 12:15:02,619 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 12:15:02,619 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:15:02,619 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:15:02,620 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:15:02,621 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-12-14 12:15:02,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:15:02,740 INFO L263 TraceCheckSpWp]: Trace formula consists of 358 conjuncts, 81 conjunts are in the unsatisfiable core [2022-12-14 12:15:02,742 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:15:02,778 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:15:02,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 12:15:02,781 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:15:04,061 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 0 proven. 91 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:15:04,062 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:15:05,863 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:15:05,936 INFO L134 CoverageAnalysis]: Checked inductivity of 95 backedges. 0 proven. 91 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:15:05,936 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [594056099] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:15:05,936 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1398153205] [2022-12-14 12:15:05,937 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:15:05,937 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:15:05,937 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:15:05,937 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:15:05,937 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:15:05,960 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:15:05,964 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:15:05,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:15:05,991 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:15:06,022 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:06,040 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:06,082 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:15:06,112 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:06,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:06,159 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:15:06,215 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:15:06,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:15:06,346 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:15:06,346 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:15:06,438 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:15:06,438 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:15:06,499 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:15:06,499 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:15:06,529 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:15:09,619 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '48710#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:15:09,619 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:15:09,619 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:15:09,619 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 24, 24] total 70 [2022-12-14 12:15:09,619 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1923282252] [2022-12-14 12:15:09,619 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:15:09,620 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 72 states [2022-12-14 12:15:09,620 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:15:09,620 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 72 interpolants. [2022-12-14 12:15:09,620 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=469, Invalid=6841, Unknown=0, NotChecked=0, Total=7310 [2022-12-14 12:15:09,620 INFO L87 Difference]: Start difference. First operand 793 states and 903 transitions. Second operand has 72 states, 71 states have (on average 2.028169014084507) internal successors, (144), 71 states have internal predecessors, (144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:15:22,767 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:15:22,767 INFO L93 Difference]: Finished difference Result 1429 states and 1550 transitions. [2022-12-14 12:15:22,767 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 94 states. [2022-12-14 12:15:22,767 INFO L78 Accepts]: Start accepts. Automaton has has 72 states, 71 states have (on average 2.028169014084507) internal successors, (144), 71 states have internal predecessors, (144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-12-14 12:15:22,767 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:15:22,769 INFO L225 Difference]: With dead ends: 1429 [2022-12-14 12:15:22,769 INFO L226 Difference]: Without dead ends: 1397 [2022-12-14 12:15:22,770 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 262 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 176 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7660 ImplicationChecksByTransitivity, 16.6s TimeCoverageRelationStatistics Valid=4152, Invalid=27354, Unknown=0, NotChecked=0, Total=31506 [2022-12-14 12:15:22,770 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 2527 mSDsluCounter, 967 mSDsCounter, 0 mSdLazyCounter, 4674 mSolverCounterSat, 123 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2527 SdHoareTripleChecker+Valid, 999 SdHoareTripleChecker+Invalid, 4797 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 123 IncrementalHoareTripleChecker+Valid, 4674 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-12-14 12:15:22,770 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2527 Valid, 999 Invalid, 4797 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [123 Valid, 4674 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-12-14 12:15:22,771 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1397 states. [2022-12-14 12:15:22,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1397 to 791. [2022-12-14 12:15:22,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 791 states, 787 states have (on average 1.1435832274459974) internal successors, (900), 790 states have internal predecessors, (900), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:15:22,780 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 791 states to 791 states and 900 transitions. [2022-12-14 12:15:22,780 INFO L78 Accepts]: Start accepts. Automaton has 791 states and 900 transitions. Word has length 50 [2022-12-14 12:15:22,780 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:15:22,780 INFO L495 AbstractCegarLoop]: Abstraction has 791 states and 900 transitions. [2022-12-14 12:15:22,781 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 72 states, 71 states have (on average 2.028169014084507) internal successors, (144), 71 states have internal predecessors, (144), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:15:22,781 INFO L276 IsEmpty]: Start isEmpty. Operand 791 states and 900 transitions. [2022-12-14 12:15:22,781 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-14 12:15:22,781 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:15:22,781 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:15:22,786 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Ended with exit code 0 [2022-12-14 12:15:22,982 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-12-14 12:15:22,983 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:15:22,984 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:15:22,984 INFO L85 PathProgramCache]: Analyzing trace with hash -285805065, now seen corresponding path program 9 times [2022-12-14 12:15:22,984 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:15:22,985 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1460190601] [2022-12-14 12:15:22,985 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:15:22,985 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:15:23,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:15:23,659 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 0 proven. 74 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 12:15:23,659 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:15:23,659 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1460190601] [2022-12-14 12:15:23,659 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1460190601] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:15:23,659 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1648548392] [2022-12-14 12:15:23,659 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 12:15:23,659 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:15:23,660 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:15:23,660 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:15:23,661 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-12-14 12:15:23,899 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 12:15:23,899 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:15:23,902 INFO L263 TraceCheckSpWp]: Trace formula consists of 369 conjuncts, 90 conjunts are in the unsatisfiable core [2022-12-14 12:15:23,904 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:15:24,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 12:15:24,403 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-12-14 12:15:24,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 48 treesize of output 56 [2022-12-14 12:15:24,413 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:15:24,414 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:15:24,414 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 34 treesize of output 20 [2022-12-14 12:15:24,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-12-14 12:15:24,750 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-12-14 12:15:24,875 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:15:24,877 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:15:24,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-12-14 12:15:24,941 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 32 proven. 39 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2022-12-14 12:15:24,941 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:15:25,017 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1644 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1644) |c_ULTIMATE.start_cstrncat_~s2#1.base|) |c_ULTIMATE.start_cstrncat_~s2#1.offset|) 0)) is different from false [2022-12-14 12:15:25,092 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1644 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1644) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrncat_~s2#1.offset|)) 0)) is different from false [2022-12-14 12:15:25,546 INFO L321 Elim1Store]: treesize reduction 16, result has 66.7 percent of original size [2022-12-14 12:15:25,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 71 treesize of output 87 [2022-12-14 12:15:25,558 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:15:25,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 49 treesize of output 51 [2022-12-14 12:15:25,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:15:25,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 4 [2022-12-14 12:15:25,610 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:15:25,610 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 45 treesize of output 55 [2022-12-14 12:15:26,072 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 37 proven. 22 refuted. 0 times theorem prover too weak. 19 trivial. 12 not checked. [2022-12-14 12:15:26,073 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1648548392] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:15:26,073 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [778065241] [2022-12-14 12:15:26,073 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:15:26,073 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:15:26,074 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:15:26,074 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:15:26,074 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:15:26,100 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:15:26,103 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:15:26,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:15:26,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:26,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:26,175 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:26,208 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:15:26,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:26,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:26,282 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:15:26,326 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:15:26,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:15:26,410 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:15:26,413 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:15:26,459 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-12-14 12:15:26,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-12-14 12:15:26,563 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:15:26,563 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:15:26,616 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:15:26,617 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:15:26,642 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:15:29,432 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '51478#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:15:29,432 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:15:29,432 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:15:29,432 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 22, 22] total 56 [2022-12-14 12:15:29,432 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [482819361] [2022-12-14 12:15:29,432 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:15:29,432 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 56 states [2022-12-14 12:15:29,433 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:15:29,433 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2022-12-14 12:15:29,433 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=265, Invalid=4254, Unknown=45, NotChecked=266, Total=4830 [2022-12-14 12:15:29,433 INFO L87 Difference]: Start difference. First operand 791 states and 900 transitions. Second operand has 56 states, 56 states have (on average 2.107142857142857) internal successors, (118), 56 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:15:31,069 WARN L837 $PredicateComparison]: unable to prove that (let ((.cse11 (div |c_ULTIMATE.start_main_~length2~0#1| 4294967296))) (let ((.cse8 (select |c_#length| |c_ULTIMATE.start_main_~nondetString2~0#1.base|)) (.cse9 (* .cse11 4294967296)) (.cse1 (<= (+ .cse11 1) 0))) (let ((.cse7 (forall ((v_ArrVal_1644 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1644) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrncat_~s2#1.offset|)) 0))) (.cse10 (not .cse1)) (.cse0 (+ .cse8 .cse9))) (and (= 0 |c_ULTIMATE.start_main_~nondetString2~0#1.offset|) (or (<= .cse0 |c_ULTIMATE.start_main_~length2~0#1|) .cse1) (let ((.cse3 (= |c_ULTIMATE.start_cstrncat_~s2#1.base| |c_ULTIMATE.start_cstrncat_~s~0#1.base|)) (.cse2 (not |c_ULTIMATE.start_cstrncat_#t~short6#1|))) (or (and .cse2 .cse3) (let ((.cse4 (select |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s2#1.base|))) (and (not .cse3) (exists ((|ULTIMATE.start_main_~length2~0#1| Int)) (and (= (select .cse4 (+ (- 1) |ULTIMATE.start_main_~length2~0#1|)) 0) (<= |ULTIMATE.start_main_~length2~0#1| 4) (< 3 |ULTIMATE.start_main_~length2~0#1|))) (let ((.cse5 (= (select .cse4 (+ (- 1) |c_ULTIMATE.start_cstrncat_~s2#1.offset|)) 0))) (or (and |c_ULTIMATE.start_cstrncat_#t~short6#1| (not .cse5)) (and .cse2 .cse5))))))) (let ((.cse6 (+ |c_ULTIMATE.start_cstrncat_#t~post4#1.offset| (select |c_#length| |c_ULTIMATE.start_cstrncat_~s2#1.base|)))) (or (and (<= (+ |c_ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) |c_ULTIMATE.start_cstrncat_~s2#1.offset|) (<= (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 4294967299) .cse6)) (<= .cse6 (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 3)))) (or .cse7 (= (select (select |c_#memory_int| |c_ULTIMATE.start_cstrncat_#t~post4#1.base|) |c_ULTIMATE.start_cstrncat_#t~post4#1.offset|) 0)) (or (<= .cse0 4) .cse1) (< 3 |c_ULTIMATE.start_main_~length2~0#1|) (= |c_ULTIMATE.start_cstrncat_~s2#1.offset| 1) (or .cse1 (<= (+ |c_ULTIMATE.start_main_~i~1#1| .cse8 .cse9) (+ |c_ULTIMATE.start_main_~length2~0#1| 3))) (<= |c_ULTIMATE.start_main_~length2~0#1| 4) (= |c_ULTIMATE.start_cstrncat_#t~post4#1.offset| 0) (= |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |c_ULTIMATE.start_main_~i~1#1| 3) (or .cse7 (= |c_ULTIMATE.start_cstrncat_#t~mem5#1| 0)) (or .cse10 (<= 4 .cse0)) (or .cse10 (<= |c_ULTIMATE.start_main_~length2~0#1| .cse0)))))) is different from false [2022-12-14 12:15:34,662 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:15:34,662 INFO L93 Difference]: Finished difference Result 1575 states and 1747 transitions. [2022-12-14 12:15:34,662 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-12-14 12:15:34,662 INFO L78 Accepts]: Start accepts. Automaton has has 56 states, 56 states have (on average 2.107142857142857) internal successors, (118), 56 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-12-14 12:15:34,662 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:15:34,664 INFO L225 Difference]: With dead ends: 1575 [2022-12-14 12:15:34,664 INFO L226 Difference]: Without dead ends: 1435 [2022-12-14 