./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/openbsd_cstrcat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/openbsd_cstrcat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8688e0efa9d37c2205606fbd307da42d83b0f0e2936dd15336b8b67e136d86b0 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 15:54:57,418 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 15:54:57,420 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 15:54:57,433 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 15:54:57,433 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 15:54:57,434 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 15:54:57,435 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 15:54:57,436 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 15:54:57,437 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 15:54:57,438 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 15:54:57,439 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 15:54:57,439 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 15:54:57,440 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 15:54:57,440 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 15:54:57,441 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 15:54:57,442 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 15:54:57,442 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 15:54:57,443 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 15:54:57,444 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 15:54:57,445 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 15:54:57,446 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 15:54:57,447 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 15:54:57,448 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 15:54:57,448 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 15:54:57,451 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 15:54:57,451 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 15:54:57,451 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 15:54:57,452 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 15:54:57,452 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 15:54:57,453 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 15:54:57,453 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 15:54:57,453 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 15:54:57,454 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 15:54:57,454 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 15:54:57,455 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 15:54:57,455 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 15:54:57,456 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 15:54:57,456 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 15:54:57,456 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 15:54:57,457 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 15:54:57,457 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 15:54:57,458 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-12-14 15:54:57,473 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 15:54:57,473 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 15:54:57,473 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 15:54:57,473 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 15:54:57,474 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 15:54:57,474 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 15:54:57,474 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 15:54:57,474 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 15:54:57,474 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 15:54:57,474 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 15:54:57,475 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 15:54:57,475 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 15:54:57,475 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 15:54:57,475 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 15:54:57,475 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 15:54:57,475 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 15:54:57,475 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 15:54:57,475 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 15:54:57,476 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-14 15:54:57,476 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-14 15:54:57,476 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 15:54:57,476 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 15:54:57,476 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-14 15:54:57,477 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 15:54:57,477 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 15:54:57,477 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 15:54:57,477 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-12-14 15:54:57,477 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-12-14 15:54:57,477 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-12-14 15:54:57,477 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 15:54:57,477 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-12-14 15:54:57,477 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 15:54:57,478 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 15:54:57,478 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 15:54:57,478 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 15:54:57,478 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 15:54:57,478 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 15:54:57,478 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 15:54:57,478 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 15:54:57,478 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 15:54:57,479 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 15:54:57,479 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 15:54:57,479 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8688e0efa9d37c2205606fbd307da42d83b0f0e2936dd15336b8b67e136d86b0 [2022-12-14 15:54:57,641 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 15:54:57,658 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 15:54:57,660 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 15:54:57,661 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 15:54:57,661 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 15:54:57,662 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/array-memsafety/openbsd_cstrcat-alloca-2.i [2022-12-14 15:55:00,210 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 15:55:00,407 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 15:55:00,408 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/sv-benchmarks/c/array-memsafety/openbsd_cstrcat-alloca-2.i [2022-12-14 15:55:00,420 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/data/257638557/e8c03b3fafa84542b954b74c7f3e6206/FLAG43ae770f3 [2022-12-14 15:55:00,788 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/data/257638557/e8c03b3fafa84542b954b74c7f3e6206 [2022-12-14 15:55:00,792 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 15:55:00,794 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 15:55:00,796 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 15:55:00,796 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 15:55:00,802 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 15:55:00,803 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 03:55:00" (1/1) ... [2022-12-14 15:55:00,804 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@27bbd61e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:00, skipping insertion in model container [2022-12-14 15:55:00,805 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 03:55:00" (1/1) ... [2022-12-14 15:55:00,816 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 15:55:00,856 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 15:55:01,069 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 15:55:01,080 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 15:55:01,110 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 15:55:01,125 INFO L208 MainTranslator]: Completed translation [2022-12-14 15:55:01,126 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:01 WrapperNode [2022-12-14 15:55:01,126 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 15:55:01,126 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 15:55:01,127 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 15:55:01,127 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 15:55:01,132 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:01" (1/1) ... [2022-12-14 15:55:01,140 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:01" (1/1) ... [2022-12-14 15:55:01,154 INFO L138 Inliner]: procedures = 117, calls = 16, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 94 [2022-12-14 15:55:01,154 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 15:55:01,155 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 15:55:01,155 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 15:55:01,155 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 15:55:01,161 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:01" (1/1) ... [2022-12-14 15:55:01,161 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:01" (1/1) ... [2022-12-14 15:55:01,163 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:01" (1/1) ... [2022-12-14 15:55:01,163 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:01" (1/1) ... [2022-12-14 15:55:01,167 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:01" (1/1) ... [2022-12-14 15:55:01,170 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:01" (1/1) ... [2022-12-14 15:55:01,171 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:01" (1/1) ... [2022-12-14 15:55:01,172 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:01" (1/1) ... [2022-12-14 15:55:01,173 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 15:55:01,174 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 15:55:01,174 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 15:55:01,174 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 15:55:01,174 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:01" (1/1) ... [2022-12-14 15:55:01,179 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 15:55:01,186 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:01,197 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 15:55:01,199 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 15:55:01,231 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-12-14 15:55:01,231 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-12-14 15:55:01,231 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-12-14 15:55:01,232 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-12-14 15:55:01,232 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 15:55:01,232 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 15:55:01,314 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 15:55:01,316 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 15:55:01,473 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 15:55:01,535 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 15:55:01,535 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-12-14 15:55:01,538 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 03:55:01 BoogieIcfgContainer [2022-12-14 15:55:01,538 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 15:55:01,541 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 15:55:01,541 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 15:55:01,545 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 15:55:01,545 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 03:55:00" (1/3) ... [2022-12-14 15:55:01,546 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@9de804b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 03:55:01, skipping insertion in model container [2022-12-14 15:55:01,546 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 03:55:01" (2/3) ... [2022-12-14 15:55:01,546 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@9de804b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 03:55:01, skipping insertion in model container [2022-12-14 15:55:01,546 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 03:55:01" (3/3) ... [2022-12-14 15:55:01,548 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstrcat-alloca-2.i [2022-12-14 15:55:01,564 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 15:55:01,564 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 15 error locations. [2022-12-14 15:55:01,597 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 15:55:01,602 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@9834546, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 15:55:01,602 INFO L358 AbstractCegarLoop]: Starting to check reachability of 15 error locations. [2022-12-14 15:55:01,605 INFO L276 IsEmpty]: Start isEmpty. Operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:01,609 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-12-14 15:55:01,609 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:01,610 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-12-14 15:55:01,610 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:01,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:01,614 INFO L85 PathProgramCache]: Analyzing trace with hash 151696, now seen corresponding path program 1 times [2022-12-14 15:55:01,621 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:01,621 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [236492389] [2022-12-14 15:55:01,621 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:01,622 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:01,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:01,782 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:01,783 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:01,783 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [236492389] [2022-12-14 15:55:01,783 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [236492389] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:01,784 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:01,784 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-12-14 15:55:01,786 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1059475359] [2022-12-14 15:55:01,786 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:01,791 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 15:55:01,791 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:01,820 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 15:55:01,821 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:55:01,823 INFO L87 Difference]: Start difference. First operand has 32 states, 16 states have (on average 2.375) internal successors, (38), 31 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:01,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:01,882 INFO L93 Difference]: Finished difference Result 33 states and 37 transitions. [2022-12-14 15:55:01,884 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 15:55:01,885 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-12-14 15:55:01,885 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:01,893 INFO L225 Difference]: With dead ends: 33 [2022-12-14 15:55:01,893 INFO L226 Difference]: Without dead ends: 31 [2022-12-14 15:55:01,895 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:55:01,898 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 1 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 39 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:01,899 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 39 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:01,913 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31 states. [2022-12-14 15:55:01,921 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31 to 31. [2022-12-14 15:55:01,922 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 16 states have (on average 2.125) internal successors, (34), 30 states have internal predecessors, (34), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:01,923 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 34 transitions. [2022-12-14 15:55:01,924 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 34 transitions. Word has length 3 [2022-12-14 15:55:01,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:01,925 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 34 transitions. [2022-12-14 15:55:01,925 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:01,925 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 34 transitions. [2022-12-14 15:55:01,925 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 15:55:01,925 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:01,925 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 15:55:01,926 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 15:55:01,926 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:01,927 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:01,927 INFO L85 PathProgramCache]: Analyzing trace with hash 4702270, now seen corresponding path program 1 times [2022-12-14 15:55:01,927 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:01,927 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [841884284] [2022-12-14 15:55:01,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:01,928 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:01,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:02,157 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:02,157 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:02,158 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [841884284] [2022-12-14 15:55:02,158 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [841884284] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:02,158 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:02,158 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 15:55:02,158 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1217882512] [2022-12-14 15:55:02,158 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:02,160 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 15:55:02,160 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:02,160 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 15:55:02,160 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:55:02,161 INFO L87 Difference]: Start difference. First operand 31 states and 34 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:02,191 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:02,191 INFO L93 Difference]: Finished difference Result 29 states and 32 transitions. [2022-12-14 15:55:02,192 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 15:55:02,192 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 15:55:02,192 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:02,192 INFO L225 Difference]: With dead ends: 29 [2022-12-14 15:55:02,193 INFO L226 Difference]: Without dead ends: 29 [2022-12-14 15:55:02,193 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:55:02,194 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 27 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:02,195 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 13 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:02,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-12-14 15:55:02,198 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-12-14 15:55:02,198 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 16 states have (on average 2.0) internal successors, (32), 28 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:02,198 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 32 transitions. [2022-12-14 15:55:02,199 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 32 transitions. Word has length 4 [2022-12-14 15:55:02,199 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:02,199 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 32 transitions. [2022-12-14 15:55:02,199 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:02,199 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 32 transitions. [2022-12-14 15:55:02,200 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 15:55:02,200 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:02,200 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 15:55:02,200 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 15:55:02,200 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:02,201 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:02,201 INFO L85 PathProgramCache]: Analyzing trace with hash 4702271, now seen corresponding path program 1 times [2022-12-14 15:55:02,201 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:02,201 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [299455430] [2022-12-14 15:55:02,201 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:02,202 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:02,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:02,385 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:02,386 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:02,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [299455430] [2022-12-14 15:55:02,386 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [299455430] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:02,386 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:02,386 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 15:55:02,386 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1557317951] [2022-12-14 15:55:02,387 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:02,387 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 15:55:02,387 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:02,388 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 15:55:02,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-12-14 15:55:02,388 INFO L87 Difference]: Start difference. First operand 29 states and 32 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:02,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:02,487 INFO L93 Difference]: Finished difference Result 55 states and 61 transitions. [2022-12-14 15:55:02,487 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 15:55:02,487 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 15:55:02,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:02,488 INFO L225 Difference]: With dead ends: 55 [2022-12-14 15:55:02,488 INFO L226 Difference]: Without dead ends: 55 [2022-12-14 15:55:02,489 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-12-14 15:55:02,490 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 87 mSDsluCounter, 22 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 87 SdHoareTripleChecker+Valid, 34 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:02,490 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [87 Valid, 34 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:55:02,491 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-12-14 15:55:02,493 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 31. [2022-12-14 15:55:02,494 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 18 states have (on average 1.9444444444444444) internal successors, (35), 30 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:02,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 35 transitions. [2022-12-14 15:55:02,495 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 35 transitions. Word has length 4 [2022-12-14 15:55:02,495 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:02,495 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 35 transitions. [2022-12-14 15:55:02,495 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:02,495 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 35 transitions. [2022-12-14 15:55:02,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 15:55:02,496 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:02,496 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 15:55:02,496 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 15:55:02,496 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:02,497 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:02,497 INFO L85 PathProgramCache]: Analyzing trace with hash 145855487, now seen corresponding path program 1 times [2022-12-14 15:55:02,497 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:02,497 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [372100492] [2022-12-14 15:55:02,498 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:02,498 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:02,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:02,536 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:02,536 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:02,536 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [372100492] [2022-12-14 15:55:02,536 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [372100492] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:02,536 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:02,537 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 15:55:02,537 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1202000375] [2022-12-14 15:55:02,537 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:02,537 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 15:55:02,537 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:02,538 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 15:55:02,538 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:55:02,538 INFO L87 Difference]: Start difference. First operand 31 states and 35 transitions. Second operand has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:02,559 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:02,559 INFO L93 Difference]: Finished difference Result 29 states and 33 transitions. [2022-12-14 15:55:02,560 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 15:55:02,560 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 15:55:02,560 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:02,560 INFO L225 Difference]: With dead ends: 29 [2022-12-14 15:55:02,560 INFO L226 Difference]: Without dead ends: 29 [2022-12-14 15:55:02,560 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:55:02,561 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 24 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:02,562 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 13 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:02,562 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-12-14 15:55:02,563 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-12-14 15:55:02,563 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 18 states have (on average 1.8333333333333333) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:02,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-12-14 15:55:02,564 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 5 [2022-12-14 15:55:02,564 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:02,564 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-12-14 15:55:02,564 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.5) internal successors, (5), 3 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:02,564 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-12-14 15:55:02,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 15:55:02,567 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:02,568 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 15:55:02,568 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-14 15:55:02,568 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:02,569 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:02,569 INFO L85 PathProgramCache]: Analyzing trace with hash 145855488, now seen corresponding path program 1 times [2022-12-14 15:55:02,569 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:02,569 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1272908043] [2022-12-14 15:55:02,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:02,569 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:02,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:02,714 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:02,715 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:02,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1272908043] [2022-12-14 15:55:02,715 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1272908043] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:02,715 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:02,715 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 15:55:02,715 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1519312068] [2022-12-14 15:55:02,715 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:02,716 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 15:55:02,716 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:02,716 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 15:55:02,716 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-12-14 15:55:02,717 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:02,861 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:02,861 INFO L93 Difference]: Finished difference Result 50 states and 56 transitions. [2022-12-14 15:55:02,862 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 15:55:02,862 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 15:55:02,862 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:02,863 INFO L225 Difference]: With dead ends: 50 [2022-12-14 15:55:02,863 INFO L226 Difference]: Without dead ends: 50 [2022-12-14 15:55:02,863 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=44, Unknown=0, NotChecked=0, Total=72 [2022-12-14 15:55:02,864 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 124 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 65 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 124 SdHoareTripleChecker+Valid, 24 SdHoareTripleChecker+Invalid, 65 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 65 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:02,864 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [124 Valid, 24 Invalid, 65 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 65 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:55:02,865 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-12-14 15:55:02,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 31. [2022-12-14 15:55:02,866 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31 states, 20 states have (on average 1.8) internal successors, (36), 30 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:02,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31 states to 31 states and 36 transitions. [2022-12-14 15:55:02,866 INFO L78 Accepts]: Start accepts. Automaton has 31 states and 36 transitions. Word has length 5 [2022-12-14 15:55:02,867 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:02,867 INFO L495 AbstractCegarLoop]: Abstraction has 31 states and 36 transitions. [2022-12-14 15:55:02,867 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.0) internal successors, (5), 5 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:02,867 INFO L276 IsEmpty]: Start isEmpty. Operand 31 states and 36 transitions. [2022-12-14 15:55:02,867 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 15:55:02,867 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:02,867 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 15:55:02,867 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 15:55:02,867 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:02,868 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:02,868 INFO L85 PathProgramCache]: Analyzing trace with hash 145857698, now seen corresponding path program 1 times [2022-12-14 15:55:02,868 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:02,868 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1870190031] [2022-12-14 15:55:02,868 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:02,868 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:02,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:02,994 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:02,995 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:02,995 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1870190031] [2022-12-14 15:55:02,995 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1870190031] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:02,995 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:02,995 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 15:55:02,995 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1945756164] [2022-12-14 15:55:02,995 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:02,996 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 15:55:02,996 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:02,996 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 15:55:02,996 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-12-14 15:55:02,996 INFO L87 Difference]: Start difference. First operand 31 states and 36 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:03,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:03,071 INFO L93 Difference]: Finished difference Result 54 states and 62 transitions. [2022-12-14 15:55:03,071 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 15:55:03,072 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 15:55:03,072 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:03,072 INFO L225 Difference]: With dead ends: 54 [2022-12-14 15:55:03,072 INFO L226 Difference]: Without dead ends: 54 [2022-12-14 15:55:03,073 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-12-14 15:55:03,073 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 53 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:03,074 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 28 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:55:03,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2022-12-14 15:55:03,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 36. [2022-12-14 15:55:03,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 25 states have (on average 1.76) internal successors, (44), 35 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:03,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 44 