12:15:34,665 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 219 GetRequests, 98 SyntacticMatches, 0 SemanticMatches, 121 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 2901 ImplicationChecksByTransitivity, 8.4s TimeCoverageRelationStatistics Valid=1076, Invalid=13169, Unknown=47, NotChecked=714, Total=15006 [2022-12-14 12:15:34,665 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 719 mSDsluCounter, 828 mSDsCounter, 0 mSdLazyCounter, 2725 mSolverCounterSat, 25 mSolverCounterUnsat, 27 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 719 SdHoareTripleChecker+Valid, 868 SdHoareTripleChecker+Invalid, 3010 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 2725 IncrementalHoareTripleChecker+Invalid, 27 IncrementalHoareTripleChecker+Unknown, 233 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-12-14 12:15:34,665 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [719 Valid, 868 Invalid, 3010 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 2725 Invalid, 27 Unknown, 233 Unchecked, 1.4s Time] [2022-12-14 12:15:34,666 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1435 states. [2022-12-14 12:15:34,675 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1435 to 1053. [2022-12-14 12:15:34,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1053 states, 1049 states have (on average 1.1677788369876072) internal successors, (1225), 1052 states have internal predecessors, (1225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:15:34,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1053 states to 1053 states and 1225 transitions. [2022-12-14 12:15:34,678 INFO L78 Accepts]: Start accepts. Automaton has 1053 states and 1225 transitions. Word has length 50 [2022-12-14 12:15:34,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:15:34,678 INFO L495 AbstractCegarLoop]: Abstraction has 1053 states and 1225 transitions. [2022-12-14 12:15:34,678 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 56 states, 56 states have (on average 2.107142857142857) internal successors, (118), 56 states have internal predecessors, (118), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:15:34,678 INFO L276 IsEmpty]: Start isEmpty. Operand 1053 states and 1225 transitions. [2022-12-14 12:15:34,679 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-12-14 12:15:34,679 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:15:34,679 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:15:34,685 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Forceful destruction successful, exit code 0 [2022-12-14 12:15:34,880 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-12-14 12:15:34,880 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:15:34,880 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:15:34,880 INFO L85 PathProgramCache]: Analyzing trace with hash -1361177529, now seen corresponding path program 10 times [2022-12-14 12:15:34,880 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:15:34,880 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1224175609] [2022-12-14 12:15:34,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:15:34,880 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:15:34,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:15:35,990 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 28 proven. 69 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:15:35,990 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:15:35,990 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1224175609] [2022-12-14 12:15:35,990 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1224175609] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:15:35,990 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2006295884] [2022-12-14 12:15:35,990 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 12:15:35,990 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:15:35,991 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:15:35,991 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:15:35,992 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-12-14 12:15:36,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:15:36,107 INFO L263 TraceCheckSpWp]: Trace formula consists of 382 conjuncts, 90 conjunts are in the unsatisfiable core [2022-12-14 12:15:36,110 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:15:36,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:15:36,472 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:36,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 12:15:36,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 12:15:36,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 12:15:36,606 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 12:15:36,611 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 12:15:36,614 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 24 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:15:36,614 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:15:36,621 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1722 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1722) |c_ULTIMATE.start_cstrncat_~s2#1.base|) |c_ULTIMATE.start_cstrncat_~s2#1.offset|) 0)) is different from false [2022-12-14 12:15:36,627 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1722 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1722) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 1)) 0)) is different from false [2022-12-14 12:15:36,702 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1722 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1722) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 3)) 0)) is different from false [2022-12-14 12:15:36,711 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1722 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1722) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 4)) 0)) is different from false [2022-12-14 12:15:36,718 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:15:36,718 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 12:15:36,722 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:15:36,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 12:15:37,131 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 31 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 43 not checked. [2022-12-14 12:15:37,131 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2006295884] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:15:37,131 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [708925817] [2022-12-14 12:15:37,132 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:15:37,132 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:15:37,132 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:15:37,132 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:15:37,132 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:15:37,156 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:15:37,162 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:15:37,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:15:37,193 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:15:37,223 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:37,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:37,272 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:15:37,297 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:37,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:37,342 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:15:37,381 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:15:37,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:15:37,483 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:15:37,486 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:15:37,528 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-12-14 12:15:37,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-12-14 12:15:37,626 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:15:37,626 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:15:37,688 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:15:37,688 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:15:37,710 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:15:39,961 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '54589#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:15:39,962 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:15:39,962 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:15:39,962 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31, 21, 21] total 56 [2022-12-14 12:15:39,962 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1792970790] [2022-12-14 12:15:39,962 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:15:39,962 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 56 states [2022-12-14 12:15:39,962 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:15:39,963 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2022-12-14 12:15:39,963 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=308, Invalid=3979, Unknown=19, NotChecked=524, Total=4830 [2022-12-14 12:15:39,963 INFO L87 Difference]: Start difference. First operand 1053 states and 1225 transitions. Second operand has 56 states, 56 states have (on average 2.232142857142857) internal successors, (125), 56 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:15:41,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:15:41,520 INFO L93 Difference]: Finished difference Result 1082 states and 1253 transitions. [2022-12-14 12:15:41,520 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-12-14 12:15:41,521 INFO L78 Accepts]: Start accepts. Automaton has has 56 states, 56 states have (on average 2.232142857142857) internal successors, (125), 56 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-12-14 12:15:41,521 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:15:41,525 INFO L225 Difference]: With dead ends: 1082 [2022-12-14 12:15:41,525 INFO L226 Difference]: Without dead ends: 1057 [2022-12-14 12:15:41,526 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 210 GetRequests, 119 SyntacticMatches, 6 SemanticMatches, 85 ConstructedPredicates, 4 IntricatePredicates, 0 DeprecatedPredicates, 1707 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=553, Invalid=6249, Unknown=20, NotChecked=660, Total=7482 [2022-12-14 12:15:41,526 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 86 mSDsluCounter, 284 mSDsCounter, 0 mSdLazyCounter, 1328 mSolverCounterSat, 11 mSolverCounterUnsat, 28 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 86 SdHoareTripleChecker+Valid, 297 SdHoareTripleChecker+Invalid, 1628 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 1328 IncrementalHoareTripleChecker+Invalid, 28 IncrementalHoareTripleChecker+Unknown, 261 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 12:15:41,526 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [86 Valid, 297 Invalid, 1628 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 1328 Invalid, 28 Unknown, 261 Unchecked, 0.6s Time] [2022-12-14 12:15:41,527 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1057 states. [2022-12-14 12:15:41,532 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1057 to 1053. [2022-12-14 12:15:41,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1053 states, 1049 states have (on average 1.1668255481410867) internal successors, (1224), 1052 states have internal predecessors, (1224), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:15:41,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1053 states to 1053 states and 1224 transitions. [2022-12-14 12:15:41,533 INFO L78 Accepts]: Start accepts. Automaton has 1053 states and 1224 transitions. Word has length 52 [2022-12-14 12:15:41,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:15:41,533 INFO L495 AbstractCegarLoop]: Abstraction has 1053 states and 1224 transitions. [2022-12-14 12:15:41,533 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 56 states, 56 states have (on average 2.232142857142857) internal successors, (125), 56 states have internal predecessors, (125), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:15:41,533 INFO L276 IsEmpty]: Start isEmpty. Operand 1053 states and 1224 transitions. [2022-12-14 12:15:41,534 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-14 12:15:41,534 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:15:41,534 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 11, 11, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:15:41,539 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Forceful destruction successful, exit code 0 [2022-12-14 12:15:41,735 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable49,36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:15:41,735 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:15:41,736 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:15:41,736 INFO L85 PathProgramCache]: Analyzing trace with hash 1257617936, now seen corresponding path program 12 times [2022-12-14 12:15:41,737 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:15:41,737 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [671244132] [2022-12-14 12:15:41,737 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:15:41,737 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:15:41,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:15:42,777 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 81 proven. 184 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:15:42,778 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:15:42,778 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [671244132] [2022-12-14 12:15:42,778 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [671244132] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:15:42,778 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1963216620] [2022-12-14 12:15:42,778 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 12:15:42,778 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:15:42,778 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:15:42,779 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:15:42,779 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-12-14 12:15:42,965 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 12:15:42,965 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:15:42,968 INFO L263 TraceCheckSpWp]: Trace formula consists of 375 conjuncts, 106 conjunts are in the unsatisfiable core [2022-12-14 12:15:42,970 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:15:43,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:15:43,621 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:15:43,622 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 25 [2022-12-14 12:15:45,181 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:15:45,182 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:15:45,182 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:15:45,183 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:15:45,188 INFO L321 Elim1Store]: treesize reduction 4, result has 66.7 percent of original size [2022-12-14 12:15:45,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 1 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 37 treesize of output 21 [2022-12-14 12:15:45,242 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 12 proven. 253 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:15:45,242 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:15:46,179 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:15:46,179 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 93 treesize of output 83 [2022-12-14 12:15:47,624 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 14 proven. 