transitions. [2022-12-14 15:55:03,076 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 44 transitions. Word has length 5 [2022-12-14 15:55:03,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:03,076 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 44 transitions. [2022-12-14 15:55:03,076 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:03,077 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 44 transitions. [2022-12-14 15:55:03,077 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 15:55:03,077 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:03,077 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-12-14 15:55:03,077 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-14 15:55:03,077 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:03,077 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:03,077 INFO L85 PathProgramCache]: Analyzing trace with hash 223989230, now seen corresponding path program 1 times [2022-12-14 15:55:03,077 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:03,078 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [938958224] [2022-12-14 15:55:03,078 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:03,078 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:03,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:03,251 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:03,251 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:03,252 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [938958224] [2022-12-14 15:55:03,252 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [938958224] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:03,252 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1798094667] [2022-12-14 15:55:03,252 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:03,252 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:03,252 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:03,253 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:03,254 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 15:55:03,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:03,302 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 22 conjunts are in the unsatisfiable core [2022-12-14 15:55:03,308 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:03,430 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:03,438 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 15:55:03,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:55:03,536 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:03,537 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:03,695 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:03,721 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:03,722 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1798094667] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:03,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1117238755] [2022-12-14 15:55:03,740 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-12-14 15:55:03,741 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:03,745 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:03,750 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:03,751 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:03,829 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:03,831 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:03,832 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:03,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:03,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:03,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:04,007 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:04,309 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '549#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_#t~nondet13#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet13#1|)) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:04,309 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:04,309 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:04,310 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 12 [2022-12-14 15:55:04,310 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1498131649] [2022-12-14 15:55:04,310 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:04,310 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 15:55:04,310 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:04,311 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 15:55:04,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=65, Invalid=241, Unknown=0, NotChecked=0, Total=306 [2022-12-14 15:55:04,312 INFO L87 Difference]: Start difference. First operand 36 states and 44 transitions. Second operand has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:04,658 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:04,658 INFO L93 Difference]: Finished difference Result 78 states and 90 transitions. [2022-12-14 15:55:04,659 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 15:55:04,659 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 15:55:04,659 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:04,659 INFO L225 Difference]: With dead ends: 78 [2022-12-14 15:55:04,659 INFO L226 Difference]: Without dead ends: 78 [2022-12-14 15:55:04,660 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=122, Invalid=384, Unknown=0, NotChecked=0, Total=506 [2022-12-14 15:55:04,660 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 354 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 241 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 354 SdHoareTripleChecker+Valid, 104 SdHoareTripleChecker+Invalid, 244 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:04,660 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [354 Valid, 104 Invalid, 244 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 241 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 15:55:04,661 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2022-12-14 15:55:04,664 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 34. [2022-12-14 15:55:04,664 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 24 states have (on average 1.75) internal successors, (42), 33 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:04,664 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 42 transitions. [2022-12-14 15:55:04,664 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 42 transitions. Word has length 6 [2022-12-14 15:55:04,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:04,665 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 42 transitions. [2022-12-14 15:55:04,665 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:04,665 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 42 transitions. [2022-12-14 15:55:04,665 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 15:55:04,665 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:04,665 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-12-14 15:55:04,671 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 15:55:04,866 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:04,867 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:04,868 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:04,869 INFO L85 PathProgramCache]: Analyzing trace with hash 226621346, now seen corresponding path program 1 times [2022-12-14 15:55:04,869 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:04,870 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1582691443] [2022-12-14 15:55:04,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:04,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:04,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:05,110 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:05,111 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:05,111 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1582691443] [2022-12-14 15:55:05,111 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1582691443] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:05,111 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:05,111 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 15:55:05,111 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [649765814] [2022-12-14 15:55:05,111 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:05,111 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 15:55:05,112 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:05,112 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 15:55:05,112 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-12-14 15:55:05,112 INFO L87 Difference]: Start difference. First operand 34 states and 42 transitions. Second operand has 6 states, 5 states have (on average 1.2) internal successors, (6), 5 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:05,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:05,250 INFO L93 Difference]: Finished difference Result 53 states and 62 transitions. [2022-12-14 15:55:05,250 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 15:55:05,250 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.2) internal successors, (6), 5 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 15:55:05,251 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:05,251 INFO L225 Difference]: With dead ends: 53 [2022-12-14 15:55:05,251 INFO L226 Difference]: Without dead ends: 53 [2022-12-14 15:55:05,251 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2022-12-14 15:55:05,252 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 116 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 116 SdHoareTripleChecker+Valid, 27 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:05,252 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [116 Valid, 27 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:55:05,252 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2022-12-14 15:55:05,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 37. [2022-12-14 15:55:05,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 27 states have (on average 1.7037037037037037) internal successors, (46), 36 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:05,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 46 transitions. [2022-12-14 15:55:05,254 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 46 transitions. Word has length 6 [2022-12-14 15:55:05,254 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:05,254 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 46 transitions. [2022-12-14 15:55:05,254 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.2) internal successors, (6), 5 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:05,254 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 46 transitions. [2022-12-14 15:55:05,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 15:55:05,254 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:05,254 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:05,254 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-14 15:55:05,255 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:05,255 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:05,255 INFO L85 PathProgramCache]: Analyzing trace with hash -1646181165, now seen corresponding path program 1 times [2022-12-14 15:55:05,255 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:05,255 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1373921320] [2022-12-14 15:55:05,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:05,255 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:05,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:05,451 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:05,451 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:05,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1373921320] [2022-12-14 15:55:05,451 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1373921320] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:05,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [795950953] [2022-12-14 15:55:05,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:05,451 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:05,452 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:05,452 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:05,453 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 15:55:05,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:05,499 INFO L263 TraceCheckSpWp]: Trace formula consists of 73 conjuncts, 19 conjunts are in the unsatisfiable core [2022-12-14 15:55:05,501 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:05,536 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:05,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 15:55:05,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:55:05,607 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:05,607 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:05,663 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:05,677 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:05,678 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [795950953] provided 1 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:05,678 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-12-14 15:55:05,678 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [5, 3] total 11 [2022-12-14 15:55:05,678 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1113397839] [2022-12-14 15:55:05,678 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:05,678 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 15:55:05,679 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:05,679 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 15:55:05,679 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=93, Unknown=0, NotChecked=0, Total=132 [2022-12-14 15:55:05,679 INFO L87 Difference]: Start difference. First operand 37 states and 46 transitions. Second operand has 5 states, 4 states have (on average 1.75) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:05,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:05,738 INFO L93 Difference]: Finished difference Result 37 states and 44 transitions. [2022-12-14 15:55:05,739 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 15:55:05,739 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 15:55:05,739 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:05,739 INFO L225 Difference]: With dead ends: 37 [2022-12-14 15:55:05,739 INFO L226 Difference]: Without dead ends: 37 [2022-12-14 15:55:05,740 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=55, Invalid=127, Unknown=0, NotChecked=0, Total=182 [2022-12-14 15:55:05,740 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 53 mSDsluCounter, 1 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 11 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:05,741 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 11 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:05,741 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-12-14 15:55:05,742 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 29. [2022-12-14 15:55:05,743 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 20 states have (on average 1.65) internal successors, (33), 28 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:05,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2022-12-14 15:55:05,743 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 7 [2022-12-14 15:55:05,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:05,744 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2022-12-14 15:55:05,744 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.75) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:05,744 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2022-12-14 15:55:05,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 15:55:05,744 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:05,744 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1] [2022-12-14 15:55:05,749 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 15:55:05,945 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2022-12-14 15:55:05,946 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:05,947 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:05,947 INFO L85 PathProgramCache]: Analyzing trace with hash -1566734622, now seen corresponding path program 1 times [2022-12-14 15:55:05,947 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:05,948 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [62711813] [2022-12-14 15:55:05,948 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:05,948 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:05,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:06,231 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:06,231 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:06,231 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [62711813] [2022-12-14 15:55:06,232 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [62711813] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:06,232 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [443128974] [2022-12-14 15:55:06,232 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:06,232 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:06,232 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:06,233 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:06,234 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 15:55:06,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:06,285 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 17 conjunts are in the unsatisfiable core [2022-12-14 15:55:06,286 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:06,328 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:55:06,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:55:06,418 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:06,418 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:06,534 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:06,534 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [443128974] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:06,534 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1755106008] [2022-12-14 15:55:06,536 INFO L159 IcfgInterpreter]: Started Sifa with 6 locations of interest [2022-12-14 15:55:06,536 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:06,536 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:06,536 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:06,537 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:06,575 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:06,577 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:06,578 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:06,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:06,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:06,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:06,756 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:07,244 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '948#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_#t~nondet15#1| 127) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet15#1|)) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:07,244 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:07,244 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:07,244 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-12-14 15:55:07,244 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2123432630] [2022-12-14 15:55:07,244 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:07,244 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-12-14 15:55:07,244 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:07,245 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-12-14 15:55:07,245 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=87, Invalid=375, Unknown=0, NotChecked=0, Total=462 [2022-12-14 15:55:07,245 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:07,641 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:07,641 INFO L93 Difference]: Finished difference Result 63 states and 70 transitions. [2022-12-14 15:55:07,641 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 15:55:07,642 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 15:55:07,642 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:07,642 INFO L225 Difference]: With dead ends: 63 [2022-12-14 15:55:07,642 INFO L226 Difference]: Without dead ends: 63 [2022-12-14 15:55:07,643 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 99 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=188, Invalid=624, Unknown=0, NotChecked=0, Total=812 [2022-12-14 15:55:07,643 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 431 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 175 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 431 SdHoareTripleChecker+Valid, 88 SdHoareTripleChecker+Invalid, 179 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 175 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:07,644 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [431 Valid, 88 Invalid, 179 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 175 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:55:07,644 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-12-14 15:55:07,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 27. [2022-12-14 15:55:07,646 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 19 states have (on average 1.631578947368421) internal successors, (31), 26 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:07,646 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 31 transitions. [2022-12-14 15:55:07,646 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 31 transitions. Word has length 7 [2022-12-14 15:55:07,647 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:07,647 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 31 transitions. [2022-12-14 15:55:07,647 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.3125) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:07,647 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 31 transitions. [2022-12-14 15:55:07,647 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 15:55:07,647 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:07,647 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:07,652 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 15:55:07,848 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-14 15:55:07,849 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:07,849 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:07,850 INFO L85 PathProgramCache]: Analyzing trace with hash -1564671430, now seen corresponding path program 1 times [2022-12-14 15:55:07,850 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:07,850 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [461617747] [2022-12-14 15:55:07,850 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:07,851 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:07,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:07,959 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:07,959 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:07,959 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [461617747] [2022-12-14 15:55:07,960 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [461617747] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:07,960 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:07,960 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 15:55:07,960 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1118727024] [2022-12-14 15:55:07,960 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:07,961 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 15:55:07,961 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:07,961 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 15:55:07,962 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:55:07,962 INFO L87 Difference]: Start difference. First operand 27 states and 31 transitions. Second operand has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:07,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:07,990 INFO L93 Difference]: Finished difference Result 26 states and 30 transitions. [2022-12-14 15:55:07,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 15:55:07,990 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 15:55:07,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:07,991 INFO L225 Difference]: With dead ends: 26 [2022-12-14 15:55:07,991 INFO L226 Difference]: Without dead ends: 26 [2022-12-14 15:55:07,991 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 15:55:07,992 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 11 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:07,992 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 14 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:07,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26 states. [2022-12-14 15:55:07,994 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26 to 26. [2022-12-14 15:55:07,994 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 19 states have (on average 1.5789473684210527) internal successors, (30), 25 states have internal predecessors, (30), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:07,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 30 transitions. [2022-12-14 15:55:07,994 INFO L78 Accepts]: Start accepts. Automaton has 26 states and 30 transitions. Word has length 7 [2022-12-14 15:55:07,994 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:07,995 INFO L495 AbstractCegarLoop]: Abstraction has 26 states and 30 transitions. [2022-12-14 15:55:07,995 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:07,995 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 30 transitions. [2022-12-14 15:55:07,995 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 15:55:07,995 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:07,995 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:07,996 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-12-14 15:55:07,996 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:07,996 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:07,996 INFO L85 PathProgramCache]: Analyzing trace with hash -1564671429, now seen corresponding path program 1 times [2022-12-14 15:55:07,996 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:07,996 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [441739737] [2022-12-14 15:55:07,996 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:07,997 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:08,007 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:08,087 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:08,087 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:08,087 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [441739737] [2022-12-14 15:55:08,088 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [441739737] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:08,088 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:08,088 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 15:55:08,088 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [705190720] [2022-12-14 15:55:08,088 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:08,088 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 15:55:08,088 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:08,089 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 15:55:08,089 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 15:55:08,089 INFO L87 Difference]: Start difference. First operand 26 states and 30 transitions. Second operand has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:08,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:08,118 INFO L93 Difference]: Finished difference Result 29 states and 34 transitions. [2022-12-14 15:55:08,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 15:55:08,119 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 15:55:08,119 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:08,119 INFO L225 Difference]: With dead ends: 29 [2022-12-14 15:55:08,119 INFO L226 Difference]: Without dead ends: 29 [2022-12-14 15:55:08,119 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 15:55:08,120 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 27 mSDsluCounter, 8 mSDsCounter, 0 mSdLazyCounter, 29 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 23 SdHoareTripleChecker+Invalid, 29 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 29 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:08,120 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 23 Invalid, 29 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 29 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:08,121 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-12-14 15:55:08,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 27. [2022-12-14 15:55:08,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 20 states have (on average 1.55) internal successors, (31), 26 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:08,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 31 transitions. [2022-12-14 15:55:08,122 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 31 transitions. Word has length 7 [2022-12-14 15:55:08,122 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:08,122 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 31 transitions. [2022-12-14 15:55:08,123 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 4 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:08,123 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 31 transitions. [2022-12-14 15:55:08,123 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-12-14 15:55:08,123 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:08,123 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:08,123 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-12-14 15:55:08,123 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:08,124 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:08,124 INFO L85 PathProgramCache]: Analyzing trace with hash -1324064512, now seen corresponding path program 1 times [2022-12-14 15:55:08,124 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:08,124 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1948673031] [2022-12-14 15:55:08,124 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:08,124 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:08,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:08,245 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:08,245 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:08,245 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1948673031] [2022-12-14 15:55:08,245 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1948673031] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:08,245 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1109669646] [2022-12-14 15:55:08,246 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:08,246 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:08,246 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:08,247 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:08,247 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-12-14 15:55:08,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:08,296 INFO L263 TraceCheckSpWp]: Trace formula consists of 81 conjuncts, 20 conjunts are in the unsatisfiable core [2022-12-14 15:55:08,297 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:08,338 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 15:55:08,338 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 15:55:08,561 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:08,562 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:08,712 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:08,713 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1109669646] provided 1 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:08,713 INFO L184 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2022-12-14 15:55:08,713 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [5, 6] total 17 [2022-12-14 15:55:08,713 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1504619682] [2022-12-14 15:55:08,713 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:08,713 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-12-14 15:55:08,713 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:08,713 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-14 15:55:08,714 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=92, Invalid=250, Unknown=0, NotChecked=0, Total=342 [2022-12-14 15:55:08,714 INFO L87 Difference]: Start difference. First operand 27 states and 31 transitions. Second operand has 8 states, 7 states have (on average 1.1428571428571428) internal successors, (8), 7 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:08,864 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:08,864 INFO L93 Difference]: Finished difference Result 27 states and 31 transitions. [2022-12-14 15:55:08,864 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 15:55:08,865 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 1.1428571428571428) internal successors, (8), 7 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-12-14 15:55:08,865 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:08,865 INFO L225 Difference]: With dead ends: 27 [2022-12-14 15:55:08,865 INFO L226 Difference]: Without dead ends: 27 [2022-12-14 15:55:08,865 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 147 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=132, Invalid=420, Unknown=0, NotChecked=0, Total=552 [2022-12-14 15:55:08,866 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 79 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 7 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:08,866 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 7 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:08,867 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27 states. [2022-12-14 15:55:08,868 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27 to 23. [2022-12-14 15:55:08,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 17 states have (on average 1.5294117647058822) internal successors, (26), 22 states have internal predecessors, (26), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:08,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 26 transitions. [2022-12-14 15:55:08,868 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 26 transitions. Word has length 8 [2022-12-14 15:55:08,868 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:08,868 INFO L495 AbstractCegarLoop]: Abstraction has 23 states and 26 transitions. [2022-12-14 15:55:08,869 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 1.1428571428571428) internal successors, (8), 7 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:08,869 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 26 transitions. [2022-12-14 15:55:08,869 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-12-14 15:55:08,869 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:08,869 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:08,874 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-12-14 15:55:09,070 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2022-12-14 15:55:09,071 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:09,072 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:09,072 INFO L85 PathProgramCache]: Analyzing trace with hash -410687984, now seen corresponding path program 1 times [2022-12-14 15:55:09,072 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:09,072 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [497160945] [2022-12-14 15:55:09,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:09,073 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:09,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:09,370 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:09,370 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:09,370 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [497160945] [2022-12-14 15:55:09,370 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [497160945] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:09,370 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1774037593] [2022-12-14 15:55:09,370 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:09,371 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:09,371 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:09,372 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:09,372 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-12-14 15:55:09,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:09,418 INFO L263 TraceCheckSpWp]: Trace formula consists of 107 conjuncts, 26 conjunts are in the unsatisfiable core [2022-12-14 15:55:09,420 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:09,431 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:55:09,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:55:09,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:09,494 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:55:09,494 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-12-14 15:55:09,553 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:09,553 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:09,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-12-14 15:55:09,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-12-14 15:55:09,671 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:09,672 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1774037593] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:09,672 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1640516721] [2022-12-14 15:55:09,674 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 15:55:09,674 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:09,674 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:09,674 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:09,674 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:09,721 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:09,723 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:09,724 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:09,790 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:09,847 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:09,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:09,936 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:11,398 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1640516721] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:11,398 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:11,398 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [6, 5, 5] total 22 [2022-12-14 15:55:11,399 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2130069521] [2022-12-14 15:55:11,399 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:11,399 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-12-14 15:55:11,399 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:11,399 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-12-14 15:55:11,399 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=383, Unknown=0, NotChecked=0, Total=506 [2022-12-14 15:55:11,400 INFO L87 Difference]: Start difference. First operand 23 states and 26 transitions. Second operand has 9 states, 8 states have (on average 1.125) internal successors, (9), 8 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:11,595 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:11,595 INFO L93 Difference]: Finished difference Result 65 states and 73 transitions. [2022-12-14 15:55:11,595 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 15:55:11,596 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 1.125) internal successors, (9), 8 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-12-14 15:55:11,596 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:11,596 INFO L225 Difference]: With dead ends: 65 [2022-12-14 15:55:11,596 INFO L226 Difference]: Without dead ends: 62 [2022-12-14 15:55:11,597 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 110 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=123, Invalid=383, Unknown=0, NotChecked=0, Total=506 [2022-12-14 15:55:11,597 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 57 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 124 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 57 SdHoareTripleChecker+Valid, 24 SdHoareTripleChecker+Invalid, 128 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 124 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:11,597 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [57 Valid, 24 Invalid, 128 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 124 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 15:55:11,598 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-12-14 15:55:11,599 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 40. [2022-12-14 15:55:11,600 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40 states, 34 states have (on average 1.5294117647058822) internal successors, (52), 39 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:11,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 52 transitions. [2022-12-14 15:55:11,600 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 52 transitions. Word has length 9 [2022-12-14 15:55:11,600 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:11,600 INFO L495 AbstractCegarLoop]: Abstraction has 40 states and 52 transitions. [2022-12-14 15:55:11,601 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 1.125) internal successors, (9), 8 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:11,601 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 52 transitions. [2022-12-14 15:55:11,601 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-12-14 15:55:11,601 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:11,601 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:11,605 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-12-14 15:55:11,802 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-12-14 15:55:11,803 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:11,804 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:11,804 INFO L85 PathProgramCache]: Analyzing trace with hash 153538389, now seen corresponding path program 1 times [2022-12-14 15:55:11,804 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:11,805 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2048205277] [2022-12-14 15:55:11,805 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:11,805 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:11,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:11,848 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:11,849 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:11,849 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2048205277] [2022-12-14 15:55:11,849 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2048205277] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:11,849 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:11,849 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 15:55:11,849 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [762930876] [2022-12-14 15:55:11,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:11,849 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 15:55:11,849 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:11,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 15:55:11,850 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 15:55:11,850 INFO L87 Difference]: Start difference. First operand 40 states and 52 transitions. Second operand has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:11,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:11,883 INFO L93 Difference]: Finished difference Result 39 states and 50 transitions. [2022-12-14 15:55:11,884 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 15:55:11,884 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-12-14 15:55:11,884 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:11,884 INFO L225 Difference]: With dead ends: 39 [2022-12-14 15:55:11,884 INFO L226 Difference]: Without dead ends: 39 [2022-12-14 15:55:11,884 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-14 15:55:11,885 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 33 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 15 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:11,885 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 15 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:11,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2022-12-14 15:55:11,887 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 39. [2022-12-14 15:55:11,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39 states, 34 states have (on average 1.4705882352941178) internal successors, (50), 38 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:11,887 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 50 transitions. [2022-12-14 15:55:11,888 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 50 transitions. Word has length 10 [2022-12-14 15:55:11,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:11,888 INFO L495 AbstractCegarLoop]: Abstraction has 39 states and 50 transitions. [2022-12-14 15:55:11,888 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:11,888 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 50 transitions. [2022-12-14 15:55:11,888 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-12-14 15:55:11,888 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:11,888 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:11,889 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-12-14 15:55:11,889 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:11,889 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:11,889 INFO L85 PathProgramCache]: Analyzing trace with hash 153538390, now seen corresponding path program 1 times [2022-12-14 15:55:11,889 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:11,889 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2026051493] [2022-12-14 15:55:11,889 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:11,890 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:11,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:11,977 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:11,977 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:11,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2026051493] [2022-12-14 15:55:11,977 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2026051493] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:11,977 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:11,977 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-14 15:55:11,977 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [452171595] [2022-12-14 15:55:11,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:11,978 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 15:55:11,978 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:11,978 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 15:55:11,978 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-12-14 15:55:11,978 INFO L87 Difference]: Start difference. First operand 39 states and 50 transitions. Second operand has 6 states, 5 states have (on average 2.0) internal successors, (10), 6 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:12,033 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:12,033 INFO L93 Difference]: Finished difference Result 50 states and 64 transitions. [2022-12-14 15:55:12,034 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 15:55:12,034 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.0) internal successors, (10), 6 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-12-14 15:55:12,034 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:12,034 INFO L225 Difference]: With dead ends: 50 [2022-12-14 15:55:12,034 INFO L226 Difference]: Without dead ends: 50 [2022-12-14 15:55:12,035 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=20, Invalid=36, Unknown=0, NotChecked=0, Total=56 [2022-12-14 15:55:12,035 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 36 mSDsluCounter, 17 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 27 SdHoareTripleChecker+Invalid, 70 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:12,036 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 27 Invalid, 70 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:12,036 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-12-14 15:55:12,037 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 43. [2022-12-14 15:55:12,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 38 states have (on average 1.4210526315789473) internal successors, (54), 42 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:12,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 54 transitions. [2022-12-14 15:55:12,038 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 54 transitions. Word has length 10 [2022-12-14 15:55:12,038 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:12,038 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 54 transitions. [2022-12-14 15:55:12,038 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.0) internal successors, (10), 6 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:12,038 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 54 transitions. [2022-12-14 15:55:12,039 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 15:55:12,039 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:12,039 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:12,039 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-12-14 15:55:12,039 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:12,040 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:12,040 INFO L85 PathProgramCache]: Analyzing trace with hash -1890349631, now seen corresponding path program 1 times [2022-12-14 15:55:12,040 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:12,040 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1935866562] [2022-12-14 15:55:12,040 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:12,040 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:12,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:12,230 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:12,230 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:12,230 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1935866562] [2022-12-14 15:55:12,230 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1935866562] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:12,230 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [910784085] [2022-12-14 15:55:12,230 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:12,231 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:12,231 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:12,232 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:12,232 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-12-14 15:55:12,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:12,289 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 24 conjunts are in the unsatisfiable core [2022-12-14 15:55:12,291 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:12,335 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 15:55:12,360 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:12,362 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:55:12,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-12-14 15:55:12,373 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:55:12,374 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 15:55:12,374 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [910784085] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:12,374 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 15:55:12,374 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [6] total 13 [2022-12-14 15:55:12,374 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [579897382] [2022-12-14 15:55:12,374 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:12,375 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-12-14 15:55:12,375 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:12,375 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-14 15:55:12,375 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=127, Unknown=0, NotChecked=0, Total=156 [2022-12-14 15:55:12,375 INFO L87 Difference]: Start difference. First operand 43 states and 54 transitions. Second operand has 7 states, 7 states have (on average 1.5714285714285714) internal successors, (11), 7 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:12,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:12,469 INFO L93 Difference]: Finished difference Result 68 states and 83 transitions. [2022-12-14 15:55:12,470 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-14 15:55:12,470 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 1.5714285714285714) internal successors, (11), 7 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 15:55:12,470 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:12,470 INFO L225 Difference]: With dead ends: 68 [2022-12-14 15:55:12,470 INFO L226 Difference]: Without dead ends: 68 [2022-12-14 15:55:12,471 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=50, Invalid=190, Unknown=0, NotChecked=0, Total=240 [2022-12-14 15:55:12,471 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 53 mSDsluCounter, 49 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 61 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:12,472 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 61 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:12,472 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-12-14 15:55:12,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 48. [2022-12-14 15:55:12,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 43 states have (on average 1.3953488372093024) internal successors, (60), 47 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:12,474 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 60 transitions. [2022-12-14 15:55:12,474 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 60 transitions. Word has length 11 [2022-12-14 15:55:12,474 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:12,474 INFO L495 AbstractCegarLoop]: Abstraction has 48 states and 60 transitions. [2022-12-14 15:55:12,474 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 1.5714285714285714) internal successors, (11), 7 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:12,474 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 60 transitions. [2022-12-14 15:55:12,475 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 15:55:12,475 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:12,475 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:12,479 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-12-14 15:55:12,675 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:12,676 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:12,676 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:12,676 INFO L85 PathProgramCache]: Analyzing trace with hash -224847886, now seen corresponding path program 1 times [2022-12-14 15:55:12,676 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:12,676 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1707673503] [2022-12-14 15:55:12,676 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:12,676 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:12,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:12,797 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:12,797 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:12,797 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1707673503] [2022-12-14 15:55:12,797 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1707673503] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:12,797 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1229484125] [2022-12-14 15:55:12,797 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:12,797 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:12,797 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:12,798 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:12,799 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-12-14 15:55:12,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:12,861 INFO L263 TraceCheckSpWp]: Trace formula consists of 120 conjuncts, 18 conjunts are in the unsatisfiable core [2022-12-14 15:55:12,862 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:12,872 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:55:12,872 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:55:12,913 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:12,913 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:12,988 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:12,988 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1229484125] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:12,988 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1269506570] [2022-12-14 15:55:12,989 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 15:55:12,989 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:12,990 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:12,990 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:12,990 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:13,021 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:13,022 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:13,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:13,075 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:13,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:13,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:13,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:13,237 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:55:13,237 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:13,384 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:14,198 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1903#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:14,198 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:14,198 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:14,198 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6, 6] total 16 [2022-12-14 15:55:14,199 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1737435568] [2022-12-14 15:55:14,199 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:14,199 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-12-14 15:55:14,199 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:14,199 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-12-14 15:55:14,199 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=101, Invalid=499, Unknown=0, NotChecked=0, Total=600 [2022-12-14 15:55:14,200 INFO L87 Difference]: Start difference. First operand 48 states and 60 transitions. Second operand has 17 states, 16 states have (on average 1.8125) internal successors, (29), 17 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:14,364 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:14,364 INFO L93 Difference]: Finished difference Result 91 states and 112 transitions. [2022-12-14 15:55:14,364 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-12-14 15:55:14,364 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.8125) internal successors, (29), 17 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 15:55:14,365 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:14,365 INFO L225 Difference]: With dead ends: 91 [2022-12-14 15:55:14,365 INFO L226 Difference]: Without dead ends: 91 [2022-12-14 15:55:14,366 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 43 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 235 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=155, Invalid=715, Unknown=0, NotChecked=0, Total=870 [2022-12-14 15:55:14,366 INFO L413 NwaCegarLoop]: 21 mSDtfsCounter, 147 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 202 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 116 SdHoareTripleChecker+Invalid, 208 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 202 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:14,366 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [147 Valid, 116 Invalid, 208 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 202 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:55:14,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-12-14 15:55:14,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 52. [2022-12-14 15:55:14,368 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 47 states have (on average 1.4042553191489362) internal successors, (66), 51 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:14,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 66 transitions. [2022-12-14 15:55:14,368 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 66 transitions. Word has length 11 [2022-12-14 15:55:14,368 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:14,368 INFO L495 AbstractCegarLoop]: Abstraction has 52 states and 66 transitions. [2022-12-14 15:55:14,368 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.8125) internal successors, (29), 17 states have internal predecessors, (29), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:14,368 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 66 transitions. [2022-12-14 15:55:14,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 15:55:14,369 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:14,369 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:14,373 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2022-12-14 15:55:14,569 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-12-14 15:55:14,570 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr12REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:14,570 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:14,570 INFO L85 PathProgramCache]: Analyzing trace with hash 464722824, now seen corresponding path program 1 times [2022-12-14 15:55:14,570 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:14,570 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1289518738] [2022-12-14 15:55:14,570 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:14,570 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:14,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:14,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:14,591 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:14,591 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1289518738] [2022-12-14 15:55:14,591 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1289518738] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:14,591 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:14,591 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 15:55:14,591 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [439818044] [2022-12-14 15:55:14,592 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:14,592 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 15:55:14,592 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:14,592 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 15:55:14,592 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 15:55:14,592 INFO L87 Difference]: Start difference. First operand 52 states and 66 transitions. Second operand has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:14,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:14,620 INFO L93 Difference]: Finished difference Result 51 states and 64 transitions. [2022-12-14 15:55:14,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 15:55:14,620 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 15:55:14,620 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:14,621 INFO L225 Difference]: With dead ends: 51 [2022-12-14 15:55:14,621 INFO L226 Difference]: Without dead ends: 51 [2022-12-14 15:55:14,621 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 15:55:14,621 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 10 mSDsluCounter, 5 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 41 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:14,621 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 14 Invalid, 41 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:14,622 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 51 states. [2022-12-14 15:55:14,622 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51. [2022-12-14 15:55:14,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 47 states have (on average 1.3617021276595744) internal successors, (64), 50 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:14,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 64 transitions. [2022-12-14 15:55:14,623 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 64 transitions. Word has length 11 [2022-12-14 15:55:14,623 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:14,623 INFO L495 AbstractCegarLoop]: Abstraction has 51 states and 64 transitions. [2022-12-14 15:55:14,623 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:14,623 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 64 transitions. [2022-12-14 15:55:14,624 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 15:55:14,624 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:14,624 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:14,624 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-12-14 15:55:14,624 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:14,624 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:14,625 INFO L85 PathProgramCache]: Analyzing trace with hash 464722825, now seen corresponding path program 1 times [2022-12-14 15:55:14,625 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:14,625 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [464055206] [2022-12-14 15:55:14,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:14,625 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:14,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:14,693 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:14,693 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:14,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [464055206] [2022-12-14 15:55:14,694 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [464055206] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:14,694 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:14,694 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 15:55:14,694 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2113145415] [2022-12-14 15:55:14,694 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:14,694 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 15:55:14,694 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:14,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 15:55:14,695 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 15:55:14,695 INFO L87 Difference]: Start difference. First operand 51 states and 64 transitions. Second operand has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:14,734 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:14,734 INFO L93 Difference]: Finished difference Result 59 states and 73 transitions. [2022-12-14 15:55:14,734 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 15:55:14,735 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 15:55:14,735 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:14,735 INFO L225 Difference]: With dead ends: 59 [2022-12-14 15:55:14,735 INFO L226 Difference]: Without dead ends: 59 [2022-12-14 15:55:14,735 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-12-14 15:55:14,736 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 27 mSDsluCounter, 10 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 21 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:14,736 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 21 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:14,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-12-14 15:55:14,737 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 57. [2022-12-14 15:55:14,738 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 53 states have (on average 1.320754716981132) internal successors, (70), 56 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:14,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 70 transitions. [2022-12-14 15:55:14,738 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 