251 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:15:47,624 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1963216620] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:15:47,624 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [75841440] [2022-12-14 12:15:47,624 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:15:47,624 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:15:47,625 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:15:47,625 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:15:47,625 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:15:47,649 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:15:47,651 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:15:47,651 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:15:47,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:47,713 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:47,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:15:47,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:15:47,819 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:15:47,819 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:15:47,882 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:15:50,067 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '57176#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:15:50,067 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:15:50,068 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:15:50,068 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 32, 32] total 88 [2022-12-14 12:15:50,068 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [149141386] [2022-12-14 12:15:50,068 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:15:50,068 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 88 states [2022-12-14 12:15:50,068 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:15:50,068 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 88 interpolants. [2022-12-14 12:15:50,069 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=305, Invalid=9007, Unknown=0, NotChecked=0, Total=9312 [2022-12-14 12:15:50,069 INFO L87 Difference]: Start difference. First operand 1053 states and 1224 transitions. Second operand has 88 states, 88 states have (on average 1.7727272727272727) internal successors, (156), 88 states have internal predecessors, (156), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:16:11,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:16:11,204 INFO L93 Difference]: Finished difference Result 3533 states and 3849 transitions. [2022-12-14 12:16:11,204 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 98 states. [2022-12-14 12:16:11,205 INFO L78 Accepts]: Start accepts. Automaton has has 88 states, 88 states have (on average 1.7727272727272727) internal successors, (156), 88 states have internal predecessors, (156), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-12-14 12:16:11,205 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:16:11,208 INFO L225 Difference]: With dead ends: 3533 [2022-12-14 12:16:11,208 INFO L226 Difference]: Without dead ends: 3445 [2022-12-14 12:16:11,214 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 279 GetRequests, 89 SyntacticMatches, 0 SemanticMatches, 190 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6812 ImplicationChecksByTransitivity, 21.6s TimeCoverageRelationStatistics Valid=2602, Invalid=34070, Unknown=0, NotChecked=0, Total=36672 [2022-12-14 12:16:11,214 INFO L413 NwaCegarLoop]: 91 mSDtfsCounter, 3036 mSDsluCounter, 4982 mSDsCounter, 0 mSdLazyCounter, 11884 mSolverCounterSat, 74 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3036 SdHoareTripleChecker+Valid, 5073 SdHoareTripleChecker+Invalid, 11958 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 74 IncrementalHoareTripleChecker+Valid, 11884 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:16:11,214 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3036 Valid, 5073 Invalid, 11958 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [74 Valid, 11884 Invalid, 0 Unknown, 0 Unchecked, 6.0s Time] [2022-12-14 12:16:11,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3445 states. [2022-12-14 12:16:11,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3445 to 1180. [2022-12-14 12:16:11,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1180 states, 1176 states have (on average 1.1683673469387754) internal successors, (1374), 1179 states have internal predecessors, (1374), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:16:11,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1180 states to 1180 states and 1374 transitions. [2022-12-14 12:16:11,231 INFO L78 Accepts]: Start accepts. Automaton has 1180 states and 1374 transitions. Word has length 53 [2022-12-14 12:16:11,231 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:16:11,231 INFO L495 AbstractCegarLoop]: Abstraction has 1180 states and 1374 transitions. [2022-12-14 12:16:11,231 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 88 states, 88 states have (on average 1.7727272727272727) internal successors, (156), 88 states have internal predecessors, (156), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:16:11,231 INFO L276 IsEmpty]: Start isEmpty. Operand 1180 states and 1374 transitions. [2022-12-14 12:16:11,232 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-14 12:16:11,232 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:16:11,232 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:16:11,237 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Forceful destruction successful, exit code 0 [2022-12-14 12:16:11,433 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:16:11,433 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:16:11,433 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:16:11,433 INFO L85 PathProgramCache]: Analyzing trace with hash -1058902046, now seen corresponding path program 5 times [2022-12-14 12:16:11,433 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:16:11,434 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [678149117] [2022-12-14 12:16:11,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:16:11,434 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:16:11,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:16:12,636 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 22 proven. 60 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:16:12,636 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:16:12,636 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [678149117] [2022-12-14 12:16:12,636 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [678149117] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:16:12,637 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1936283606] [2022-12-14 12:16:12,637 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:16:12,637 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:16:12,637 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:16:12,638 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:16:12,638 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-12-14 12:16:13,133 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-12-14 12:16:13,133 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:16:13,136 INFO L263 TraceCheckSpWp]: Trace formula consists of 379 conjuncts, 78 conjunts are in the unsatisfiable core [2022-12-14 12:16:13,139 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:16:13,178 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:16:13,178 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 12:16:13,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:16:14,874 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 16 proven. 66 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:16:14,874 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:16:16,562 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:16:16,636 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 25 proven. 57 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:16:16,636 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1936283606] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:16:16,636 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [191684594] [2022-12-14 12:16:16,637 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:16:16,637 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:16:16,637 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:16:16,637 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:16:16,637 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:16:16,662 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:16:16,665 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:16:16,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:16:16,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:16,735 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:16,750 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:16,791 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:16,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:16,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:16,871 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:16:16,915 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:16:16,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:16:17,016 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:16:17,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:16:17,091 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:16:17,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:16:17,158 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:16:17,158 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:16:17,185 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:16:20,336 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '62473#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:16:20,336 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:16:20,336 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:16:20,337 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 24, 24] total 71 [2022-12-14 12:16:20,337 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1631956300] [2022-12-14 12:16:20,337 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:16:20,337 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 73 states [2022-12-14 12:16:20,337 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:16:20,337 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 73 interpolants. [2022-12-14 12:16:20,338 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=553, Invalid=7103, Unknown=0, NotChecked=0, Total=7656 [2022-12-14 12:16:20,338 INFO L87 Difference]: Start difference. First operand 1180 states and 1374 transitions. Second operand has 73 states, 72 states have (on average 2.0416666666666665) internal successors, (147), 72 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:16:37,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:16:37,069 INFO L93 Difference]: Finished difference Result 1954 states and 2157 transitions. [2022-12-14 12:16:37,069 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 86 states. [2022-12-14 12:16:37,069 INFO L78 Accepts]: Start accepts. Automaton has has 73 states, 72 states have (on average 2.0416666666666665) internal successors, (147), 72 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-12-14 12:16:37,069 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:16:37,073 INFO L225 Difference]: With dead ends: 1954 [2022-12-14 12:16:37,073 INFO L226 Difference]: Without dead ends: 1954 [2022-12-14 12:16:37,075 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 264 GetRequests, 94 SyntacticMatches, 0 SemanticMatches, 170 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7630 ImplicationChecksByTransitivity, 21.0s TimeCoverageRelationStatistics Valid=5042, Invalid=24370, Unknown=0, NotChecked=0, Total=29412 [2022-12-14 12:16:37,075 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 1181 mSDsluCounter, 372 mSDsCounter, 0 mSdLazyCounter, 2722 mSolverCounterSat, 113 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1181 SdHoareTripleChecker+Valid, 389 SdHoareTripleChecker+Invalid, 2835 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 113 IncrementalHoareTripleChecker+Valid, 2722 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:16:37,076 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1181 Valid, 389 Invalid, 2835 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [113 Valid, 2722 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2022-12-14 12:16:37,077 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1954 states. [2022-12-14 12:16:37,088 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1954 to 1113. [2022-12-14 12:16:37,088 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1113 states, 1109 states have (on average 1.1677186654643823) internal successors, (1295), 1112 states have internal predecessors, (1295), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:16:37,089 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1113 states to 1113 states and 1295 transitions. [2022-12-14 12:16:37,089 INFO L78 Accepts]: Start accepts. Automaton has 1113 states and 1295 transitions. Word has length 53 [2022-12-14 12:16:37,089 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:16:37,089 INFO L495 AbstractCegarLoop]: Abstraction has 1113 states and 1295 transitions. [2022-12-14 12:16:37,089 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 73 states, 72 states have (on average 2.0416666666666665) internal successors, (147), 72 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:16:37,089 INFO L276 IsEmpty]: Start isEmpty. Operand 1113 states and 1295 transitions. [2022-12-14 12:16:37,090 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-14 12:16:37,090 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:16:37,090 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 4, 4, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:16:37,095 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-12-14 12:16:37,291 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable51 [2022-12-14 12:16:37,291 INFO L420 AbstractCegarLoop]: === Iteration 53 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:16:37,292 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:16:37,293 INFO L85 PathProgramCache]: Analyzing trace with hash 1935030243, now seen corresponding path program 6 times [2022-12-14 12:16:37,293 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:16:37,293 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1825395310] [2022-12-14 12:16:37,294 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:16:37,294 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:16:37,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:16:37,771 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 51 proven. 28 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-12-14 12:16:37,771 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:16:37,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1825395310] [2022-12-14 12:16:37,771 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1825395310] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:16:37,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [831618864] [2022-12-14 12:16:37,771 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 12:16:37,772 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:16:37,772 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:16:37,772 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:16:37,773 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-12-14 12:16:37,952 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 12:16:37,953 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:16:37,955 INFO L263 TraceCheckSpWp]: Trace formula consists of 386 conjuncts, 82 conjunts are in the unsatisfiable core [2022-12-14 12:16:37,958 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:16:37,961 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:16:38,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:38,279 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 12:16:38,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 12:16:38,448 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 12:16:38,566 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 12:16:38,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 12:16:38,620 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 36 proven. 39 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-12-14 12:16:38,620 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:16:38,837 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1926 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_1926) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrncat_~s2#1.offset|)) 0)) is different from false [2022-12-14 12:16:38,934 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:16:38,934 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 12:16:38,939 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:16:38,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 12:16:39,104 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 36 proven. 24 refuted. 0 times theorem prover too weak. 22 trivial. 