70 transitions. Word has length 11 [2022-12-14 15:55:14,738 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:14,738 INFO L495 AbstractCegarLoop]: Abstraction has 57 states and 70 transitions. [2022-12-14 15:55:14,738 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.75) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:14,738 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 70 transitions. [2022-12-14 15:55:14,739 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-12-14 15:55:14,739 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:14,739 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:14,739 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-12-14 15:55:14,739 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:14,739 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:14,739 INFO L85 PathProgramCache]: Analyzing trace with hash -1330451961, now seen corresponding path program 2 times [2022-12-14 15:55:14,740 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:14,740 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1399386457] [2022-12-14 15:55:14,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:14,740 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:14,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:14,999 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:14,999 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:14,999 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1399386457] [2022-12-14 15:55:14,999 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1399386457] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:15,000 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [82698367] [2022-12-14 15:55:15,000 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:55:15,000 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:15,000 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:15,001 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:15,001 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-12-14 15:55:15,059 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 15:55:15,059 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:55:15,060 INFO L263 TraceCheckSpWp]: Trace formula consists of 131 conjuncts, 32 conjunts are in the unsatisfiable core [2022-12-14 15:55:15,062 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:15,072 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:55:15,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:55:15,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:15,185 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:55:15,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 15 [2022-12-14 15:55:15,220 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:15,220 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:15,324 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 15:55:15,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 15:55:15,462 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:15,462 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [82698367] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:15,462 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [385915774] [2022-12-14 15:55:15,463 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 15:55:15,464 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:15,464 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:15,464 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:15,464 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:15,494 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:15,497 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:15,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:15,536 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:15,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:15,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:15,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:15,723 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:55:15,723 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:15,810 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:16,690 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2393#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:16,690 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:16,690 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:16,691 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8, 8] total 23 [2022-12-14 15:55:16,691 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [512520976] [2022-12-14 15:55:16,691 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:16,691 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-12-14 15:55:16,691 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:16,692 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-12-14 15:55:16,692 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=144, Invalid=848, Unknown=0, NotChecked=0, Total=992 [2022-12-14 15:55:16,692 INFO L87 Difference]: Start difference. First operand 57 states and 70 transitions. Second operand has 24 states, 23 states have (on average 1.608695652173913) internal successors, (37), 24 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:17,748 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:17,749 INFO L93 Difference]: Finished difference Result 110 states and 131 transitions. [2022-12-14 15:55:17,749 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 15:55:17,749 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 1.608695652173913) internal successors, (37), 24 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-12-14 15:55:17,749 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:17,750 INFO L225 Difference]: With dead ends: 110 [2022-12-14 15:55:17,750 INFO L226 Difference]: Without dead ends: 110 [2022-12-14 15:55:17,750 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 58 GetRequests, 16 SyntacticMatches, 0 SemanticMatches, 42 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 311 ImplicationChecksByTransitivity, 1.8s TimeCoverageRelationStatistics Valid=331, Invalid=1561, Unknown=0, NotChecked=0, Total=1892 [2022-12-14 15:55:17,750 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 341 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 385 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 341 SdHoareTripleChecker+Valid, 100 SdHoareTripleChecker+Invalid, 395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 385 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:17,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [341 Valid, 100 Invalid, 395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 385 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 15:55:17,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 110 states. [2022-12-14 15:55:17,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 110 to 61. [2022-12-14 15:55:17,752 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 61 states, 57 states have (on average 1.3333333333333333) internal successors, (76), 60 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:17,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 76 transitions. [2022-12-14 15:55:17,752 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 76 transitions. Word has length 13 [2022-12-14 15:55:17,752 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:17,753 INFO L495 AbstractCegarLoop]: Abstraction has 61 states and 76 transitions. [2022-12-14 15:55:17,753 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 1.608695652173913) internal successors, (37), 24 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:17,753 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 76 transitions. [2022-12-14 15:55:17,753 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 15 [2022-12-14 15:55:17,753 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:17,753 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:17,757 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2022-12-14 15:55:17,954 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2022-12-14 15:55:17,956 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:17,956 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:17,957 INFO L85 PathProgramCache]: Analyzing trace with hash 1878121950, now seen corresponding path program 1 times [2022-12-14 15:55:17,957 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:17,958 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1863312766] [2022-12-14 15:55:17,958 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:17,958 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:17,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:18,207 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:18,207 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:18,207 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1863312766] [2022-12-14 15:55:18,208 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1863312766] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:18,208 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:18,208 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-12-14 15:55:18,208 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [935121774] [2022-12-14 15:55:18,208 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:18,208 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-12-14 15:55:18,208 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:18,209 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-12-14 15:55:18,209 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2022-12-14 15:55:18,209 INFO L87 Difference]: Start difference. First operand 61 states and 76 transitions. Second operand has 10 states, 10 states have (on average 1.4) internal successors, (14), 10 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:18,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:18,391 INFO L93 Difference]: Finished difference Result 68 states and 79 transitions. [2022-12-14 15:55:18,391 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-12-14 15:55:18,391 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 1.4) internal successors, (14), 10 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 14 [2022-12-14 15:55:18,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:18,391 INFO L225 Difference]: With dead ends: 68 [2022-12-14 15:55:18,392 INFO L226 Difference]: Without dead ends: 60 [2022-12-14 15:55:18,392 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 16 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=69, Invalid=171, Unknown=0, NotChecked=0, Total=240 [2022-12-14 15:55:18,392 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 38 mSDsluCounter, 72 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 82 SdHoareTripleChecker+Invalid, 129 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:18,392 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 82 Invalid, 129 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:55:18,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2022-12-14 15:55:18,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 54. [2022-12-14 15:55:18,393 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 50 states have (on average 1.34) internal successors, (67), 53 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:18,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 67 transitions. [2022-12-14 15:55:18,394 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 67 transitions. Word has length 14 [2022-12-14 15:55:18,394 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:18,394 INFO L495 AbstractCegarLoop]: Abstraction has 54 states and 67 transitions. [2022-12-14 15:55:18,394 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 1.4) internal successors, (14), 10 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:18,394 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 67 transitions. [2022-12-14 15:55:18,394 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-12-14 15:55:18,394 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:18,394 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:18,394 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-12-14 15:55:18,394 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:18,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:18,395 INFO L85 PathProgramCache]: Analyzing trace with hash 1335921372, now seen corresponding path program 3 times [2022-12-14 15:55:18,395 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:18,395 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1425201324] [2022-12-14 15:55:18,395 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:18,395 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:18,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:18,556 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 6 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:55:18,556 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:18,556 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1425201324] [2022-12-14 15:55:18,556 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1425201324] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:18,556 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [345353584] [2022-12-14 15:55:18,556 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:55:18,556 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:18,557 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:18,557 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:18,558 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-12-14 15:55:18,616 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:55:18,617 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:55:18,617 INFO L263 TraceCheckSpWp]: Trace formula consists of 142 conjuncts, 28 conjunts are in the unsatisfiable core [2022-12-14 15:55:18,618 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:18,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:18,734 INFO L321 Elim1Store]: treesize reduction 9, result has 47.1 percent of original size [2022-12-14 15:55:18,734 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 28 treesize of output 18 [2022-12-14 15:55:18,737 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 6 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:55:18,737 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:18,766 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 25 [2022-12-14 15:55:18,769 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 23 [2022-12-14 15:55:18,848 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 8 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:55:18,849 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [345353584] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:18,849 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1584418886] [2022-12-14 15:55:18,850 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 15:55:18,851 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:18,851 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:18,851 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:18,851 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:18,879 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:18,882 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:18,883 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:18,924 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:18,970 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:19,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:19,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:19,093 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:55:19,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:19,178 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:19,894 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2846#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:19,894 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:19,894 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:19,894 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 22 [2022-12-14 15:55:19,895 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [685323624] [2022-12-14 15:55:19,895 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:19,895 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-12-14 15:55:19,895 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:19,896 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-12-14 15:55:19,896 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=120, Invalid=750, Unknown=0, NotChecked=0, Total=870 [2022-12-14 15:55:19,896 INFO L87 Difference]: Start difference. First operand 54 states and 67 transitions. Second operand has 22 states, 22 states have (on average 1.5) internal successors, (33), 22 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:20,251 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:20,251 INFO L93 Difference]: Finished difference Result 104 states and 122 transitions. [2022-12-14 15:55:20,251 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-14 15:55:20,251 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 1.5) internal successors, (33), 22 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-12-14 15:55:20,251 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:20,251 INFO L225 Difference]: With dead ends: 104 [2022-12-14 15:55:20,251 INFO L226 Difference]: Without dead ends: 104 [2022-12-14 15:55:20,252 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 24 SyntacticMatches, 1 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 444 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=299, Invalid=1423, Unknown=0, NotChecked=0, Total=1722 [2022-12-14 15:55:20,252 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 188 mSDsluCounter, 146 mSDsCounter, 0 mSdLazyCounter, 264 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 188 SdHoareTripleChecker+Valid, 163 SdHoareTripleChecker+Invalid, 268 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 264 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:20,252 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [188 Valid, 163 Invalid, 268 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 264 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:55:20,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104 states. [2022-12-14 15:55:20,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104 to 70. [2022-12-14 15:55:20,253 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 70 states, 66 states have (on average 1.303030303030303) internal successors, (86), 69 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:20,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 86 transitions. [2022-12-14 15:55:20,254 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 86 transitions. Word has length 15 [2022-12-14 15:55:20,254 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:20,254 INFO L495 AbstractCegarLoop]: Abstraction has 70 states and 86 transitions. [2022-12-14 15:55:20,254 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 1.5) internal successors, (33), 22 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:20,254 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 86 transitions. [2022-12-14 15:55:20,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-12-14 15:55:20,254 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:20,254 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:20,259 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2022-12-14 15:55:20,455 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:20,456 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:20,457 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:20,457 INFO L85 PathProgramCache]: Analyzing trace with hash 1334803904, now seen corresponding path program 1 times [2022-12-14 15:55:20,457 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:20,457 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [289534279] [2022-12-14 15:55:20,458 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:20,458 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:20,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:20,572 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:55:20,572 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:20,572 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [289534279] [2022-12-14 15:55:20,572 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [289534279] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:20,572 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2009660783] [2022-12-14 15:55:20,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:20,572 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:20,573 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:20,573 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:20,574 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-12-14 15:55:20,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:20,630 INFO L263 TraceCheckSpWp]: Trace formula consists of 150 conjuncts, 21 conjunts are in the unsatisfiable core [2022-12-14 15:55:20,631 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:20,671 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:20,672 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:20,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 15:55:20,740 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:20,741 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2009660783] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:20,741 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [302992619] [2022-12-14 15:55:20,742 INFO L159 IcfgInterpreter]: Started Sifa with 13 locations of interest [2022-12-14 15:55:20,742 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:20,742 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:20,742 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:20,743 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:20,770 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:20,772 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:20,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:20,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:20,830 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:20,844 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:20,876 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:55:20,876 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:21,035 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:22,216 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [302992619] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:22,216 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:22,217 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [6, 7, 7] total 25 [2022-12-14 15:55:22,217 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [162317554] [2022-12-14 15:55:22,217 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:22,217 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-12-14 15:55:22,217 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:22,217 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-12-14 15:55:22,218 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=97, Invalid=553, Unknown=0, NotChecked=0, Total=650 [2022-12-14 15:55:22,218 INFO L87 Difference]: Start difference. First operand 70 states and 86 transitions. Second operand has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:24,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:24,615 INFO L93 Difference]: Finished difference Result 75 states and 88 transitions. [2022-12-14 15:55:24,616 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 15:55:24,616 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-12-14 15:55:24,616 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:24,616 INFO L225 Difference]: With dead ends: 75 [2022-12-14 15:55:24,616 INFO L226 Difference]: Without dead ends: 75 [2022-12-14 15:55:24,617 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 58 GetRequests, 23 SyntacticMatches, 2 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 194 ImplicationChecksByTransitivity, 3.4s TimeCoverageRelationStatistics Valid=202, Invalid=988, Unknown=0, NotChecked=0, Total=1190 [2022-12-14 15:55:24,617 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 41 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 236 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 41 SdHoareTripleChecker+Valid, 67 SdHoareTripleChecker+Invalid, 237 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 236 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:24,617 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [41 Valid, 67 Invalid, 237 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 236 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 15:55:24,617 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2022-12-14 15:55:24,618 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 71. [2022-12-14 15:55:24,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 71 states, 67 states have (on average 1.2985074626865671) internal successors, (87), 70 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:24,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 87 transitions. [2022-12-14 15:55:24,619 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 87 transitions. Word has length 15 [2022-12-14 15:55:24,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:24,619 INFO L495 AbstractCegarLoop]: Abstraction has 71 states and 87 transitions. [2022-12-14 15:55:24,619 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.1666666666666667) internal successors, (14), 12 states have internal predecessors, (14), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:24,619 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 87 transitions. [2022-12-14 15:55:24,619 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-12-14 15:55:24,619 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:24,619 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:24,623 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2022-12-14 15:55:24,820 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2022-12-14 15:55:24,820 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr14ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:24,821 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:24,821 INFO L85 PathProgramCache]: Analyzing trace with hash 871225411, now seen corresponding path program 1 times [2022-12-14 15:55:24,822 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:24,822 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1739714265] [2022-12-14 15:55:24,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:24,823 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:24,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:24,922 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:55:24,922 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:24,922 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1739714265] [2022-12-14 15:55:24,922 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1739714265] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:24,922 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:24,922 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 15:55:24,922 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1787314071] [2022-12-14 15:55:24,923 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:24,923 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 15:55:24,923 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:24,923 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 15:55:24,923 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 15:55:24,923 INFO L87 Difference]: Start difference. First operand 71 states and 87 transitions. Second operand has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:24,945 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:24,945 INFO L93 Difference]: Finished difference Result 70 states and 86 transitions. [2022-12-14 15:55:24,945 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 15:55:24,945 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-12-14 15:55:24,945 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:24,946 INFO L225 Difference]: With dead ends: 70 [2022-12-14 15:55:24,946 INFO L226 Difference]: Without dead ends: 68 [2022-12-14 15:55:24,946 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 1 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 15:55:24,946 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 7 mSDsluCounter, 9 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:24,946 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 18 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:24,946 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-12-14 15:55:24,947 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 59. [2022-12-14 15:55:24,947 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 56 states have (on average 1.3035714285714286) internal successors, (73), 58 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:24,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 73 transitions. [2022-12-14 15:55:24,948 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 73 transitions. Word has length 16 [2022-12-14 15:55:24,948 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:24,948 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 73 transitions. [2022-12-14 15:55:24,948 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:24,948 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 73 transitions. [2022-12-14 15:55:24,948 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-12-14 15:55:24,948 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:24,948 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:24,948 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24 [2022-12-14 15:55:24,948 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:24,949 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:24,949 INFO L85 PathProgramCache]: Analyzing trace with hash 871226573, now seen corresponding path program 1 times [2022-12-14 15:55:24,949 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:24,949 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [662618315] [2022-12-14 15:55:24,949 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:24,949 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:24,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:25,080 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:25,080 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:25,081 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [662618315] [2022-12-14 15:55:25,081 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [662618315] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:25,081 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1801685042] [2022-12-14 15:55:25,081 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:25,081 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:25,081 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:25,082 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:25,083 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-12-14 15:55:25,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:25,162 INFO L263 TraceCheckSpWp]: Trace formula consists of 164 conjuncts, 24 conjunts are in the unsatisfiable core [2022-12-14 15:55:25,163 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:25,237 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:25,237 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:25,335 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 15:55:25,352 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:25,353 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1801685042] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:25,353 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1186178620] [2022-12-14 15:55:25,354 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:55:25,354 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:25,355 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:25,355 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:25,355 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:25,384 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:25,387 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:25,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:25,414 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:25,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:25,480 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:25,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:25,560 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:55:25,560 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:25,643 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:25,644 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:25,666 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 15:55:25,666 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 15:55:25,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:25,807 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:25,862 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:27,500 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3569#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:27,500 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:27,501 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:27,501 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 8, 8] total 19 [2022-12-14 15:55:27,501 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1417032285] [2022-12-14 15:55:27,501 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:27,501 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-12-14 15:55:27,501 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:27,501 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-12-14 15:55:27,501 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=133, Invalid=923, Unknown=0, NotChecked=0, Total=1056 [2022-12-14 15:55:27,502 INFO L87 Difference]: Start difference. First operand 59 states and 73 transitions. Second operand has 20 states, 19 states have (on average 1.9473684210526316) internal successors, (37), 20 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:27,824 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:27,824 INFO L93 Difference]: Finished difference Result 80 states and 93 transitions. [2022-12-14 15:55:27,824 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-14 15:55:27,824 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 1.9473684210526316) internal successors, (37), 20 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-12-14 15:55:27,825 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:27,825 INFO L225 Difference]: With dead ends: 80 [2022-12-14 15:55:27,825 INFO L226 Difference]: Without dead ends: 80 [2022-12-14 15:55:27,826 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 22 SyntacticMatches, 2 SemanticMatches, 39 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 386 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=223, Invalid=1417, Unknown=0, NotChecked=0, Total=1640 [2022-12-14 15:55:27,826 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 105 mSDsluCounter, 84 mSDsCounter, 0 mSdLazyCounter, 411 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 105 SdHoareTripleChecker+Valid, 97 SdHoareTripleChecker+Invalid, 415 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 411 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:27,827 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [105 Valid, 97 Invalid, 415 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 411 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 15:55:27,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2022-12-14 15:55:27,828 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 68. [2022-12-14 15:55:27,828 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68 states, 65 states have (on average 1.2769230769230768) internal successors, (83), 67 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:27,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68 states to 68 states and 83 transitions. [2022-12-14 15:55:27,829 INFO L78 Accepts]: Start accepts. Automaton has 68 states and 83 transitions. Word has length 16 [2022-12-14 15:55:27,829 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:27,829 INFO L495 AbstractCegarLoop]: Abstraction has 68 states and 83 transitions. [2022-12-14 15:55:27,829 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 1.9473684210526316) internal successors, (37), 20 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:27,829 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 83 transitions. [2022-12-14 15:55:27,829 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 15:55:27,830 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:27,830 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:27,834 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2022-12-14 15:55:28,030 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-12-14 15:55:28,031 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:28,032 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:28,033 INFO L85 PathProgramCache]: Analyzing trace with hash 185818289, now seen corresponding path program 1 times [2022-12-14 15:55:28,033 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:28,033 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1367722543] [2022-12-14 15:55:28,033 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:28,034 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:28,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:28,161 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 15:55:28,161 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:28,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1367722543] [2022-12-14 15:55:28,162 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1367722543] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:28,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1424075893] [2022-12-14 15:55:28,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:28,162 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:28,162 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:28,163 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:28,164 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-12-14 15:55:28,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:28,238 INFO L263 TraceCheckSpWp]: Trace formula consists of 163 conjuncts, 22 conjunts are in the unsatisfiable core [2022-12-14 15:55:28,240 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:28,248 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:55:28,248 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:55:28,296 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:55:28,296 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:28,392 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:55:28,393 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1424075893] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:28,393 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [110757874] [2022-12-14 15:55:28,394 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:55:28,394 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:28,394 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:28,395 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:28,395 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:28,421 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:28,423 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:28,423 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:28,459 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:28,501 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:28,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:28,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:28,581 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:28,598 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:28,624 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:55:28,625 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:28,736 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:29,631 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [110757874] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:29,631 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:29,631 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [12] imperfect sequences [6, 7, 7] total 28 [2022-12-14 15:55:29,631 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [412397566] [2022-12-14 15:55:29,631 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:29,632 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 15:55:29,632 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:29,632 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 15:55:29,632 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=126, Invalid=686, Unknown=0, NotChecked=0, Total=812 [2022-12-14 15:55:29,632 INFO L87 Difference]: Start difference. First operand 68 states and 83 transitions. Second operand has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:30,432 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:30,432 INFO L93 Difference]: Finished difference Result 68 states and 82 transitions. [2022-12-14 15:55:30,433 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-14 15:55:30,433 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-12-14 15:55:30,433 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:30,433 INFO L225 Difference]: With dead ends: 68 [2022-12-14 15:55:30,433 INFO L226 Difference]: Without dead ends: 68 [2022-12-14 15:55:30,433 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 28 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 209 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=188, Invalid=934, Unknown=0, NotChecked=0, Total=1122 [2022-12-14 15:55:30,434 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 30 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 109 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:30,434 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 17 Invalid, 109 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:55:30,434 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2022-12-14 15:55:30,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 63. [2022-12-14 15:55:30,435 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 60 states have (on average 1.2833333333333334) internal successors, (77), 62 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:30,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 77 transitions. [2022-12-14 15:55:30,435 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 77 transitions. Word has length 17 [2022-12-14 15:55:30,435 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:30,435 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 77 transitions. [2022-12-14 15:55:30,435 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.2307692307692308) internal successors, (16), 13 states have internal predecessors, (16), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:30,435 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 77 transitions. [2022-12-14 15:55:30,436 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 15:55:30,436 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:30,436 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:30,440 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2022-12-14 15:55:30,636 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-12-14 15:55:30,637 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:30,637 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:30,638 INFO L85 PathProgramCache]: Analyzing trace with hash 1238220018, now seen corresponding path program 1 times [2022-12-14 15:55:30,638 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:30,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [157181796] [2022-12-14 15:55:30,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:30,639 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:30,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:30,889 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:30,889 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:30,890 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [157181796] [2022-12-14 15:55:30,890 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [157181796] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:30,890 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [177136421] [2022-12-14 15:55:30,890 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:30,890 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:30,890 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:30,891 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:30,892 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-12-14 15:55:30,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:30,968 INFO L263 TraceCheckSpWp]: Trace formula consists of 170 conjuncts, 31 conjunts are in the unsatisfiable core [2022-12-14 15:55:30,970 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:31,014 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:55:31,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:55:31,168 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:31,168 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:31,350 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 1 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:31,350 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [177136421] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:31,350 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [79482334] [2022-12-14 15:55:31,351 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:55:31,351 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:31,352 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:31,352 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:31,352 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:31,384 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:31,386 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:31,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:31,414 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:31,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:31,464 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:31,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:31,544 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:55:31,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:31,628 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:31,629 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:31,650 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 15:55:31,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 15:55:31,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:31,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:31,831 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:33,347 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4132#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= |ULTIMATE.start_main_~length3~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:33,348 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:33,348 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:33,348 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 22 [2022-12-14 15:55:33,348 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462890197] [2022-12-14 15:55:33,348 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:33,348 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-12-14 15:55:33,348 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:33,348 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-12-14 15:55:33,349 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=180, Invalid=1152, Unknown=0, NotChecked=0, Total=1332 [2022-12-14 15:55:33,349 INFO L87 Difference]: Start difference. First operand 63 states and 77 transitions. Second operand has 24 states, 23 states have (on average 2.217391304347826) internal successors, (51), 23 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:33,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:33,919 INFO L93 Difference]: Finished difference Result 91 states and 104 transitions. [2022-12-14 15:55:33,919 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 15:55:33,920 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 2.217391304347826) internal successors, (51), 23 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-12-14 15:55:33,920 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:33,920 INFO L225 Difference]: With dead ends: 91 [2022-12-14 15:55:33,920 INFO L226 Difference]: Without dead ends: 91 [2022-12-14 15:55:33,921 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 488 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=349, Invalid=2003, Unknown=0, NotChecked=0, Total=2352 [2022-12-14 15:55:33,922 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 251 mSDsluCounter, 37 mSDsCounter, 0 mSdLazyCounter, 362 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 251 SdHoareTripleChecker+Valid, 43 SdHoareTripleChecker+Invalid, 379 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 362 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:33,922 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [251 Valid, 43 Invalid, 379 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 362 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 15:55:33,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-12-14 15:55:33,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 79. [2022-12-14 15:55:33,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 76 states have (on average 1.236842105263158) internal successors, (94), 78 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:33,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 94 transitions. [2022-12-14 15:55:33,924 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 94 transitions. Word has length 17 [2022-12-14 15:55:33,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:33,924 INFO L495 AbstractCegarLoop]: Abstraction has 79 states and 94 transitions. [2022-12-14 15:55:33,924 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 2.217391304347826) internal successors, (51), 23 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:33,924 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 94 transitions. [2022-12-14 15:55:33,924 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 15:55:33,924 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:33,924 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:33,929 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-12-14 15:55:34,125 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable27,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:34,126 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:34,126 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:34,127 INFO L85 PathProgramCache]: Analyzing trace with hash 1655425854, now seen corresponding path program 4 times [2022-12-14 15:55:34,127 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:34,127 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [691038590] [2022-12-14 15:55:34,128 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:34,128 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:34,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:34,369 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:34,369 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:34,369 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [691038590] [2022-12-14 15:55:34,369 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [691038590] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:34,369 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1165803849] [2022-12-14 15:55:34,369 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:55:34,369 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:34,370 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:34,370 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:34,371 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-12-14 15:55:34,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:34,425 INFO L263 TraceCheckSpWp]: Trace formula consists of 155 conjuncts, 33 conjunts are in the unsatisfiable core [2022-12-14 15:55:34,427 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:34,513 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:34,641 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:34,642 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:55:34,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 15:55:34,658 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:34,658 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:34,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 15:55:34,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 20 [2022-12-14 15:55:34,905 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:34,905 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1165803849] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:34,905 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [523103354] [2022-12-14 15:55:34,906 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 15:55:34,906 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:34,906 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:34,906 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:34,906 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:34,930 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:34,932 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:34,933 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:34,974 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:35,012 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:35,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:35,057 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:35,090 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:55:35,090 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:35,178 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:36,026 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4467#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:36,026 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:36,026 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:36,026 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 13, 13] total 32 [2022-12-14 15:55:36,026 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [927757794] [2022-12-14 15:55:36,027 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:36,027 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-12-14 15:55:36,027 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:36,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-12-14 15:55:36,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=137, Invalid=1423, Unknown=0, NotChecked=0, Total=1560 [2022-12-14 15:55:36,027 INFO L87 Difference]: Start difference. First operand 79 states and 94 transitions. Second operand has 32 states, 32 states have (on average 1.46875) internal successors, (47), 32 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:37,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:37,738 INFO L93 Difference]: Finished difference Result 209 states and 236 transitions. [2022-12-14 15:55:37,738 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-12-14 15:55:37,738 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.46875) internal successors, (47), 32 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-12-14 15:55:37,739 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:37,739 INFO L225 Difference]: With dead ends: 209 [2022-12-14 15:55:37,739 INFO L226 Difference]: Without dead ends: 209 [2022-12-14 15:55:37,740 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 20 SyntacticMatches, 1 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 657 ImplicationChecksByTransitivity, 2.6s TimeCoverageRelationStatistics Valid=482, Invalid=3300, Unknown=0, NotChecked=0, Total=3782 [2022-12-14 15:55:37,740 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 570 mSDsluCounter, 166 mSDsCounter, 0 mSdLazyCounter, 895 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 570 SdHoareTripleChecker+Valid, 178 SdHoareTripleChecker+Invalid, 911 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 895 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:37,740 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [570 Valid, 178 Invalid, 911 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 895 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 15:55:37,741 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209 states. [2022-12-14 15:55:37,742 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209 to 101. [2022-12-14 15:55:37,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 101 states, 98 states have (on average 1.2551020408163265) internal successors, (123), 100 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:37,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 101 states to 101 states and 123 transitions. [2022-12-14 15:55:37,742 INFO L78 Accepts]: Start accepts. Automaton has 101 states and 123 transitions. Word has length 17 [2022-12-14 15:55:37,743 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:37,743 INFO L495 AbstractCegarLoop]: Abstraction has 101 states and 123 transitions. [2022-12-14 15:55:37,743 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.46875) internal successors, (47), 32 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:37,743 INFO L276 IsEmpty]: Start isEmpty. Operand 101 states and 123 transitions. [2022-12-14 15:55:37,743 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-12-14 15:55:37,743 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:37,743 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:37,748 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2022-12-14 15:55:37,944 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-12-14 15:55:37,944 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:37,945 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:37,945 INFO L85 PathProgramCache]: Analyzing trace with hash -1959052217, now seen corresponding path program 1 times [2022-12-14 15:55:37,945 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:37,946 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [197839349] [2022-12-14 15:55:37,946 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:37,946 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:37,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:38,101 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-14 15:55:38,101 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:38,101 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [197839349] [2022-12-14 15:55:38,101 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [197839349] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 15:55:38,101 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 15:55:38,101 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-14 15:55:38,101 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [233411064] [2022-12-14 15:55:38,101 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 15:55:38,102 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-12-14 15:55:38,102 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:38,102 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-14 15:55:38,102 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-12-14 15:55:38,102 INFO L87 Difference]: Start difference. First operand 101 states and 123 transitions. Second operand has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:38,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:38,189 INFO L93 Difference]: Finished difference Result 107 states and 127 transitions. [2022-12-14 15:55:38,189 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 15:55:38,189 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-12-14 15:55:38,189 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:38,190 INFO L225 Difference]: With dead ends: 107 [2022-12-14 15:55:38,190 INFO L226 Difference]: Without dead ends: 91 [2022-12-14 15:55:38,191 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=90, Unknown=0, NotChecked=0, Total=132 [2022-12-14 15:55:38,191 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 27 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 93 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 53 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 93 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:38,191 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 53 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 93 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 15:55:38,191 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2022-12-14 15:55:38,192 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 89. [2022-12-14 15:55:38,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 86 states have (on average 1.2209302325581395) internal successors, (105), 88 states have internal predecessors, (105), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:38,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 105 transitions. [2022-12-14 15:55:38,193 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 105 transitions. Word has length 18 [2022-12-14 15:55:38,193 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:38,193 INFO L495 AbstractCegarLoop]: Abstraction has 89 states and 105 transitions. [2022-12-14 15:55:38,193 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:38,193 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 105 transitions. [2022-12-14 15:55:38,193 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-12-14 15:55:38,193 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:38,193 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:38,193 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29 [2022-12-14 15:55:38,194 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:38,194 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:38,194 INFO L85 PathProgramCache]: Analyzing trace with hash -1661511723, now seen corresponding path program 2 times [2022-12-14 15:55:38,194 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:38,194 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [224108289] [2022-12-14 15:55:38,194 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:38,194 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:38,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:38,427 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:38,427 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:38,427 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [224108289] [2022-12-14 15:55:38,427 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [224108289] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:38,427 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [660127635] [2022-12-14 15:55:38,427 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:55:38,428 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:38,428 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:38,428 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:38,429 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-12-14 15:55:38,536 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 15:55:38,537 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:55:38,538 INFO L263 TraceCheckSpWp]: Trace formula consists of 195 conjuncts, 54 conjunts are in the unsatisfiable core [2022-12-14 15:55:38,540 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:38,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:55:38,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:38,591 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:55:38,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:55:38,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:55:38,644 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 4 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:38,644 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:38,689 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_485 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_485) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)))) is different from false [2022-12-14 15:55:38,722 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:55:38,722 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:55:38,727 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:55:38,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:55:38,730 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 15:55:38,821 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 1 not checked. [2022-12-14 15:55:38,821 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [660127635] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:38,821 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1317424617] [2022-12-14 15:55:38,822 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:55:38,822 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:38,822 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:38,822 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:38,822 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:38,851 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:38,853 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:38,853 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:38,881 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:38,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:38,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:38,978 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:39,017 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:55:39,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:39,113 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:39,114 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:39,145 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 15:55:39,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 15:55:39,227 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:39,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:39,348 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:41,266 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5178#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:41,266 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:41,266 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:41,267 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12, 12] total 23 [2022-12-14 15:55:41,267 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [118015201] [2022-12-14 15:55:41,267 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:41,267 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-12-14 15:55:41,267 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:41,268 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-12-14 15:55:41,268 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=127, Invalid=1057, Unknown=10, NotChecked=66, Total=1260 [2022-12-14 15:55:41,268 INFO L87 Difference]: Start difference. First operand 89 states and 105 transitions. Second operand has 23 states, 23 states have (on average 1.6956521739130435) internal successors, (39), 23 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:41,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:41,575 INFO L93 Difference]: Finished difference Result 153 states and 179 transitions. [2022-12-14 15:55:41,576 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-14 15:55:41,576 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 1.6956521739130435) internal successors, (39), 23 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-12-14 15:55:41,576 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:41,576 INFO L225 Difference]: With dead ends: 153 [2022-12-14 15:55:41,576 INFO L226 Difference]: Without dead ends: 127 [2022-12-14 15:55:41,576 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 33 SyntacticMatches, 5 SemanticMatches, 38 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 417 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=164, Invalid=1312, Unknown=10, NotChecked=74, Total=1560 [2022-12-14 15:55:41,577 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 26 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 342 mSolverCounterSat, 6 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 108 SdHoareTripleChecker+Invalid, 382 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 342 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 33 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:41,577 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 108 Invalid, 382 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 342 Invalid, 1 Unknown, 33 Unchecked, 0.2s Time] [2022-12-14 15:55:41,577 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 127 states. [2022-12-14 15:55:41,578 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 127 to 124. [2022-12-14 15:55:41,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 124 states, 121 states have (on average 1.2066115702479339) internal successors, (146), 123 states have internal predecessors, (146), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:41,578 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 124 states to 124 states and 146 transitions. [2022-12-14 15:55:41,579 INFO L78 Accepts]: Start accepts. Automaton has 124 states and 146 transitions. Word has length 20 [2022-12-14 15:55:41,579 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:41,579 INFO L495 AbstractCegarLoop]: Abstraction has 124 states and 146 transitions. [2022-12-14 15:55:41,579 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 1.6956521739130435) internal successors, (39), 23 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:41,579 INFO L276 IsEmpty]: Start isEmpty. Operand 124 states and 146 transitions. [2022-12-14 15:55:41,579 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-12-14 15:55:41,579 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:41,579 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:41,584 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-12-14 15:55:41,779 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:41,780 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:41,780 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:41,780 INFO L85 PathProgramCache]: Analyzing trace with hash -2018100811, now seen corresponding path program 5 times [2022-12-14 15:55:41,780 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:41,780 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1641158941] [2022-12-14 15:55:41,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:41,780 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:41,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:42,193 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 1 proven. 