15 not checked. [2022-12-14 12:16:39,104 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [831618864] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:16:39,104 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [238645795] [2022-12-14 12:16:39,105 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:16:39,105 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:16:39,105 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:16:39,105 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:16:39,105 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:16:39,130 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:16:39,133 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:16:39,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:16:39,165 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:16:39,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:39,220 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:39,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:39,295 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:39,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:39,342 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:16:39,382 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:16:39,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:16:39,486 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:16:39,486 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:16:39,553 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:16:39,554 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:16:39,613 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:16:39,613 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:16:39,648 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:16:42,312 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '66075#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:16:42,313 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:16:42,313 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:16:42,313 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 17, 17] total 40 [2022-12-14 12:16:42,313 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1700230139] [2022-12-14 12:16:42,313 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:16:42,313 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-12-14 12:16:42,313 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:16:42,313 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-12-14 12:16:42,314 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=179, Invalid=2635, Unknown=52, NotChecked=104, Total=2970 [2022-12-14 12:16:42,314 INFO L87 Difference]: Start difference. First operand 1113 states and 1295 transitions. Second operand has 40 states, 40 states have (on average 2.8) internal successors, (112), 40 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:16:45,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:16:45,141 INFO L93 Difference]: Finished difference Result 1339 states and 1498 transitions. [2022-12-14 12:16:45,142 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2022-12-14 12:16:45,142 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 40 states have (on average 2.8) internal successors, (112), 40 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-12-14 12:16:45,142 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:16:45,144 INFO L225 Difference]: With dead ends: 1339 [2022-12-14 12:16:45,144 INFO L226 Difference]: Without dead ends: 1071 [2022-12-14 12:16:45,144 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 211 GetRequests, 119 SyntacticMatches, 2 SemanticMatches, 90 ConstructedPredicates, 1 IntricatePredicates, 1 DeprecatedPredicates, 1973 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=732, Invalid=7405, Unknown=57, NotChecked=178, Total=8372 [2022-12-14 12:16:45,145 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 489 mSDsluCounter, 456 mSDsCounter, 0 mSdLazyCounter, 1741 mSolverCounterSat, 13 mSolverCounterUnsat, 33 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 489 SdHoareTripleChecker+Valid, 481 SdHoareTripleChecker+Invalid, 1897 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 1741 IncrementalHoareTripleChecker+Invalid, 33 IncrementalHoareTripleChecker+Unknown, 110 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-12-14 12:16:45,145 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [489 Valid, 481 Invalid, 1897 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 1741 Invalid, 33 Unknown, 110 Unchecked, 0.9s Time] [2022-12-14 12:16:45,145 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1071 states. [2022-12-14 12:16:45,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1071 to 960. [2022-12-14 12:16:45,150 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 960 states, 956 states have (on average 1.1401673640167365) internal successors, (1090), 959 states have internal predecessors, (1090), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:16:45,151 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 960 states to 960 states and 1090 transitions. [2022-12-14 12:16:45,151 INFO L78 Accepts]: Start accepts. Automaton has 960 states and 1090 transitions. Word has length 53 [2022-12-14 12:16:45,151 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:16:45,151 INFO L495 AbstractCegarLoop]: Abstraction has 960 states and 1090 transitions. [2022-12-14 12:16:45,151 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 40 states have (on average 2.8) internal successors, (112), 40 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:16:45,151 INFO L276 IsEmpty]: Start isEmpty. Operand 960 states and 1090 transitions. [2022-12-14 12:16:45,152 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-12-14 12:16:45,152 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:16:45,152 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:16:45,157 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Ended with exit code 0 [2022-12-14 12:16:45,353 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable52,39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:16:45,353 INFO L420 AbstractCegarLoop]: === Iteration 54 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:16:45,353 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:16:45,353 INFO L85 PathProgramCache]: Analyzing trace with hash 1941109308, now seen corresponding path program 6 times [2022-12-14 12:16:45,354 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:16:45,354 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [182865187] [2022-12-14 12:16:45,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:16:45,354 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:16:45,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:16:46,335 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 4 proven. 112 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:16:46,335 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:16:46,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [182865187] [2022-12-14 12:16:46,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [182865187] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:16:46,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1440314807] [2022-12-14 12:16:46,335 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 12:16:46,336 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:16:46,336 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:16:46,336 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:16:46,337 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-12-14 12:16:46,561 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 12:16:46,561 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:16:46,564 INFO L263 TraceCheckSpWp]: Trace formula consists of 369 conjuncts, 107 conjunts are in the unsatisfiable core [2022-12-14 12:16:46,567 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:16:46,580 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-12-14 12:16:46,581 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 12:16:47,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 12:16:48,015 INFO L321 Elim1Store]: treesize reduction 12, result has 67.6 percent of original size [2022-12-14 12:16:48,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 70 treesize of output 78 [2022-12-14 12:16:49,141 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:16:49,142 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:16:50,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 35 treesize of output 29 [2022-12-14 12:16:52,290 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:16:52,291 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1440314807] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:16:52,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [87837950] [2022-12-14 12:16:52,291 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 12:16:52,291 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:16:52,292 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:16:52,292 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:16:52,292 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:16:52,317 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:16:52,320 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:16:52,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:16:52,347 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:52,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:52,390 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:52,433 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:52,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:52,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:16:52,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:16:52,526 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:16:52,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:16:52,637 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:16:52,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:16:52,708 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:16:52,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:16:52,784 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:16:52,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:16:52,841 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:16:55,965 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '68864#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:16:55,965 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:16:55,965 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:16:55,965 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 29, 30] total 82 [2022-12-14 12:16:55,965 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [751789211] [2022-12-14 12:16:55,965 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:16:55,965 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 83 states [2022-12-14 12:16:55,965 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:16:55,966 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 83 interpolants. [2022-12-14 12:16:55,966 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=575, Invalid=8737, Unknown=0, NotChecked=0, Total=9312 [2022-12-14 12:16:55,966 INFO L87 Difference]: Start difference. First operand 960 states and 1090 transitions. Second operand has 83 states, 82 states have (on average 1.9268292682926829) internal successors, (158), 83 states have internal predecessors, (158), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:18:23,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:18:23,359 INFO L93 Difference]: Finished difference Result 4413 states and 4842 transitions. [2022-12-14 12:18:23,359 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 371 states. [2022-12-14 12:18:23,360 INFO L78 Accepts]: Start accepts. Automaton has has 83 states, 82 states have (on average 1.9268292682926829) internal successors, (158), 83 states have internal predecessors, (158), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2022-12-14 12:18:23,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:18:23,365 INFO L225 Difference]: With dead ends: 4413 [2022-12-14 12:18:23,365 INFO L226 Difference]: Without dead ends: 4379 [2022-12-14 12:18:23,374 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 548 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 458 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 79438 ImplicationChecksByTransitivity, 90.8s TimeCoverageRelationStatistics Valid=21581, Invalid=189559, Unknown=0, NotChecked=0, Total=211140 [2022-12-14 12:18:23,374 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 3788 mSDsluCounter, 1064 mSDsCounter, 0 mSdLazyCounter, 6143 mSolverCounterSat, 284 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3788 SdHoareTripleChecker+Valid, 1092 SdHoareTripleChecker+Invalid, 6427 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 284 IncrementalHoareTripleChecker+Valid, 6143 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.4s IncrementalHoareTripleChecker+Time [2022-12-14 12:18:23,374 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3788 Valid, 1092 Invalid, 6427 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [284 Valid, 6143 Invalid, 0 Unknown, 0 Unchecked, 4.4s Time] [2022-12-14 12:18:23,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4379 states. [2022-12-14 12:18:23,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4379 to 946. [2022-12-14 12:18:23,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 946 states, 942 states have (on average 1.1401273885350318) internal successors, (1074), 945 states have internal predecessors, (1074), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:18:23,388 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 946 states to 946 states and 1074 transitions. [2022-12-14 12:18:23,388 INFO L78 Accepts]: Start accepts. Automaton has 946 states and 1074 transitions. Word has length 54 [2022-12-14 12:18:23,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:18:23,388 INFO L495 AbstractCegarLoop]: Abstraction has 946 states and 1074 transitions. [2022-12-14 12:18:23,388 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 83 states, 82 states have (on average 1.9268292682926829) internal successors, (158), 83 states have internal predecessors, (158), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:18:23,388 INFO L276 IsEmpty]: Start isEmpty. Operand 946 states and 1074 transitions. [2022-12-14 12:18:23,389 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2022-12-14 12:18:23,389 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:18:23,389 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:18:23,394 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Forceful destruction successful, exit code 0 [2022-12-14 12:18:23,589 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable53 [2022-12-14 12:18:23,590 INFO L420 AbstractCegarLoop]: === Iteration 55 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:18:23,590 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:18:23,591 INFO L85 PathProgramCache]: Analyzing trace with hash -1501887732, now seen corresponding path program 11 times [2022-12-14 12:18:23,591 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:18:23,591 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1338587187] [2022-12-14 12:18:23,591 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:18:23,592 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:18:23,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:18:24,678 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 15 proven. 91 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:18:24,678 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:18:24,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1338587187] [2022-12-14 12:18:24,678 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1338587187] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:18:24,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [347611190] [2022-12-14 12:18:24,678 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:18:24,678 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:18:24,678 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:18:24,679 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:18:24,680 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-12-14 12:18:25,039 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-12-14 12:18:25,039 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:18:25,042 INFO L263 TraceCheckSpWp]: Trace formula consists of 395 conjuncts, 112 conjunts are in the unsatisfiable core [2022-12-14 12:18:25,044 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:18:25,048 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:18:25,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:18:25,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 12:18:25,489 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 12:18:25,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 12:18:25,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 12:18:25,771 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 12:18:25,774 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 15 proven. 66 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 12:18:25,774 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:18:25,908 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2074 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_2074) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ 2 |c_ULTIMATE.start_cstrncat_~s2#1.offset|)) 0)) is different from false [2022-12-14 12:18:25,918 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2074 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_2074) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 3)) 0)) is different from false [2022-12-14 12:18:25,976 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:18:25,976 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 12:18:25,980 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:18:25,980 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 12:18:25,986 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 12:18:26,292 INFO L134 CoverageAnalysis]: Checked inductivity of 106 backedges. 15 proven. 31 refuted. 0 times theorem prover too weak. 25 trivial. 