24 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:42,193 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:42,193 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1641158941] [2022-12-14 15:55:42,193 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1641158941] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:42,193 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1677012906] [2022-12-14 15:55:42,193 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:55:42,193 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:42,193 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:42,194 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:42,195 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-12-14 15:55:42,269 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 15:55:42,269 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:55:42,271 INFO L263 TraceCheckSpWp]: Trace formula consists of 179 conjuncts, 38 conjunts are in the unsatisfiable core [2022-12-14 15:55:42,272 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:42,385 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:42,560 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 15:55:42,560 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 15:55:42,584 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:42,584 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:42,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 15:55:42,692 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 15:55:42,800 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 4 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:42,801 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1677012906] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:42,801 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1880391091] [2022-12-14 15:55:42,802 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 15:55:42,802 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:42,802 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:42,802 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:42,802 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:42,830 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:42,832 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:42,833 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:42,872 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:42,908 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:42,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:42,986 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:43,038 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:55:43,038 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:43,127 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:44,344 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5628#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:44,344 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:44,344 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:44,344 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 31 [2022-12-14 15:55:44,344 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [180692186] [2022-12-14 15:55:44,344 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:44,344 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-12-14 15:55:44,345 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:44,345 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-12-14 15:55:44,346 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=109, Invalid=1373, Unknown=0, NotChecked=0, Total=1482 [2022-12-14 15:55:44,346 INFO L87 Difference]: Start difference. First operand 124 states and 146 transitions. Second operand has 31 states, 31 states have (on average 1.7096774193548387) internal successors, (53), 31 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:47,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:47,408 INFO L93 Difference]: Finished difference Result 285 states and 316 transitions. [2022-12-14 15:55:47,408 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-12-14 15:55:47,408 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 1.7096774193548387) internal successors, (53), 31 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-12-14 15:55:47,408 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:47,409 INFO L225 Difference]: With dead ends: 285 [2022-12-14 15:55:47,409 INFO L226 Difference]: Without dead ends: 275 [2022-12-14 15:55:47,409 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 111 GetRequests, 35 SyntacticMatches, 2 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 4 DeprecatedPredicates, 1225 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=582, Invalid=5118, Unknown=0, NotChecked=0, Total=5700 [2022-12-14 15:55:47,410 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 394 mSDsluCounter, 325 mSDsCounter, 0 mSdLazyCounter, 1200 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 394 SdHoareTripleChecker+Valid, 356 SdHoareTripleChecker+Invalid, 1209 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 1200 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:47,410 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [394 Valid, 356 Invalid, 1209 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 1200 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-12-14 15:55:47,410 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 275 states. [2022-12-14 15:55:47,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 275 to 148. [2022-12-14 15:55:47,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148 states, 145 states have (on average 1.2137931034482758) internal successors, (176), 147 states have internal predecessors, (176), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:47,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 176 transitions. [2022-12-14 15:55:47,412 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 176 transitions. Word has length 21 [2022-12-14 15:55:47,413 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:47,413 INFO L495 AbstractCegarLoop]: Abstraction has 148 states and 176 transitions. [2022-12-14 15:55:47,413 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 1.7096774193548387) internal successors, (53), 31 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:47,413 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 176 transitions. [2022-12-14 15:55:47,413 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-12-14 15:55:47,413 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:47,413 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:47,417 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2022-12-14 15:55:47,613 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable31,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:47,614 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:47,615 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:47,615 INFO L85 PathProgramCache]: Analyzing trace with hash 174991236, now seen corresponding path program 3 times [2022-12-14 15:55:47,615 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:47,616 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1549935302] [2022-12-14 15:55:47,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:47,616 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:47,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:47,791 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:47,791 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:47,791 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1549935302] [2022-12-14 15:55:47,792 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1549935302] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:47,792 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1967460498] [2022-12-14 15:55:47,792 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:55:47,792 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:47,792 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:47,793 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:47,793 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-12-14 15:55:47,871 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:55:47,871 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:55:47,872 INFO L263 TraceCheckSpWp]: Trace formula consists of 208 conjuncts, 33 conjunts are in the unsatisfiable core [2022-12-14 15:55:47,873 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:47,947 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:47,947 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:48,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 15:55:48,095 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 1 proven. 11 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:48,096 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1967460498] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:48,096 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1109825533] [2022-12-14 15:55:48,097 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:55:48,097 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:48,097 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:48,097 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:48,097 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:48,125 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:48,127 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:48,127 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:48,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:48,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:48,220 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:48,262 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:48,302 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:55:48,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:48,385 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:48,386 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:55:48,408 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 15:55:48,408 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 15:55:48,486 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:48,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:48,662 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:50,242 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6293#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:50,242 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:50,242 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:50,242 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 22 [2022-12-14 15:55:50,242 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [457994880] [2022-12-14 15:55:50,242 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:50,243 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-12-14 15:55:50,243 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:50,243 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-12-14 15:55:50,243 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=140, Invalid=1120, Unknown=0, NotChecked=0, Total=1260 [2022-12-14 15:55:50,243 INFO L87 Difference]: Start difference. First operand 148 states and 176 transitions. Second operand has 23 states, 22 states have (on average 2.227272727272727) internal successors, (49), 23 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:50,523 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:50,523 INFO L93 Difference]: Finished difference Result 160 states and 184 transitions. [2022-12-14 15:55:50,523 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-14 15:55:50,523 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 22 states have (on average 2.227272727272727) internal successors, (49), 23 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-12-14 15:55:50,523 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:50,524 INFO L225 Difference]: With dead ends: 160 [2022-12-14 15:55:50,524 INFO L226 Difference]: Without dead ends: 160 [2022-12-14 15:55:50,524 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 37 SyntacticMatches, 3 SemanticMatches, 44 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 423 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=282, Invalid=1788, Unknown=0, NotChecked=0, Total=2070 [2022-12-14 15:55:50,525 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 145 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 465 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 145 SdHoareTripleChecker+Valid, 99 SdHoareTripleChecker+Invalid, 467 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 465 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:50,525 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [145 Valid, 99 Invalid, 467 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 465 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 15:55:50,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 160 states. [2022-12-14 15:55:50,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 160 to 153. [2022-12-14 15:55:50,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 153 states, 150 states have (on average 1.2066666666666668) internal successors, (181), 152 states have internal predecessors, (181), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:50,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153 states to 153 states and 181 transitions. [2022-12-14 15:55:50,529 INFO L78 Accepts]: Start accepts. Automaton has 153 states and 181 transitions. Word has length 22 [2022-12-14 15:55:50,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:50,529 INFO L495 AbstractCegarLoop]: Abstraction has 153 states and 181 transitions. [2022-12-14 15:55:50,529 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 22 states have (on average 2.227272727272727) internal successors, (49), 23 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:50,529 INFO L276 IsEmpty]: Start isEmpty. Operand 153 states and 181 transitions. [2022-12-14 15:55:50,529 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-14 15:55:50,529 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:50,530 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:50,534 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2022-12-14 15:55:50,730 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-12-14 15:55:50,731 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:50,731 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:50,732 INFO L85 PathProgramCache]: Analyzing trace with hash 715556488, now seen corresponding path program 1 times [2022-12-14 15:55:50,732 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:50,732 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694521678] [2022-12-14 15:55:50,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:50,733 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:50,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:50,922 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:55:50,922 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:50,922 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694521678] [2022-12-14 15:55:50,922 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694521678] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:50,923 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1386478486] [2022-12-14 15:55:50,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:50,923 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:50,923 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:50,924 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:50,924 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-12-14 15:55:50,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:50,988 INFO L263 TraceCheckSpWp]: Trace formula consists of 205 conjuncts, 33 conjunts are in the unsatisfiable core [2022-12-14 15:55:50,989 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:50,997 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:55:50,998 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:55:51,086 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 9 proven. 23 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:55:51,086 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:51,288 INFO L134 CoverageAnalysis]: Checked inductivity of 33 backedges. 9 proven. 23 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:55:51,289 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1386478486] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:51,289 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1685433893] [2022-12-14 15:55:51,290 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 15:55:51,290 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:51,290 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:51,290 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:51,290 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:51,316 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:51,318 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:51,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:51,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:51,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:51,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:51,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:51,461 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:51,488 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:51,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:51,544 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:55:51,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:51,725 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:53,044 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6814#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:53,044 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:53,044 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:53,044 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 30 [2022-12-14 15:55:53,045 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [103438805] [2022-12-14 15:55:53,045 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:53,045 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-12-14 15:55:53,045 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:53,045 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-12-14 15:55:53,045 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=201, Invalid=1439, Unknown=0, NotChecked=0, Total=1640 [2022-12-14 15:55:53,046 INFO L87 Difference]: Start difference. First operand 153 states and 181 transitions. Second operand has 31 states, 30 states have (on average 2.1) internal successors, (63), 31 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:53,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:55:53,466 INFO L93 Difference]: Finished difference Result 329 states and 364 transitions. [2022-12-14 15:55:53,466 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-12-14 15:55:53,466 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 2.1) internal successors, (63), 31 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-12-14 15:55:53,467 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:55:53,467 INFO L225 Difference]: With dead ends: 329 [2022-12-14 15:55:53,468 INFO L226 Difference]: Without dead ends: 329 [2022-12-14 15:55:53,468 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 711 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=419, Invalid=2233, Unknown=0, NotChecked=0, Total=2652 [2022-12-14 15:55:53,469 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 261 mSDsluCounter, 220 mSDsCounter, 0 mSdLazyCounter, 840 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 261 SdHoareTripleChecker+Valid, 260 SdHoareTripleChecker+Invalid, 850 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 840 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:55:53,469 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [261 Valid, 260 Invalid, 850 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 840 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 15:55:53,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 329 states. [2022-12-14 15:55:53,472 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 329 to 157. [2022-12-14 15:55:53,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 157 states, 154 states have (on average 1.2142857142857142) internal successors, (187), 156 states have internal predecessors, (187), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:53,473 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 157 states to 157 states and 187 transitions. [2022-12-14 15:55:53,473 INFO L78 Accepts]: Start accepts. Automaton has 157 states and 187 transitions. Word has length 25 [2022-12-14 15:55:53,473 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:55:53,473 INFO L495 AbstractCegarLoop]: Abstraction has 157 states and 187 transitions. [2022-12-14 15:55:53,474 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 2.1) internal successors, (63), 31 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:55:53,474 INFO L276 IsEmpty]: Start isEmpty. Operand 157 states and 187 transitions. [2022-12-14 15:55:53,474 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-14 15:55:53,474 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:55:53,474 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:55:53,478 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Ended with exit code 0 [2022-12-14 15:55:53,675 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2022-12-14 15:55:53,675 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:55:53,676 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:55:53,677 INFO L85 PathProgramCache]: Analyzing trace with hash 1625392800, now seen corresponding path program 1 times [2022-12-14 15:55:53,677 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:55:53,678 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [21886984] [2022-12-14 15:55:53,678 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:53,678 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:55:53,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:54,056 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 14 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:54,057 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:55:54,057 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [21886984] [2022-12-14 15:55:54,057 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [21886984] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:55:54,057 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1689617597] [2022-12-14 15:55:54,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:55:54,057 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:55:54,057 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:55:54,058 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:55:54,059 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-12-14 15:55:54,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:55:54,154 INFO L263 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 42 conjunts are in the unsatisfiable core [2022-12-14 15:55:54,156 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:55:54,197 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:55:54,197 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:55:54,467 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 1 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:54,467 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:55:54,847 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 9 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:55:54,847 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1689617597] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:55:54,847 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1965594396] [2022-12-14 15:55:54,848 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 15:55:54,848 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:55:54,849 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:55:54,849 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:55:54,849 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:55:54,879 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:54,881 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:55:54,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:55:54,910 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:54,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:54,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:54,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:55,023 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:55,042 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:55,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:55:55,081 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:55:55,081 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:55:55,211 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 15:55:55,211 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 15:55:55,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:55,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:55:55,456 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:55:57,793 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7513#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:55:57,793 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:55:57,793 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:55:57,793 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 35 [2022-12-14 15:55:57,793 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [684035456] [2022-12-14 15:55:57,793 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:55:57,794 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-12-14 15:55:57,794 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:55:57,794 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-12-14 15:55:57,795 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=240, Invalid=2310, Unknown=0, NotChecked=0, Total=2550 [2022-12-14 15:55:57,795 INFO L87 Difference]: Start difference. First operand 157 states and 187 transitions. Second operand has 37 states, 36 states have (on average 2.0833333333333335) internal successors, (75), 36 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:00,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:56:00,228 INFO L93 Difference]: Finished difference Result 255 states and 282 transitions. [2022-12-14 15:56:00,228 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-12-14 15:56:00,228 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 36 states have (on average 2.0833333333333335) internal successors, (75), 36 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-12-14 15:56:00,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:56:00,229 INFO L225 Difference]: With dead ends: 255 [2022-12-14 15:56:00,229 INFO L226 Difference]: Without dead ends: 223 [2022-12-14 15:56:00,230 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 120 GetRequests, 35 SyntacticMatches, 1 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1667 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=1023, Invalid=6287, Unknown=0, NotChecked=0, Total=7310 [2022-12-14 15:56:00,230 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 718 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 759 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 718 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 790 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 759 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 15:56:00,230 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [718 Valid, 117 Invalid, 790 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 759 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 15:56:00,231 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 223 states. [2022-12-14 15:56:00,232 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 223 to 165. [2022-12-14 15:56:00,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 165 states, 162 states have (on average 1.1790123456790123) internal successors, (191), 164 states have internal predecessors, (191), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:00,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 165 states to 165 states and 191 transitions. [2022-12-14 15:56:00,233 INFO L78 Accepts]: Start accepts. Automaton has 165 states and 191 transitions. Word has length 25 [2022-12-14 15:56:00,233 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:56:00,233 INFO L495 AbstractCegarLoop]: Abstraction has 165 states and 191 transitions. [2022-12-14 15:56:00,233 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 36 states have (on average 2.0833333333333335) internal successors, (75), 36 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:00,233 INFO L276 IsEmpty]: Start isEmpty. Operand 165 states and 191 transitions. [2022-12-14 15:56:00,233 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2022-12-14 15:56:00,233 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:56:00,233 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:56:00,239 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2022-12-14 15:56:00,434 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2022-12-14 15:56:00,434 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:56:00,434 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:56:00,434 INFO L85 PathProgramCache]: Analyzing trace with hash 688678252, now seen corresponding path program 6 times [2022-12-14 15:56:00,434 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:56:00,434 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [969990096] [2022-12-14 15:56:00,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:56:00,434 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:56:00,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:00,862 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 4 proven. 37 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:00,862 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:56:00,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [969990096] [2022-12-14 15:56:00,862 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [969990096] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:56:00,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1782182458] [2022-12-14 15:56:00,862 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:56:00,862 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:00,862 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:56:00,863 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:56:00,864 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-12-14 15:56:00,938 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:56:00,939 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:56:00,940 INFO L263 TraceCheckSpWp]: Trace formula consists of 203 conjuncts, 42 conjunts are in the unsatisfiable core [2022-12-14 15:56:00,941 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:56:01,066 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:01,231 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 15:56:01,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 15:56:01,253 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 5 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:01,254 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:01,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 15:56:01,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 15:56:01,478 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 5 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:01,478 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1782182458] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:01,478 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [977499341] [2022-12-14 15:56:01,479 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 15:56:01,479 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:01,479 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:01,479 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:01,479 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:01,508 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:01,509 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:01,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:01,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:01,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:01,616 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:01,648 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:01,689 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:56:01,690 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:56:01,764 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:02,700 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8197#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:02,700 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:02,700 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:02,700 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 36 [2022-12-14 15:56:02,701 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [387717633] [2022-12-14 15:56:02,701 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:02,701 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2022-12-14 15:56:02,701 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:02,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2022-12-14 15:56:02,701 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=1769, Unknown=0, NotChecked=0, Total=1892 [2022-12-14 15:56:02,701 INFO L87 Difference]: Start difference. First operand 165 states and 191 transitions. Second operand has 36 states, 36 states have (on average 1.75) internal successors, (63), 36 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:06,025 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:56:06,025 INFO L93 Difference]: Finished difference Result 437 states and 477 transitions. [2022-12-14 15:56:06,025 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-12-14 15:56:06,026 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 1.75) internal successors, (63), 36 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 25 [2022-12-14 15:56:06,026 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:56:06,027 INFO L225 Difference]: With dead ends: 437 [2022-12-14 15:56:06,027 INFO L226 Difference]: Without dead ends: 425 [2022-12-14 15:56:06,029 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 132 GetRequests, 44 SyntacticMatches, 2 SemanticMatches, 86 ConstructedPredicates, 0 IntricatePredicates, 5 DeprecatedPredicates, 1711 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=700, Invalid=6956, Unknown=0, NotChecked=0, Total=7656 [2022-12-14 15:56:06,029 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 419 mSDsluCounter, 529 mSDsCounter, 0 mSdLazyCounter, 1779 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 419 SdHoareTripleChecker+Valid, 569 SdHoareTripleChecker+Invalid, 1791 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 1779 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 15:56:06,029 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [419 Valid, 569 Invalid, 1791 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 1779 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-14 15:56:06,030 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 425 states. [2022-12-14 15:56:06,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 425 to 197. [2022-12-14 15:56:06,034 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 194 states have (on average 1.1804123711340206) internal successors, (229), 196 states have internal predecessors, (229), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:06,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 229 transitions. [2022-12-14 15:56:06,035 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 229 transitions. Word has length 25 [2022-12-14 15:56:06,035 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:56:06,035 INFO L495 AbstractCegarLoop]: Abstraction has 197 states and 229 transitions. [2022-12-14 15:56:06,035 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 1.75) internal successors, (63), 36 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:06,035 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 229 transitions. [2022-12-14 15:56:06,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-14 15:56:06,036 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:56:06,036 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:56:06,040 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Ended with exit code 0 [2022-12-14 15:56:06,236 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-12-14 15:56:06,236 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:56:06,236 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:56:06,236 INFO L85 PathProgramCache]: Analyzing trace with hash 1347776268, now seen corresponding path program 4 times [2022-12-14 15:56:06,236 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:56:06,236 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1869849432] [2022-12-14 15:56:06,237 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:56:06,237 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:56:06,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:06,548 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 6 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:06,548 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:56:06,548 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1869849432] [2022-12-14 15:56:06,548 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1869849432] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:56:06,548 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [206616344] [2022-12-14 15:56:06,548 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:56:06,549 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:06,549 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:56:06,549 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:56:06,553 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-12-14 15:56:06,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:06,626 INFO L263 TraceCheckSpWp]: Trace formula consists of 239 conjuncts, 81 conjunts are in the unsatisfiable core [2022-12-14 15:56:06,628 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:56:06,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:06,760 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:56:06,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 22 [2022-12-14 15:56:06,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 15:56:07,038 INFO L321 Elim1Store]: treesize reduction 10, result has 64.3 percent of original size [2022-12-14 15:56:07,039 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 43 treesize of output 53 [2022-12-14 15:56:07,053 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:07,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 7 [2022-12-14 15:56:07,205 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 24 [2022-12-14 15:56:07,290 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:07,290 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:07,291 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:56:07,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 25 treesize of output 14 [2022-12-14 15:56:07,294 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 6 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:07,294 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:07,301 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_706 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_706) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-12-14 15:56:07,789 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:56:07,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 34 [2022-12-14 15:56:07,798 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:56:07,798 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 58 treesize of output 57 [2022-12-14 15:56:07,801 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 15:56:07,815 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:56:07,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 16 treesize of output 20 [2022-12-14 15:56:08,142 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 10 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 4 not checked. [2022-12-14 15:56:08,142 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [206616344] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:08,142 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [941656870] [2022-12-14 15:56:08,143 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:56:08,143 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:08,143 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:08,143 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:08,143 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:08,165 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:08,167 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:08,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:08,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:08,242 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:08,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:08,293 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:08,326 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:56:08,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:56:08,411 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:08,412 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:08,434 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 15:56:08,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 15:56:08,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:08,590 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:08,641 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:10,647 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9125#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:10,647 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:10,647 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:10,647 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 19, 19] total 47 [2022-12-14 15:56:10,647 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1481373068] [2022-12-14 15:56:10,647 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:10,647 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-12-14 15:56:10,647 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:10,648 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-12-14 15:56:10,648 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=235, Invalid=3170, Unknown=21, NotChecked=114, Total=3540 [2022-12-14 15:56:10,648 INFO L87 Difference]: Start difference. First operand 197 states and 229 transitions. Second operand has 47 states, 47 states have (on average 1.3829787234042554) internal successors, (65), 47 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:12,398 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:56:12,398 INFO L93 Difference]: Finished difference Result 344 states and 392 transitions. [2022-12-14 15:56:12,399 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-12-14 15:56:12,399 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 1.3829787234042554) internal successors, (65), 47 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-12-14 15:56:12,399 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:56:12,399 INFO L225 Difference]: With dead ends: 344 [2022-12-14 15:56:12,399 INFO L226 Difference]: Without dead ends: 270 [2022-12-14 15:56:12,400 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 121 GetRequests, 35 SyntacticMatches, 1 SemanticMatches, 85 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1595 ImplicationChecksByTransitivity, 4.5s TimeCoverageRelationStatistics Valid=693, Invalid=6599, Unknown=22, NotChecked=168, Total=7482 [2022-12-14 15:56:12,400 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 240 mSDsluCounter, 281 mSDsCounter, 0 mSdLazyCounter, 860 mSolverCounterSat, 23 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 240 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 960 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 860 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 72 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 15:56:12,400 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [240 Valid, 299 Invalid, 960 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 860 Invalid, 5 Unknown, 72 Unchecked, 0.4s Time] [2022-12-14 15:56:12,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 270 states. [2022-12-14 15:56:12,402 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 270 to 256. [2022-12-14 15:56:12,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 256 states, 253 states have (on average 1.173913043478261) internal successors, (297), 255 states have internal predecessors, (297), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:12,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 256 states to 256 states and 297 transitions. [2022-12-14 15:56:12,403 INFO L78 Accepts]: Start accepts. Automaton has 256 states and 297 transitions. Word has length 26 [2022-12-14 15:56:12,403 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:56:12,403 INFO L495 AbstractCegarLoop]: Abstraction has 256 states and 297 transitions. [2022-12-14 15:56:12,403 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 1.3829787234042554) internal successors, (65), 47 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:12,403 INFO L276 IsEmpty]: Start isEmpty. Operand 256 states and 297 transitions. [2022-12-14 15:56:12,404 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-12-14 15:56:12,404 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:56:12,404 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:56:12,408 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Ended with exit code 0 [2022-12-14 15:56:12,604 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-12-14 15:56:12,605 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:56:12,606 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:56:12,606 INFO L85 PathProgramCache]: Analyzing trace with hash -1600684165, now seen corresponding path program 5 times [2022-12-14 15:56:12,606 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:56:12,606 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [349483884] [2022-12-14 15:56:12,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:56:12,607 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:56:12,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:12,817 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:12,817 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:56:12,817 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [349483884] [2022-12-14 15:56:12,817 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [349483884] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:56:12,817 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1132670065] [2022-12-14 15:56:12,817 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:56:12,817 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:12,817 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:56:12,818 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:56:12,819 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-12-14 15:56:12,963 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-12-14 15:56:12,963 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:56:12,964 INFO L263 TraceCheckSpWp]: Trace formula consists of 252 conjuncts, 39 conjunts are in the unsatisfiable core [2022-12-14 15:56:12,966 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:56:12,974 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:56:12,974 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:56:13,097 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:13,097 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:13,318 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:13,318 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1132670065] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:13,319 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [266415030] [2022-12-14 15:56:13,320 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:56:13,320 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:13,320 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:13,320 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:13,320 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:13,345 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:13,347 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:13,347 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:13,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:13,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:13,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:13,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:13,511 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:56:13,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:56:13,597 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:13,598 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:13,621 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 15:56:13,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 15:56:13,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:13,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:13,876 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:15,687 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9990#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:15,688 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:15,688 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:15,688 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 12] total 34 [2022-12-14 15:56:15,688 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [213010997] [2022-12-14 15:56:15,688 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:15,688 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-12-14 15:56:15,688 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:15,688 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-12-14 15:56:15,689 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=234, Invalid=2022, Unknown=0, NotChecked=0, Total=2256 [2022-12-14 15:56:15,689 INFO L87 Difference]: Start difference. First operand 256 states and 297 transitions. Second operand has 35 states, 34 states have (on average 2.411764705882353) internal successors, (82), 35 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:16,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:56:16,148 INFO L93 Difference]: Finished difference Result 283 states and 317 transitions. [2022-12-14 15:56:16,148 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-12-14 15:56:16,148 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 2.411764705882353) internal successors, (82), 35 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-12-14 15:56:16,149 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:56:16,149 INFO L225 Difference]: With dead ends: 283 [2022-12-14 15:56:16,149 INFO L226 Difference]: Without dead ends: 283 [2022-12-14 15:56:16,149 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 107 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 883 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=521, Invalid=3139, Unknown=0, NotChecked=0, Total=3660 [2022-12-14 15:56:16,150 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 299 mSDsluCounter, 97 mSDsCounter, 0 mSdLazyCounter, 523 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 299 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 525 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 523 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:56:16,150 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [299 Valid, 111 Invalid, 525 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 523 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 15:56:16,150 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 283 states. [2022-12-14 15:56:16,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 283 to 265. [2022-12-14 15:56:16,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 265 states, 262 states have (on average 1.16793893129771) internal successors, (306), 264 states have internal predecessors, (306), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:16,152 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 306 transitions. [2022-12-14 15:56:16,153 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 306 transitions. Word has length 28 [2022-12-14 15:56:16,153 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:56:16,153 INFO L495 AbstractCegarLoop]: Abstraction has 265 states and 306 transitions. [2022-12-14 15:56:16,153 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 2.411764705882353) internal successors, (82), 35 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:16,153 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 306 transitions. [2022-12-14 15:56:16,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-12-14 15:56:16,153 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:56:16,153 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:56:16,157 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-12-14 15:56:16,354 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-12-14 15:56:16,354 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:56:16,355 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:56:16,355 INFO L85 PathProgramCache]: Analyzing trace with hash 1918398468, now seen corresponding path program 2 times [2022-12-14 15:56:16,355 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:56:16,355 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [769254683] [2022-12-14 15:56:16,355 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:56:16,355 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:56:16,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:16,688 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 1 proven. 29 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:16,688 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:56:16,688 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [769254683] [2022-12-14 15:56:16,688 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [769254683] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:56:16,688 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [585204783] [2022-12-14 15:56:16,688 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:56:16,688 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:16,688 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:56:16,689 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:56:16,690 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-12-14 15:56:16,912 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-12-14 15:56:16,912 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:56:16,914 INFO L263 TraceCheckSpWp]: Trace formula consists of 258 conjuncts, 48 conjunts are in the unsatisfiable core [2022-12-14 15:56:16,915 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:56:16,948 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 15:56:16,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 15:56:17,470 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 3 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:17,471 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:17,881 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 9 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:17,882 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [585204783] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:17,882 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [69383270] [2022-12-14 15:56:17,883 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:56:17,883 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:17,883 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:17,883 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:17,883 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:17,907 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:17,908 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:17,909 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:17,938 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:17,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:17,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:18,031 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:18,060 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:56:18,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:56:18,148 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:18,149 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:18,171 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 15:56:18,171 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 15:56:18,262 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:18,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:18,365 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:20,099 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10782#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= |ULTIMATE.start_main_~length3~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:20,099 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:20,099 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:20,099 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 11] total 35 [2022-12-14 15:56:20,099 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2078826352] [2022-12-14 15:56:20,099 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:20,099 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-12-14 15:56:20,099 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:20,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-12-14 15:56:20,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=253, Invalid=2197, Unknown=0, NotChecked=0, Total=2450 [2022-12-14 15:56:20,100 INFO L87 Difference]: Start difference. First operand 265 states and 306 transitions. Second operand has 37 states, 36 states have (on average 2.4166666666666665) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:23,068 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:56:23,068 INFO L93 Difference]: Finished difference Result 332 states and 369 transitions. [2022-12-14 15:56:23,068 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-12-14 15:56:23,069 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 36 states have (on average 2.4166666666666665) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-12-14 15:56:23,069 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:56:23,070 INFO L225 Difference]: With dead ends: 332 [2022-12-14 15:56:23,070 INFO L226 Difference]: Without dead ends: 332 [2022-12-14 15:56:23,071 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 48 SyntacticMatches, 1 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1306 ImplicationChecksByTransitivity, 4.9s TimeCoverageRelationStatistics Valid=895, Invalid=5267, Unknown=0, NotChecked=0, Total=6162 [2022-12-14 15:56:23,071 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 634 mSDsluCounter, 78 mSDsCounter, 0 mSdLazyCounter, 854 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 634 SdHoareTripleChecker+Valid, 86 SdHoareTripleChecker+Invalid, 892 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 854 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 15:56:23,071 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [634 Valid, 86 Invalid, 892 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 854 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 15:56:23,072 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 332 states. [2022-12-14 15:56:23,075 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 332 to 271. [2022-12-14 15:56:23,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 271 states, 268 states have (on average 1.1679104477611941) internal successors, (313), 270 states have internal predecessors, (313), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:23,076 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 271 states to 271 states and 313 transitions. [2022-12-14 15:56:23,076 INFO L78 Accepts]: Start accepts. Automaton has 271 states and 313 transitions. Word has length 29 [2022-12-14 15:56:23,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:56:23,076 INFO L495 AbstractCegarLoop]: Abstraction has 271 states and 313 transitions. [2022-12-14 15:56:23,076 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 36 states have (on average 2.4166666666666665) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:23,076 INFO L276 IsEmpty]: Start isEmpty. Operand 271 states and 313 transitions. [2022-12-14 15:56:23,077 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-12-14 15:56:23,077 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:56:23,077 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:56:23,082 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Ended with exit code 0 [2022-12-14 15:56:23,277 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-12-14 15:56:23,277 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:56:23,277 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:56:23,277 INFO L85 PathProgramCache]: Analyzing trace with hash 244584639, now seen corresponding path program 2 times [2022-12-14 15:56:23,278 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:56:23,278 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [497521618] [2022-12-14 15:56:23,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:56:23,278 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:56:23,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:23,474 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 9 proven. 41 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:56:23,474 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:56:23,474 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [497521618] [2022-12-14 15:56:23,474 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [497521618] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:56:23,475 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1137864306] [2022-12-14 15:56:23,475 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:56:23,475 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:23,475 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:56:23,476 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:56:23,476 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-12-14 15:56:23,600 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-12-14 15:56:23,600 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:56:23,602 INFO L263 TraceCheckSpWp]: Trace formula consists of 229 conjuncts, 33 conjunts are in the unsatisfiable core [2022-12-14 15:56:23,603 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:56:23,758 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 16 proven. 34 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:56:23,758 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:23,866 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 15:56:23,923 INFO L134 CoverageAnalysis]: Checked inductivity of 51 backedges. 16 proven. 