35 not checked. [2022-12-14 12:18:26,292 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [347611190] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:18:26,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1361463330] [2022-12-14 12:18:26,293 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:18:26,293 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:18:26,293 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:18:26,293 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:18:26,294 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:18:26,318 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:18:26,321 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:18:26,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:18:26,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:18:26,386 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:18:26,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:18:26,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:18:26,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:18:26,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:18:26,527 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:18:26,561 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:18:26,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:18:26,660 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:18:26,663 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:18:26,698 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-12-14 12:18:26,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-12-14 12:18:26,804 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:18:26,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:18:26,866 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:18:26,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:18:26,894 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:18:29,174 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '75338#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:18:29,174 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:18:29,174 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:18:29,174 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 23, 19] total 57 [2022-12-14 12:18:29,174 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [913039579] [2022-12-14 12:18:29,174 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:18:29,175 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 57 states [2022-12-14 12:18:29,175 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:18:29,175 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 57 interpolants. [2022-12-14 12:18:29,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=277, Invalid=4388, Unknown=35, NotChecked=270, Total=4970 [2022-12-14 12:18:29,175 INFO L87 Difference]: Start difference. First operand 946 states and 1074 transitions. Second operand has 57 states, 57 states have (on average 2.2280701754385963) internal successors, (127), 57 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:18:34,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:18:34,220 INFO L93 Difference]: Finished difference Result 1800 states and 1980 transitions. [2022-12-14 12:18:34,220 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 82 states. [2022-12-14 12:18:34,221 INFO L78 Accepts]: Start accepts. Automaton has has 57 states, 57 states have (on average 2.2280701754385963) internal successors, (127), 57 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 54 [2022-12-14 12:18:34,221 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:18:34,222 INFO L225 Difference]: With dead ends: 1800 [2022-12-14 12:18:34,222 INFO L226 Difference]: Without dead ends: 1290 [2022-12-14 12:18:34,222 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 124 SyntacticMatches, 3 SemanticMatches, 136 ConstructedPredicates, 2 IntricatePredicates, 1 DeprecatedPredicates, 5358 ImplicationChecksByTransitivity, 7.1s TimeCoverageRelationStatistics Valid=1375, Invalid=16952, Unknown=41, NotChecked=538, Total=18906 [2022-12-14 12:18:34,223 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 577 mSDsluCounter, 1393 mSDsCounter, 0 mSdLazyCounter, 3357 mSolverCounterSat, 58 mSolverCounterUnsat, 42 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 577 SdHoareTripleChecker+Valid, 1450 SdHoareTripleChecker+Invalid, 3739 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 3357 IncrementalHoareTripleChecker+Invalid, 42 IncrementalHoareTripleChecker+Unknown, 282 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2022-12-14 12:18:34,223 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [577 Valid, 1450 Invalid, 3739 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 3357 Invalid, 42 Unknown, 282 Unchecked, 1.4s Time] [2022-12-14 12:18:34,223 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1290 states. [2022-12-14 12:18:34,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1290 to 1100. [2022-12-14 12:18:34,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1100 states, 1096 states have (on average 1.135036496350365) internal successors, (1244), 1099 states have internal predecessors, (1244), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:18:34,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1100 states to 1100 states and 1244 transitions. [2022-12-14 12:18:34,229 INFO L78 Accepts]: Start accepts. Automaton has 1100 states and 1244 transitions. Word has length 54 [2022-12-14 12:18:34,229 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:18:34,230 INFO L495 AbstractCegarLoop]: Abstraction has 1100 states and 1244 transitions. [2022-12-14 12:18:34,230 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 57 states, 57 states have (on average 2.2280701754385963) internal successors, (127), 57 states have internal predecessors, (127), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:18:34,230 INFO L276 IsEmpty]: Start isEmpty. Operand 1100 states and 1244 transitions. [2022-12-14 12:18:34,230 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-12-14 12:18:34,230 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:18:34,230 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:18:34,235 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Ended with exit code 0 [2022-12-14 12:18:34,431 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable54,41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:18:34,431 INFO L420 AbstractCegarLoop]: === Iteration 56 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:18:34,432 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:18:34,432 INFO L85 PathProgramCache]: Analyzing trace with hash -1785516004, now seen corresponding path program 12 times [2022-12-14 12:18:34,432 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:18:34,433 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1732375151] [2022-12-14 12:18:34,433 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:18:34,433 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:18:34,452 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:18:34,834 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 9 proven. 81 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 12:18:34,834 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:18:34,835 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1732375151] [2022-12-14 12:18:34,835 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1732375151] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:18:34,835 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2062682674] [2022-12-14 12:18:34,835 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 12:18:34,835 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:18:34,835 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:18:34,836 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:18:34,837 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Waiting until timeout for monitored process [2022-12-14 12:18:35,101 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 12:18:35,101 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:18:35,104 INFO L263 TraceCheckSpWp]: Trace formula consists of 408 conjuncts, 61 conjunts are in the unsatisfiable core [2022-12-14 12:18:35,105 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:18:35,114 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 12:18:35,114 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 12:18:35,251 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 16 proven. 74 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 12:18:35,251 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:18:35,606 INFO L134 CoverageAnalysis]: Checked inductivity of 115 backedges. 16 proven. 74 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 12:18:35,606 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2062682674] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:18:35,606 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2117488695] [2022-12-14 12:18:35,607 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:18:35,607 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:18:35,608 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:18:35,608 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:18:35,608 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:18:35,640 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:18:35,642 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:18:35,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:18:35,688 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:18:35,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:18:35,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:18:35,806 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:18:35,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:18:35,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:18:35,906 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:18:35,952 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:18:35,952 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:18:36,069 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:18:36,072 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:18:36,104 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-12-14 12:18:36,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-12-14 12:18:36,190 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:18:36,191 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:18:36,252 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:18:36,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:18:36,283 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:18:38,362 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '78757#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:18:38,362 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:18:38,362 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:18:38,362 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 15, 15] total 38 [2022-12-14 12:18:38,362 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [322554191] [2022-12-14 12:18:38,362 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:18:38,362 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2022-12-14 12:18:38,362 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:18:38,363 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2022-12-14 12:18:38,363 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=293, Invalid=2463, Unknown=0, NotChecked=0, Total=2756 [2022-12-14 12:18:38,363 INFO L87 Difference]: Start difference. First operand 1100 states and 1244 transitions. Second operand has 39 states, 38 states have (on average 3.0) internal successors, (114), 39 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:18:39,218 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:18:39,219 INFO L93 Difference]: Finished difference Result 1289 states and 1422 transitions. [2022-12-14 12:18:39,219 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-12-14 12:18:39,219 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 38 states have (on average 3.0) internal successors, (114), 39 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-12-14 12:18:39,219 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:18:39,221 INFO L225 Difference]: With dead ends: 1289 [2022-12-14 12:18:39,221 INFO L226 Difference]: Without dead ends: 1289 [2022-12-14 12:18:39,221 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 205 GetRequests, 131 SyntacticMatches, 0 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1407 ImplicationChecksByTransitivity, 2.9s TimeCoverageRelationStatistics Valid=857, Invalid=4843, Unknown=0, NotChecked=0, Total=5700 [2022-12-14 12:18:39,221 INFO L413 NwaCegarLoop]: 39 mSDtfsCounter, 436 mSDsluCounter, 501 mSDsCounter, 0 mSdLazyCounter, 1128 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 436 SdHoareTripleChecker+Valid, 540 SdHoareTripleChecker+Invalid, 1134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 1128 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 12:18:39,221 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [436 Valid, 540 Invalid, 1134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 1128 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 12:18:39,222 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1289 states. [2022-12-14 12:18:39,227 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1289 to 1152. [2022-12-14 12:18:39,228 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1152 states, 1148 states have (on average 1.1297909407665505) internal successors, (1297), 1151 states have internal predecessors, (1297), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:18:39,228 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1152 states to 1152 states and 1297 transitions. [2022-12-14 12:18:39,228 INFO L78 Accepts]: Start accepts. Automaton has 1152 states and 1297 transitions. Word has length 56 [2022-12-14 12:18:39,229 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:18:39,229 INFO L495 AbstractCegarLoop]: Abstraction has 1152 states and 1297 transitions. [2022-12-14 12:18:39,229 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 38 states have (on average 3.0) internal successors, (114), 39 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:18:39,229 INFO L276 IsEmpty]: Start isEmpty. Operand 1152 states and 1297 transitions. [2022-12-14 12:18:39,230 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-12-14 12:18:39,230 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:18:39,230 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 12, 12, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:18:39,235 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Ended with exit code 0 [2022-12-14 12:18:39,431 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable55 [2022-12-14 12:18:39,431 INFO L420 AbstractCegarLoop]: === Iteration 57 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:18:39,432 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:18:39,432 INFO L85 PathProgramCache]: Analyzing trace with hash 1675450244, now seen corresponding path program 13 times [2022-12-14 12:18:39,432 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:18:39,433 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [619089555] [2022-12-14 12:18:39,433 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:18:39,433 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:18:39,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:18:40,925 INFO L134 CoverageAnalysis]: Checked inductivity of 313 backedges. 100 proven. 213 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:18:40,925 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:18:40,925 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [619089555] [2022-12-14 12:18:40,925 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [619089555] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:18:40,925 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [888518269] [2022-12-14 12:18:40,925 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 12:18:40,925 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:18:40,925 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:18:40,926 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:18:40,927 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Waiting until timeout for monitored process [2022-12-14 12:18:41,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:18:41,094 INFO L263 TraceCheckSpWp]: Trace formula consists of 399 conjuncts, 107 conjunts are in the unsatisfiable core [2022-12-14 12:18:41,096 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:18:41,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:18:41,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:18:41,742 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 21 [2022-12-14 12:18:42,996 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:18:42,998 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:18:42,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 10 [2022-12-14 12:18:43,054 INFO L134 CoverageAnalysis]: Checked inductivity of 313 backedges. 13 proven. 300 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:18:43,055 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:18:43,955 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:18:43,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-12-14 12:18:43,958 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:18:43,959 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-12-14 12:18:43,960 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 12:18:44,907 INFO L134 CoverageAnalysis]: Checked inductivity of 313 backedges. 13 proven. 300 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:18:44,907 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [888518269] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:18:44,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1634308505] [2022-12-14 12:18:44,908 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:18:44,908 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:18:44,908 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:18:44,908 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:18:44,908 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:18:44,931 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:18:44,935 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:18:44,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:18:44,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 12:18:44,992 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:18:45,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:18:45,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:18:45,104 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:18:45,104 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:18:45,169 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:18:47,323 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '81684#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:18:47,323 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:18:47,323 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:18:47,323 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 32, 32] total 90 [2022-12-14 12:18:47,324 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1246931353] [2022-12-14 12:18:47,324 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:18:47,324 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 90 states [2022-12-14 12:18:47,324 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:18:47,324 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 90 interpolants. [2022-12-14 12:18:47,325 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=309, Invalid=9373, Unknown=20, NotChecked=0, Total=9702 [2022-12-14 12:18:47,325 INFO L87 Difference]: Start difference. First operand 1152 states and 1297 transitions. Second operand has 90 states, 90 states have (on average 1.8666666666666667) internal successors, (168), 90 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:19:02,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:19:02,471 INFO L93 Difference]: Finished difference Result 3597 states and 3925 transitions. [2022-12-14 12:19:02,471 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 63 states. [2022-12-14 12:19:02,471 INFO L78 Accepts]: Start accepts. Automaton has has 90 states, 90 states have (on average 1.8666666666666667) internal successors, (168), 90 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-12-14 12:19:02,471 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:19:02,474 INFO L225 Difference]: With dead ends: 3597 [2022-12-14 12:19:02,474 INFO L226 Difference]: Without dead ends: 3489 [2022-12-14 12:19:02,475 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 258 GetRequests, 101 SyntacticMatches, 0 SemanticMatches, 157 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3884 ImplicationChecksByTransitivity, 15.8s TimeCoverageRelationStatistics Valid=1503, Invalid=23599, Unknown=20, NotChecked=0, Total=25122 [2022-12-14 12:19:02,475 INFO L413 NwaCegarLoop]: 102 mSDtfsCounter, 2776 mSDsluCounter, 5175 mSDsCounter, 0 mSdLazyCounter, 12159 mSolverCounterSat, 107 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2776 SdHoareTripleChecker+Valid, 5277 SdHoareTripleChecker+Invalid, 12266 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 107 IncrementalHoareTripleChecker+Valid, 12159 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.5s IncrementalHoareTripleChecker+Time [2022-12-14 12:19:02,475 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2776 Valid, 5277 Invalid, 12266 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [107 Valid, 12159 Invalid, 0 Unknown, 0 Unchecked, 5.5s Time] [2022-12-14 12:19:02,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3489 states. [2022-12-14 12:19:02,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3489 to 1273. [2022-12-14 12:19:02,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1273 states, 1269 states have (on average 1.1300236406619386) internal successors, (1434), 1272 states have internal predecessors, (1434), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:19:02,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1273 states to 1273 states and 1434 transitions. [2022-12-14 12:19:02,488 INFO L78 Accepts]: Start accepts. Automaton has 1273 states and 1434 transitions. Word has length 57 [2022-12-14 12:19:02,488 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:19:02,488 INFO L495 AbstractCegarLoop]: Abstraction has 1273 states and 1434 transitions. [2022-12-14 12:19:02,488 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 90 states, 90 states have (on average 1.8666666666666667) internal successors, (168), 90 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:19:02,488 INFO L276 IsEmpty]: Start isEmpty. Operand 1273 states and 1434 transitions. [2022-12-14 12:19:02,489 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-12-14 12:19:02,489 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:19:02,489 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:19:02,494 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Ended with exit code 0 [2022-12-14 12:19:02,689 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable56,43 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:19:02,690 INFO L420 AbstractCegarLoop]: === Iteration 58 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:19:02,690 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:19:02,690 INFO L85 PathProgramCache]: Analyzing trace with hash 909511491, now seen corresponding path program 7 times [2022-12-14 12:19:02,690 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:19:02,690 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [456725373] [2022-12-14 12:19:02,690 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:19:02,690 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:19:02,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:19:02,869 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 18 proven. 23 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-12-14 12:19:02,869 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:19:02,869 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [456725373] [2022-12-14 12:19:02,869 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [456725373] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:19:02,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [485754325] [2022-12-14 12:19:02,870 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 12:19:02,870 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:19:02,870 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:19:02,871 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:19:02,871 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-12-14 12:19:02,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:19:02,989 INFO L263 TraceCheckSpWp]: Trace formula consists of 412 conjuncts, 13 conjunts are in the unsatisfiable core [2022-12-14 12:19:02,990 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:19:03,109 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 25 proven. 16 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-12-14 12:19:03,109 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:19:03,216 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 25 proven. 16 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-12-14 12:19:03,216 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [485754325] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:19:03,216 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [837771637] [2022-12-14 12:19:03,217 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:19:03,217 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:19:03,217 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:19:03,217 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:19:03,217 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:19:03,240 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:19:03,242 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:19:03,242 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:19:03,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:19:03,310 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:19:03,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:19:03,375 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:19:03,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:19:03,419 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:19:03,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:19:03,486 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:19:03,486 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:19:03,582 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:19:03,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:19:03,655 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:19:03,655 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:19:03,718 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:19:03,718 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:19:03,749 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:19:05,712 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '87047#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:19:05,712 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:19:05,713 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:19:05,713 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 28 [2022-12-14 12:19:05,713 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [153127011] [2022-12-14 12:19:05,713 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:19:05,713 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-12-14 12:19:05,713 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:19:05,713 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-12-14 12:19:05,714 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=275, Invalid=1531, Unknown=0, NotChecked=0, Total=1806 [2022-12-14 12:19:05,714 INFO L87 Difference]: Start difference. First operand 1273 states and 1434 transitions. Second operand has 28 states, 28 states have (on average 2.2857142857142856) internal successors, (64), 28 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:19:05,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:19:05,828 INFO L93 Difference]: Finished difference Result 1241 states and 1399 transitions. [2022-12-14 12:19:05,828 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-14 12:19:05,828 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 2.2857142857142856) internal successors, (64), 28 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-12-14 12:19:05,828 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:19:05,829 INFO L225 Difference]: With dead ends: 1241 [2022-12-14 12:19:05,829 INFO L226 Difference]: Without dead ends: 1232 [2022-12-14 12:19:05,829 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 186 GetRequests, 136 SyntacticMatches, 4 SemanticMatches, 46 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 990 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=357, Invalid=1899, Unknown=0, NotChecked=0, Total=2256 [2022-12-14 12:19:05,829 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 44 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 129 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 68 SdHoareTripleChecker+Invalid, 132 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 12:19:05,830 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 68 Invalid, 132 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 129 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 12:19:05,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1232 states. [2022-12-14 12:19:05,835 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1232 to 1232. [2022-12-14 12:19:05,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1232 states, 1228 states have (on average 1.1319218241042346) internal successors, (1390), 1231 states have internal predecessors, (1390), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:19:05,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1232 states to 1232 states and 1390 transitions. [2022-12-14 12:19:05,836 INFO L78 Accepts]: Start accepts. Automaton has 1232 states and 1390 transitions. Word has length 57 [2022-12-14 12:19:05,836 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:19:05,836 INFO L495 AbstractCegarLoop]: Abstraction has 1232 states and 1390 transitions. [2022-12-14 12:19:05,836 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 2.2857142857142856) internal successors, (64), 28 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:19:05,836 INFO L276 IsEmpty]: Start isEmpty. Operand 1232 states and 1390 transitions. [2022-12-14 12:19:05,837 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-12-14 12:19:05,837 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:19:05,837 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:19:05,842 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Ended with exit code 0 [2022-12-14 12:19:06,038 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable57,44 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:19:06,038 INFO L420 AbstractCegarLoop]: === Iteration 59 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:19:06,039 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:19:06,039 INFO L85 PathProgramCache]: Analyzing trace with hash 1257725128, now seen corresponding path program 7 times [2022-12-14 12:19:06,040 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:19:06,040 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1251520193] [2022-12-14 12:19:06,040 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:19:06,040 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:19:06,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:19:07,122 INFO L134 CoverageAnalysis]: Checked inductivity of 151 backedges. 4 proven. 143 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:19:07,122 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:19:07,122 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1251520193] [2022-12-14 12:19:07,122 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1251520193] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:19:07,122 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [270964069] [2022-12-14 12:19:07,122 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 12:19:07,123 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:19:07,123 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:19:07,123 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:19:07,124 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Waiting until timeout for monitored process [2022-12-14 12:19:07,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:19:07,267 INFO L263 TraceCheckSpWp]: Trace formula consists of 393 conjuncts, 101 conjunts are in the unsatisfiable core [2022-12-14 12:19:07,269 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:19:07,275 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:19:07,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 12:19:07,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:19:08,714 INFO L134 CoverageAnalysis]: Checked inductivity of 151 backedges. 0 proven. 147 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:19:08,714 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:19:10,407 INFO L134 CoverageAnalysis]: Checked inductivity of 151 backedges. 0 proven. 147 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:19:10,408 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [270964069] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:19:10,408 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [607925116] [2022-12-14 12:19:10,409 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 12:19:10,409 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:19:10,409 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:19:10,409 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:19:10,409 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:19:10,440 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:19:10,443 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:19:10,443 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:19:10,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:19:10,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:19:10,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:19:10,601 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:19:10,647 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:19:10,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:19:10,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:19:10,782 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:19:10,782 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:19:10,888 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:19:10,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:19:10,957 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:19:10,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:19:11,026 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:19:11,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:19:11,089 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:19:13,680 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '89965#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:19:13,680 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:19:13,680 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:19:13,681 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 26, 27] total 77 [2022-12-14 12:19:13,681 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [732669354] [2022-12-14 12:19:13,681 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:19:13,681 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 78 states [2022-12-14 12:19:13,681 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:19:13,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 78 interpolants. [2022-12-14 12:19:13,682 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=624, Invalid=7748, Unknown=0, NotChecked=0, Total=8372 [2022-12-14 12:19:13,682 INFO L87 Difference]: Start difference. First operand 1232 states and 1390 transitions. Second operand has 78 states, 77 states have (on average 2.1298701298701297) internal successors, (164), 78 states have internal predecessors, (164), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:20:51,968 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:20:51,968 INFO L93 Difference]: Finished difference Result 6531 states and 7157 transitions. [2022-12-14 12:20:51,968 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 531 states. [2022-12-14 12:20:51,968 INFO L78 Accepts]: Start accepts. Automaton has has 78 states, 77 states have (on average 2.1298701298701297) internal successors, (164), 78 states have internal predecessors, (164), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2022-12-14 12:20:51,968 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:20:51,973 INFO L225 Difference]: With dead ends: 6531 [2022-12-14 12:20:51,973 INFO L226 Difference]: Without dead ends: 6523 [2022-12-14 12:20:51,991 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 721 GetRequests, 108 SyntacticMatches, 1 SemanticMatches, 612 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 163397 ImplicationChecksByTransitivity, 98.2s TimeCoverageRelationStatistics Valid=37268, Invalid=339114, Unknown=0, NotChecked=0, Total=376382 [2022-12-14 12:20:51,991 INFO L413 NwaCegarLoop]: 54 mSDtfsCounter, 5621 mSDsluCounter, 1907 mSDsCounter, 0 mSdLazyCounter, 7685 mSolverCounterSat, 379 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5621 SdHoareTripleChecker+Valid, 1961 SdHoareTripleChecker+Invalid, 8064 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 379 IncrementalHoareTripleChecker+Valid, 7685 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.0s IncrementalHoareTripleChecker+Time [2022-12-14 12:20:51,991 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [5621 Valid, 1961 Invalid, 8064 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [379 Valid, 7685 Invalid, 0 Unknown, 0 Unchecked, 5.0s Time] [2022-12-14 12:20:51,994 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6523 states. [2022-12-14 12:20:52,011 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6523 to 1304. [2022-12-14 12:20:52,011 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1304 states, 1300 states have (on average 1.1284615384615384) internal successors, (1467), 1303 states have internal predecessors, (1467), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:20:52,012 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1304 states to 1304 states and 1467 transitions. [2022-12-14 12:20:52,012 INFO L78 Accepts]: Start accepts. Automaton has 1304 states and 1467 transitions. Word has length 58 [2022-12-14 12:20:52,012 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:20:52,012 INFO L495 AbstractCegarLoop]: Abstraction has 1304 states and 1467 transitions. [2022-12-14 12:20:52,013 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 78 states, 77 states have (on average 2.1298701298701297) internal successors, (164), 78 states have internal predecessors, (164), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:20:52,013 INFO L276 IsEmpty]: Start isEmpty. Operand 1304 states and 1467 transitions. [2022-12-14 12:20:52,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-12-14 12:20:52,013 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:20:52,013 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:20:52,019 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Forceful destruction successful, exit code 0 [2022-12-14 12:20:52,214 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 45 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable58 [2022-12-14 12:20:52,214 INFO L420 AbstractCegarLoop]: === Iteration 60 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:20:52,214 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:20:52,214 INFO L85 PathProgramCache]: Analyzing trace with hash 1257716092, now seen corresponding path program 8 times [2022-12-14 12:20:52,215 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:20:52,215 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1929419561] [2022-12-14 12:20:52,215 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:20:52,215 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:20:52,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:20:53,224 INFO L134 CoverageAnalysis]: Checked inductivity of 153 backedges. 40 proven. 109 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:20:53,224 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:20:53,224 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1929419561] [2022-12-14 12:20:53,224 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1929419561] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:20:53,224 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1606252504] [2022-12-14 12:20:53,224 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:20:53,224 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:20:53,224 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:20:53,225 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:20:53,226 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Waiting until timeout for monitored process [2022-12-14 12:20:53,691 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2022-12-14 12:20:53,691 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:20:53,694 INFO L263 TraceCheckSpWp]: Trace formula consists of 406 conjuncts, 79 conjunts are in the unsatisfiable core [2022-12-14 12:20:53,697 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:20:53,740 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:20:53,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 12:20:53,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:20:55,146 INFO L134 CoverageAnalysis]: Checked inductivity of 153 backedges. 49 proven. 100 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:20:55,146 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:20:57,326 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:20:57,403 INFO L134 CoverageAnalysis]: Checked inductivity of 153 backedges. 64 proven. 85 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 12:20:57,403 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1606252504] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:20:57,403 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [89731168] [2022-12-14 12:20:57,404 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:20:57,404 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:20:57,404 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:20:57,404 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:20:57,404 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:20:57,431 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:20:57,434 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:20:57,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:20:57,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:20:57,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:20:57,519 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:20:57,563 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:20:57,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:20:57,609 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:20:57,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:20:57,686 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:20:57,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:20:57,842 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:20:57,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:20:57,933 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:20:57,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:20:57,995 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:20:57,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:20:58,025 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:21:01,451 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '99283#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:21:01,451 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:21:01,451 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:21:01,451 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 27, 28] total 81 [2022-12-14 12:21:01,451 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [844474397] [2022-12-14 12:21:01,451 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:21:01,452 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 83 states [2022-12-14 12:21:01,452 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:21:01,452 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 83 interpolants. [2022-12-14 12:21:01,453 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=757, Invalid=8555, Unknown=0, NotChecked=0, Total=9312 [2022-12-14 12:21:01,453 INFO L87 Difference]: Start difference. First operand 1304 states and 1467 transitions. Second operand has 83 states, 82 states have (on average 2.048780487804878) internal successors, (168), 82 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:21:23,133 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:21:23,133 INFO L93 Difference]: Finished difference Result 2352 states and 2546 transitions. [2022-12-14 12:21:23,134 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 155 states. [2022-12-14 12:21:23,134 INFO L78 Accepts]: Start accepts. Automaton has has 83 states, 82 states have (on average 2.048780487804878) internal successors, (168), 82 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2022-12-14 12:21:23,134 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:21:23,136 INFO L225 Difference]: With dead ends: 2352 [2022-12-14 12:21:23,136 INFO L226 Difference]: Without dead ends: 2138 [2022-12-14 12:21:23,138 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 350 GetRequests, 103 SyntacticMatches, 0 SemanticMatches, 247 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16825 ImplicationChecksByTransitivity, 26.0s TimeCoverageRelationStatistics Valid=13061, Invalid=48691, Unknown=0, NotChecked=0, Total=61752 [2022-12-14 12:21:23,138 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 1225 mSDsluCounter, 481 mSDsCounter, 0 mSdLazyCounter, 3674 mSolverCounterSat, 179 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1225 SdHoareTripleChecker+Valid, 500 SdHoareTripleChecker+Invalid, 3853 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 179 IncrementalHoareTripleChecker+Valid, 3674 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-12-14 12:21:23,138 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1225 Valid, 500 Invalid, 3853 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [179 Valid, 3674 Invalid, 0 Unknown, 0 Unchecked, 2.1s Time] [2022-12-14 12:21:23,139 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2138 states. [2022-12-14 12:21:23,146 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2138 to 1410. [2022-12-14 12:21:23,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1410 states, 1406 states have (on average 1.1216216216216217) internal successors, (1577), 1409 states have internal predecessors, (1577), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:21:23,148 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1410 states to 1410 states and 1577 transitions. [2022-12-14 12:21:23,148 INFO L78 Accepts]: Start accepts. Automaton has 1410 states and 1577 transitions. Word has length 58 [2022-12-14 12:21:23,148 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:21:23,148 INFO L495 AbstractCegarLoop]: Abstraction has 1410 states and 1577 transitions. [2022-12-14 12:21:23,148 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 83 states, 82 states have (on average 2.048780487804878) internal successors, (168), 82 states have internal predecessors, (168), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:21:23,148 INFO L276 IsEmpty]: Start isEmpty. Operand 1410 states and 1577 transitions. [2022-12-14 12:21:23,149 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-12-14 12:21:23,149 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:21:23,149 INFO L195 NwaCegarLoop]: trace histogram [14, 14, 13, 13, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:21:23,155 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Ended with exit code 0 [2022-12-14 12:21:23,350 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 46 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable59 [2022-12-14 12:21:23,350 INFO L420 AbstractCegarLoop]: === Iteration 61 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:21:23,351 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:21:23,351 INFO L85 PathProgramCache]: Analyzing trace with hash -1429708168, now seen corresponding path program 14 times [2022-12-14 12:21:23,351 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:21:23,352 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [945505101] [2022-12-14 12:21:23,352 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:21:23,352 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:21:23,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:21:24,882 INFO L134 CoverageAnalysis]: Checked inductivity of 365 backedges. 121 proven. 244 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:21:24,883 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:21:24,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [945505101] [2022-12-14 12:21:24,883 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [945505101] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:21:24,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2089808994] [2022-12-14 12:21:24,883 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 12:21:24,883 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:21:24,883 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:21:24,884 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:21:24,893 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Waiting until timeout for monitored process [2022-12-14 12:21:25,228 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 15 check-sat command(s) [2022-12-14 12:21:25,228 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:21:25,232 INFO L263 TraceCheckSpWp]: Trace formula consists of 423 conjuncts, 111 conjunts are in the unsatisfiable core [2022-12-14 12:21:25,236 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:21:25,240 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:21:25,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:21:26,005 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 12:21:27,829 INFO L321 Elim1Store]: treesize reduction 7, result has 30.0 percent of original size [2022-12-14 12:21:27,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 10 [2022-12-14 12:21:27,893 INFO L134 CoverageAnalysis]: Checked inductivity of 365 backedges. 14 proven. 351 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:21:27,894 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:21:29,032 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2512 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_2512) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 13 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-12-14 12:21:29,035 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:21:29,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-12-14 12:21:29,039 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:21:29,039 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-12-14 12:21:29,290 INFO L134 CoverageAnalysis]: Checked inductivity of 365 backedges. 14 proven. 351 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:21:29,290 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2089808994] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:21:29,290 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1845478537] [2022-12-14 12:21:29,291 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 12:21:29,291 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:21:29,291 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:21:29,291 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:21:29,291 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:21:29,316 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:21:29,319 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:21:29,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:21:29,347 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:21:29,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:21:29,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:21:29,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:21:29,467 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:21:29,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:21:29,529 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:21:31,367 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '103805#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s2#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~s2#1.offset|) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:21:31,367 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:21:31,367 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:21:31,367 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [31, 34, 34] total 82 [2022-12-14 12:21:31,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1588669125] [2022-12-14 12:21:31,367 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:21:31,368 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 82 states [2022-12-14 12:21:31,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:21:31,368 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 82 interpolants. [2022-12-14 12:21:31,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=302, Invalid=7711, Unknown=1, NotChecked=176, Total=8190 [2022-12-14 12:21:31,368 INFO L87 Difference]: Start difference. First operand 1410 states and 1577 transitions. Second operand has 82 states, 82 states have (on average 1.8780487804878048) internal successors, (154), 82 states have internal predecessors, (154), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:21:43,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:21:43,303 INFO L93 Difference]: Finished difference Result 3876 states and 4226 transitions. [2022-12-14 12:21:43,303 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 66 states. [2022-12-14 12:21:43,303 INFO L78 Accepts]: Start accepts. Automaton has has 82 states, 82 states have (on average 1.8780487804878048) internal successors, (154), 82 states have internal predecessors, (154), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2022-12-14 12:21:43,304 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:21:43,306 INFO L225 Difference]: With dead ends: 3876 [2022-12-14 12:21:43,307 INFO L226 Difference]: Without dead ends: 3764 [2022-12-14 12:21:43,307 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 275 GetRequests, 121 SyntacticMatches, 2 SemanticMatches, 152 ConstructedPredicates, 1 IntricatePredicates, 14 DeprecatedPredicates, 4805 ImplicationChecksByTransitivity, 12.3s TimeCoverageRelationStatistics Valid=1483, Invalid=21776, Unknown=1, NotChecked=302, Total=23562 [2022-12-14 12:21:43,307 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 3040 mSDsluCounter, 4753 mSDsCounter, 0 mSdLazyCounter, 11218 mSolverCounterSat, 72 mSolverCounterUnsat, 26 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3040 SdHoareTripleChecker+Valid, 4858 SdHoareTripleChecker+Invalid, 11718 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 72 IncrementalHoareTripleChecker+Valid, 11218 IncrementalHoareTripleChecker+Invalid, 26 IncrementalHoareTripleChecker+Unknown, 402 IncrementalHoareTripleChecker+Unchecked, 5.8s IncrementalHoareTripleChecker+Time [2022-12-14 12:21:43,308 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3040 Valid, 4858 Invalid, 11718 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [72 Valid, 11218 Invalid, 26 Unknown, 402 Unchecked, 5.8s Time] [2022-12-14 12:21:43,309 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3764 states. [2022-12-14 12:21:43,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3764 to 1535. [2022-12-14 12:21:43,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1535 states, 1531 states have (on average 1.123448726322665) internal successors, (1720), 1534 states have internal predecessors, (1720), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:21:43,322 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1535 states to 1535 states and 1720 transitions. [2022-12-14 12:21:43,322 INFO L78 Accepts]: Start accepts. Automaton has 1535 states and 1720 transitions. Word has length 61 [2022-12-14 12:21:43,322 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:21:43,322 INFO L495 AbstractCegarLoop]: Abstraction has 1535 states and 1720 transitions. [2022-12-14 12:21:43,323 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 82 states, 82 states have (on average 1.8780487804878048) internal successors, (154), 82 states have internal predecessors, (154), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:21:43,323 INFO L276 IsEmpty]: Start isEmpty. Operand 1535 states and 1720 transitions. [2022-12-14 12:21:43,323 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-12-14 12:21:43,323 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:21:43,324 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:21:43,329 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Ended with exit code 0 [2022-12-14 12:21:43,524 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable60,47 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:21:43,524 INFO L420 AbstractCegarLoop]: === Iteration 62 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:21:43,524 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:21:43,524 INFO L85 PathProgramCache]: Analyzing trace with hash -699755574, now seen corresponding path program 9 times [2022-12-14 12:21:43,524 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:21:43,524 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1008218220] [2022-12-14 12:21:43,524 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:21:43,524 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:21:43,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:21:44,762 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 31 proven. 101 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:21:44,763 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:21:44,763 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1008218220] [2022-12-14 12:21:44,763 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1008218220] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:21:44,763 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1586344400] [2022-12-14 12:21:44,763 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 12:21:44,763 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:21:44,763 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:21:44,764 INFO L229 MonitoredProcess]: Starting monitored process 48 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:21:44,764 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Waiting until timeout for monitored process [2022-12-14 12:21:45,005 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 12:21:45,005 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 12:21:45,009 INFO L263 TraceCheckSpWp]: Trace formula consists of 427 conjuncts, 99 conjunts are in the unsatisfiable core [2022-12-14 12:21:45,011 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:21:45,066 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:21:45,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 12:21:45,072 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:21:47,039 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 36 proven. 96 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:21:47,039 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:21:49,208 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:21:49,288 INFO L134 CoverageAnalysis]: Checked inductivity of 141 backedges. 49 proven. 83 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 12:21:49,288 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1586344400] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 12:21:49,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1570928508] [2022-12-14 12:21:49,289 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 12:21:49,290 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 12:21:49,290 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 12:21:49,290 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 12:21:49,290 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 12:21:49,318 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:21:49,321 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 12:21:49,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 12:21:49,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:21:49,389 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:21:49,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:21:49,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:21:49,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:21:49,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:21:49,524 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 12:21:49,571 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 12:21:49,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 12:21:49,682 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 12:21:49,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 12:21:49,756 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:21:49,756 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:21:49,820 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 12:21:49,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 12:21:49,853 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 12:21:53,557 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '109793#(and (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (= |ULTIMATE.start_cstrncat_~s2#1.base| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |ULTIMATE.start_cstrncat_~s~0#1.offset| 1)) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (= |ULTIMATE.start_cstrncat_~s2#1.offset| (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post4#1.base|) 1) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~s1#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s1#1.offset|) (= |ULTIMATE.start_cstrncat_#t~mem5#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post4#1.base|) |ULTIMATE.start_cstrncat_#t~post4#1.offset|)) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrncat_#t~post4#1.offset|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= |ULTIMATE.start_cstrncat_#in~s2#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= (+ |ULTIMATE.start_cstrncat_#t~post4#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post4#1.base|)) (<= |ULTIMATE.start_cstrncat_~s1#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~s2#1.base|) (<= |ULTIMATE.start_cstrncat_#in~s1#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 12:21:53,557 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 12:21:53,557 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 12:21:53,557 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 26, 28] total 80 [2022-12-14 12:21:53,557 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [657286239] [2022-12-14 12:21:53,557 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 12:21:53,557 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 82 states [2022-12-14 12:21:53,557 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 12:21:53,558 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 82 interpolants. [2022-12-14 12:21:53,558 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=896, Invalid=8416, Unknown=0, NotChecked=0, Total=9312 [2022-12-14 12:21:53,558 INFO L87 Difference]: Start difference. First operand 1535 states and 1720 transitions. Second operand has 82 states, 81 states have (on average 2.111111111111111) internal successors, (171), 81 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:22:03,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 12:22:03,296 INFO L93 Difference]: Finished difference Result 2093 states and 2283 transitions. [2022-12-14 12:22:03,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 69 states. [2022-12-14 12:22:03,296 INFO L78 Accepts]: Start accepts. Automaton has has 82 states, 81 states have (on average 2.111111111111111) internal successors, (171), 81 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2022-12-14 12:22:03,296 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 12:22:03,298 INFO L225 Difference]: With dead ends: 2093 [2022-12-14 12:22:03,298 INFO L226 Difference]: Without dead ends: 1990 [2022-12-14 12:22:03,299 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 111 SyntacticMatches, 1 SemanticMatches, 156 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6987 ImplicationChecksByTransitivity, 15.1s TimeCoverageRelationStatistics Valid=3837, Invalid=20969, Unknown=0, NotChecked=0, Total=24806 [2022-12-14 12:22:03,299 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 681 mSDsluCounter, 591 mSDsCounter, 0 mSdLazyCounter, 2989 mSolverCounterSat, 85 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 681 SdHoareTripleChecker+Valid, 616 SdHoareTripleChecker+Invalid, 3074 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 85 IncrementalHoareTripleChecker+Valid, 2989 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2022-12-14 12:22:03,299 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [681 Valid, 616 Invalid, 3074 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [85 Valid, 2989 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2022-12-14 12:22:03,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1990 states. [2022-12-14 12:22:03,306 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1990 to 1293. [2022-12-14 12:22:03,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1293 states, 1289 states have (on average 1.1326609775019394) internal successors, (1460), 1292 states have internal predecessors, (1460), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:22:03,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1293 states to 1293 states and 1460 transitions. [2022-12-14 12:22:03,307 INFO L78 Accepts]: Start accepts. Automaton has 1293 states and 1460 transitions. Word has length 61 [2022-12-14 12:22:03,307 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 12:22:03,307 INFO L495 AbstractCegarLoop]: Abstraction has 1293 states and 1460 transitions. [2022-12-14 12:22:03,307 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 82 states, 81 states have (on average 2.111111111111111) internal successors, (171), 81 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 12:22:03,307 INFO L276 IsEmpty]: Start isEmpty. Operand 1293 states and 1460 transitions. [2022-12-14 12:22:03,308 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-12-14 12:22:03,308 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 12:22:03,308 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 6, 6, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 12:22:03,314 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Ended with exit code 0 [2022-12-14 12:22:03,509 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable61,48 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:22:03,509 INFO L420 AbstractCegarLoop]: === Iteration 63 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 12:22:03,510 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 12:22:03,510 INFO L85 PathProgramCache]: Analyzing trace with hash 181115580, now seen corresponding path program 13 times [2022-12-14 12:22:03,510 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 12:22:03,511 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [656793703] [2022-12-14 12:22:03,511 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 12:22:03,511 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 12:22:03,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:22:04,873 INFO L134 CoverageAnalysis]: Checked inductivity of 143 backedges. 34 proven. 109 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:22:04,873 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 12:22:04,874 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [656793703] [2022-12-14 12:22:04,874 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [656793703] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 12:22:04,874 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1895166338] [2022-12-14 12:22:04,874 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 12:22:04,874 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 12:22:04,874 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 12:22:04,875 INFO L229 MonitoredProcess]: Starting monitored process 49 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 12:22:04,875 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_de66dedd-caed-405e-a692-b87a164526dd/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Waiting until timeout for monitored process [2022-12-14 12:22:05,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 12:22:05,070 INFO L263 TraceCheckSpWp]: Trace formula consists of 440 conjuncts, 101 conjunts are in the unsatisfiable core [2022-12-14 12:22:05,073 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 12:22:05,080 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 12:22:05,593 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 12:22:05,813 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 12:22:05,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 12:22:06,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 12:22:06,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 12:22:06,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 12:22:06,439 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 12:22:06,441 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:22:06,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 12:22:06,444 INFO L134 CoverageAnalysis]: Checked inductivity of 143 backedges. 34 proven. 109 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 12:22:06,444 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 12:22:06,533 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2676 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_2676) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 1)) 0)) is different from false [2022-12-14 12:22:06,634 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2676 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_2676) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 3)) 0)) is different from false [2022-12-14 12:22:06,644 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2676 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~s~0#1.base| v_ArrVal_2676) |c_ULTIMATE.start_cstrncat_~s2#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s2#1.offset| 4)) 0)) is different from false [2022-12-14 12:22:06,839 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:22:06,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 12:22:06,845 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 12:22:06,845 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 36 [2022-12-14 12:22:06,849 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7