34 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:56:23,923 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1137864306] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:23,923 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [305079840] [2022-12-14 15:56:23,924 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 15:56:23,924 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:23,924 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:23,924 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:23,924 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:23,951 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:23,953 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:23,953 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:23,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:24,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:24,030 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:24,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:24,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:24,134 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:24,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:24,201 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:56:24,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:56:24,395 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:25,828 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11659#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:25,828 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:25,828 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:25,828 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 34 [2022-12-14 15:56:25,828 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [74289931] [2022-12-14 15:56:25,828 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:25,828 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-12-14 15:56:25,828 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:25,829 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-12-14 15:56:25,829 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=252, Invalid=1728, Unknown=0, NotChecked=0, Total=1980 [2022-12-14 15:56:25,829 INFO L87 Difference]: Start difference. First operand 271 states and 313 transitions. Second operand has 35 states, 34 states have (on average 2.0294117647058822) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:26,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:56:26,322 INFO L93 Difference]: Finished difference Result 588 states and 644 transitions. [2022-12-14 15:56:26,322 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-12-14 15:56:26,322 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 2.0294117647058822) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-12-14 15:56:26,322 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:56:26,323 INFO L225 Difference]: With dead ends: 588 [2022-12-14 15:56:26,323 INFO L226 Difference]: Without dead ends: 588 [2022-12-14 15:56:26,324 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 50 SyntacticMatches, 6 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1094 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=515, Invalid=2791, Unknown=0, NotChecked=0, Total=3306 [2022-12-14 15:56:26,324 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 366 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 758 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 366 SdHoareTripleChecker+Valid, 295 SdHoareTripleChecker+Invalid, 787 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 758 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:56:26,324 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [366 Valid, 295 Invalid, 787 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 758 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 15:56:26,324 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 588 states. [2022-12-14 15:56:26,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 588 to 277. [2022-12-14 15:56:26,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 277 states, 274 states have (on average 1.1751824817518248) internal successors, (322), 276 states have internal predecessors, (322), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:26,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 277 states to 277 states and 322 transitions. [2022-12-14 15:56:26,328 INFO L78 Accepts]: Start accepts. Automaton has 277 states and 322 transitions. Word has length 29 [2022-12-14 15:56:26,328 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:56:26,328 INFO L495 AbstractCegarLoop]: Abstraction has 277 states and 322 transitions. [2022-12-14 15:56:26,328 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 2.0294117647058822) internal successors, (69), 35 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:26,328 INFO L276 IsEmpty]: Start isEmpty. Operand 277 states and 322 transitions. [2022-12-14 15:56:26,328 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-12-14 15:56:26,328 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:56:26,328 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:56:26,333 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Ended with exit code 0 [2022-12-14 15:56:26,529 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-12-14 15:56:26,529 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:56:26,530 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:56:26,530 INFO L85 PathProgramCache]: Analyzing trace with hash 31227491, now seen corresponding path program 7 times [2022-12-14 15:56:26,530 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:56:26,530 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2062295514] [2022-12-14 15:56:26,530 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:56:26,530 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:56:26,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:27,043 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 9 proven. 52 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:27,043 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:56:27,043 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2062295514] [2022-12-14 15:56:27,043 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2062295514] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:56:27,043 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1094410784] [2022-12-14 15:56:27,043 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:56:27,043 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:27,044 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:56:27,044 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:56:27,045 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-12-14 15:56:27,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:27,125 INFO L263 TraceCheckSpWp]: Trace formula consists of 227 conjuncts, 50 conjunts are in the unsatisfiable core [2022-12-14 15:56:27,127 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:56:27,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:27,487 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 15:56:27,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 15:56:27,511 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 6 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:27,511 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:27,689 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 15:56:27,691 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 15:56:27,803 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 6 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:27,803 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1094410784] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:27,804 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [423971969] [2022-12-14 15:56:27,805 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 15:56:27,805 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:27,805 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:27,805 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:27,805 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:27,832 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:27,833 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:27,833 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:27,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:27,909 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:27,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:27,967 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:28,015 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:56:28,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:56:28,097 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:29,191 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12769#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:29,191 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:29,191 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:29,191 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 17, 17] total 41 [2022-12-14 15:56:29,191 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [505017123] [2022-12-14 15:56:29,191 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:29,192 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-12-14 15:56:29,192 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:29,192 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-12-14 15:56:29,192 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=137, Invalid=2215, Unknown=0, NotChecked=0, Total=2352 [2022-12-14 15:56:29,192 INFO L87 Difference]: Start difference. First operand 277 states and 322 transitions. Second operand has 41 states, 41 states have (on average 1.7804878048780488) internal successors, (73), 41 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:33,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:56:33,567 INFO L93 Difference]: Finished difference Result 729 states and 797 transitions. [2022-12-14 15:56:33,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2022-12-14 15:56:33,568 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 41 states have (on average 1.7804878048780488) internal successors, (73), 41 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-12-14 15:56:33,568 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:56:33,569 INFO L225 Difference]: With dead ends: 729 [2022-12-14 15:56:33,569 INFO L226 Difference]: Without dead ends: 715 [2022-12-14 15:56:33,569 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 53 SyntacticMatches, 2 SemanticMatches, 98 ConstructedPredicates, 0 IntricatePredicates, 6 DeprecatedPredicates, 2213 ImplicationChecksByTransitivity, 5.0s TimeCoverageRelationStatistics Valid=824, Invalid=9076, Unknown=0, NotChecked=0, Total=9900 [2022-12-14 15:56:33,570 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 564 mSDsluCounter, 668 mSDsCounter, 0 mSdLazyCounter, 2309 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 564 SdHoareTripleChecker+Valid, 717 SdHoareTripleChecker+Invalid, 2324 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 2309 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:56:33,570 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [564 Valid, 717 Invalid, 2324 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 2309 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-12-14 15:56:33,570 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 715 states. [2022-12-14 15:56:33,573 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 715 to 323. [2022-12-14 15:56:33,574 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 323 states, 320 states have (on average 1.184375) internal successors, (379), 322 states have internal predecessors, (379), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:33,574 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 323 states to 323 states and 379 transitions. [2022-12-14 15:56:33,574 INFO L78 Accepts]: Start accepts. Automaton has 323 states and 379 transitions. Word has length 29 [2022-12-14 15:56:33,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:56:33,574 INFO L495 AbstractCegarLoop]: Abstraction has 323 states and 379 transitions. [2022-12-14 15:56:33,574 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 41 states have (on average 1.7804878048780488) internal successors, (73), 41 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:33,574 INFO L276 IsEmpty]: Start isEmpty. Operand 323 states and 379 transitions. [2022-12-14 15:56:33,575 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-12-14 15:56:33,575 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:56:33,575 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:56:33,579 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-12-14 15:56:33,775 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable40,26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:33,776 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:56:33,777 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:56:33,777 INFO L85 PathProgramCache]: Analyzing trace with hash -2121010301, now seen corresponding path program 6 times [2022-12-14 15:56:33,777 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:56:33,777 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1458788458] [2022-12-14 15:56:33,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:56:33,778 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:56:33,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:34,255 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 33 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:34,255 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:56:34,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1458788458] [2022-12-14 15:56:34,255 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1458788458] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:56:34,255 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [92280084] [2022-12-14 15:56:34,255 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:56:34,255 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:34,255 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:56:34,256 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:56:34,257 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-12-14 15:56:34,347 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:56:34,348 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:56:34,349 INFO L263 TraceCheckSpWp]: Trace formula consists of 283 conjuncts, 78 conjunts are in the unsatisfiable core [2022-12-14 15:56:34,351 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:56:34,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:56:34,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:34,490 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:56:34,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:56:34,639 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:56:34,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:56:34,655 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:56:34,657 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 33 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:34,657 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:34,664 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_929 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_929) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-12-14 15:56:45,381 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:56:45,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:56:45,387 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:56:45,387 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:56:45,539 INFO L134 CoverageAnalysis]: Checked inductivity of 41 backedges. 8 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 6 not checked. [2022-12-14 15:56:45,539 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [92280084] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:45,539 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [718668066] [2022-12-14 15:56:45,540 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:56:45,540 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:45,540 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:45,540 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:45,540 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:45,566 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:45,568 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:45,568 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:45,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:45,631 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:45,648 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:45,684 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:45,720 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:56:45,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:56:45,807 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:45,808 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:56:45,837 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 15:56:45,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 15:56:45,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:46,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:46,068 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:47,958 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14158#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:47,959 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:47,959 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:47,959 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 18, 18] total 40 [2022-12-14 15:56:47,959 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [177827913] [2022-12-14 15:56:47,959 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:47,959 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-12-14 15:56:47,959 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:47,959 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-12-14 15:56:47,960 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=2416, Unknown=53, NotChecked=100, Total=2756 [2022-12-14 15:56:47,960 INFO L87 Difference]: Start difference. First operand 323 states and 379 transitions. Second operand has 40 states, 40 states have (on average 1.775) internal successors, (71), 40 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:49,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:56:49,012 INFO L93 Difference]: Finished difference Result 487 states and 565 transitions. [2022-12-14 15:56:49,012 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-12-14 15:56:49,012 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 40 states have (on average 1.775) internal successors, (71), 40 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-12-14 15:56:49,012 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:56:49,013 INFO L225 Difference]: With dead ends: 487 [2022-12-14 15:56:49,013 INFO L226 Difference]: Without dead ends: 445 [2022-12-14 15:56:49,013 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 131 GetRequests, 62 SyntacticMatches, 3 SemanticMatches, 66 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1034 ImplicationChecksByTransitivity, 13.6s TimeCoverageRelationStatistics Valid=363, Invalid=4010, Unknown=53, NotChecked=130, Total=4556 [2022-12-14 15:56:49,013 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 204 mSDsluCounter, 396 mSDsCounter, 0 mSdLazyCounter, 1275 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 204 SdHoareTripleChecker+Valid, 425 SdHoareTripleChecker+Invalid, 1372 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 1275 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 83 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 15:56:49,014 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [204 Valid, 425 Invalid, 1372 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 1275 Invalid, 0 Unknown, 83 Unchecked, 0.6s Time] [2022-12-14 15:56:49,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 445 states. [2022-12-14 15:56:49,017 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 445 to 410. [2022-12-14 15:56:49,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 410 states, 407 states have (on average 1.1891891891891893) internal successors, (484), 409 states have internal predecessors, (484), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:49,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 410 states to 410 states and 484 transitions. [2022-12-14 15:56:49,018 INFO L78 Accepts]: Start accepts. Automaton has 410 states and 484 transitions. Word has length 32 [2022-12-14 15:56:49,018 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:56:49,018 INFO L495 AbstractCegarLoop]: Abstraction has 410 states and 484 transitions. [2022-12-14 15:56:49,018 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 40 states have (on average 1.775) internal successors, (71), 40 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:49,018 INFO L276 IsEmpty]: Start isEmpty. Operand 410 states and 484 transitions. [2022-12-14 15:56:49,019 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-12-14 15:56:49,019 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:56:49,019 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:56:49,023 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Ended with exit code 0 [2022-12-14 15:56:49,219 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:49,220 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:56:49,220 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:56:49,221 INFO L85 PathProgramCache]: Analyzing trace with hash 975718454, now seen corresponding path program 3 times [2022-12-14 15:56:49,221 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:56:49,221 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [637687130] [2022-12-14 15:56:49,222 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:56:49,222 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:56:49,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:49,518 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 56 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:56:49,518 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:56:49,518 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [637687130] [2022-12-14 15:56:49,518 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [637687130] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:56:49,518 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [920899797] [2022-12-14 15:56:49,518 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:56:49,518 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:49,518 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:56:49,519 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:56:49,520 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-12-14 15:56:49,608 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:56:49,609 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:56:49,610 INFO L263 TraceCheckSpWp]: Trace formula consists of 253 conjuncts, 43 conjunts are in the unsatisfiable core [2022-12-14 15:56:49,612 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:56:49,620 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:56:49,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:56:49,744 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 25 proven. 47 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:56:49,744 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:50,056 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 25 proven. 47 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:56:50,056 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [920899797] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:50,056 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [753250295] [2022-12-14 15:56:50,057 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 15:56:50,057 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:50,057 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:50,057 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:50,058 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:50,085 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:50,087 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:50,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:50,124 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:50,159 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:50,180 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:50,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:50,265 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:50,297 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:50,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:50,359 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:56:50,359 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:56:50,552 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:52,367 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15332#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:52,367 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:52,367 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:52,367 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 40 [2022-12-14 15:56:52,367 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [723143460] [2022-12-14 15:56:52,367 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:52,367 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2022-12-14 15:56:52,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:52,368 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2022-12-14 15:56:52,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=296, Invalid=2254, Unknown=0, NotChecked=0, Total=2550 [2022-12-14 15:56:52,368 INFO L87 Difference]: Start difference. First operand 410 states and 484 transitions. Second operand has 41 states, 40 states have (on average 2.075) internal successors, (83), 41 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:53,184 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:56:53,185 INFO L93 Difference]: Finished difference Result 940 states and 1041 transitions. [2022-12-14 15:56:53,185 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-12-14 15:56:53,185 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 40 states have (on average 2.075) internal successors, (83), 41 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-12-14 15:56:53,185 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:56:53,189 INFO L225 Difference]: With dead ends: 940 [2022-12-14 15:56:53,189 INFO L226 Difference]: Without dead ends: 940 [2022-12-14 15:56:53,190 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1164 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=689, Invalid=3601, Unknown=0, NotChecked=0, Total=4290 [2022-12-14 15:56:53,190 INFO L413 NwaCegarLoop]: 56 mSDtfsCounter, 365 mSDsluCounter, 363 mSDsCounter, 0 mSdLazyCounter, 1281 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 365 SdHoareTripleChecker+Valid, 419 SdHoareTripleChecker+Invalid, 1302 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 1281 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 15:56:53,190 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [365 Valid, 419 Invalid, 1302 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 1281 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 15:56:53,191 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 940 states. [2022-12-14 15:56:53,196 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 940 to 418. [2022-12-14 15:56:53,196 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 418 states, 415 states have (on average 1.1951807228915663) internal successors, (496), 417 states have internal predecessors, (496), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:53,197 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 418 states to 418 states and 496 transitions. [2022-12-14 15:56:53,197 INFO L78 Accepts]: Start accepts. Automaton has 418 states and 496 transitions. Word has length 33 [2022-12-14 15:56:53,197 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:56:53,197 INFO L495 AbstractCegarLoop]: Abstraction has 418 states and 496 transitions. [2022-12-14 15:56:53,197 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 40 states have (on average 2.075) internal successors, (83), 41 states have internal predecessors, (83), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:56:53,197 INFO L276 IsEmpty]: Start isEmpty. Operand 418 states and 496 transitions. [2022-12-14 15:56:53,197 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-12-14 15:56:53,197 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:56:53,198 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:56:53,203 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Ended with exit code 0 [2022-12-14 15:56:53,398 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable42,28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:53,399 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:56:53,399 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:56:53,400 INFO L85 PathProgramCache]: Analyzing trace with hash -16464562, now seen corresponding path program 2 times [2022-12-14 15:56:53,400 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:56:53,400 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [54775997] [2022-12-14 15:56:53,400 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:56:53,401 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:56:53,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:56:53,875 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:53,875 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:56:53,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [54775997] [2022-12-14 15:56:53,875 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [54775997] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:56:53,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1089483657] [2022-12-14 15:56:53,875 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:56:53,875 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:56:53,875 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:56:53,876 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:56:53,877 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-12-14 15:56:54,046 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 15:56:54,046 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:56:54,048 INFO L263 TraceCheckSpWp]: Trace formula consists of 266 conjuncts, 48 conjunts are in the unsatisfiable core [2022-12-14 15:56:54,049 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:56:54,092 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:56:54,092 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:56:54,642 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 7 proven. 33 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:54,642 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:56:55,361 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 17 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:56:55,362 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1089483657] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:56:55,362 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [724889127] [2022-12-14 15:56:55,363 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 15:56:55,363 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:56:55,363 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:56:55,363 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:56:55,363 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:56:55,391 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:55,393 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:56:55,395 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:56:55,428 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:55,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:55,484 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:55,528 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:55,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:55,590 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:55,606 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:56:55,641 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:56:55,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:56:55,780 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 15:56:55,780 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 15:56:55,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:55,915 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:56:56,061 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:56:58,663 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16973#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:56:58,664 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:56:58,664 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:56:58,664 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 17, 16] total 49 [2022-12-14 15:56:58,664 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [112354347] [2022-12-14 15:56:58,664 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:56:58,664 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-12-14 15:56:58,664 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:56:58,664 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-12-14 15:56:58,665 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=359, Invalid=3801, Unknown=0, NotChecked=0, Total=4160 [2022-12-14 15:56:58,665 INFO L87 Difference]: Start difference. First operand 418 states and 496 transitions. Second operand has 51 states, 50 states have (on average 1.98) internal successors, (99), 50 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:04,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:57:04,227 INFO L93 Difference]: Finished difference Result 743 states and 819 transitions. [2022-12-14 15:57:04,227 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 68 states. [2022-12-14 15:57:04,228 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 50 states have (on average 1.98) internal successors, (99), 50 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-12-14 15:57:04,228 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:57:04,228 INFO L225 Difference]: With dead ends: 743 [2022-12-14 15:57:04,229 INFO L226 Difference]: Without dead ends: 647 [2022-12-14 15:57:04,229 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 178 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 128 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3997 ImplicationChecksByTransitivity, 8.6s TimeCoverageRelationStatistics Valid=2568, Invalid=14202, Unknown=0, NotChecked=0, Total=16770 [2022-12-14 15:57:04,229 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 1275 mSDsluCounter, 282 mSDsCounter, 0 mSdLazyCounter, 1698 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1275 SdHoareTripleChecker+Valid, 302 SdHoareTripleChecker+Invalid, 1755 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 1698 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-12-14 15:57:04,229 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1275 Valid, 302 Invalid, 1755 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 1698 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-12-14 15:57:04,230 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 647 states. [2022-12-14 15:57:04,233 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 647 to 386. [2022-12-14 15:57:04,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 386 states, 383 states have (on average 1.154046997389034) internal successors, (442), 385 states have internal predecessors, (442), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:04,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 386 states to 386 states and 442 transitions. [2022-12-14 15:57:04,234 INFO L78 Accepts]: Start accepts. Automaton has 386 states and 442 transitions. Word has length 33 [2022-12-14 15:57:04,234 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:57:04,234 INFO L495 AbstractCegarLoop]: Abstraction has 386 states and 442 transitions. [2022-12-14 15:57:04,234 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 50 states have (on average 1.98) internal successors, (99), 50 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:04,234 INFO L276 IsEmpty]: Start isEmpty. Operand 386 states and 442 transitions. [2022-12-14 15:57:04,234 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-12-14 15:57:04,234 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:57:04,234 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:57:04,239 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Ended with exit code 0 [2022-12-14 15:57:04,435 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable43 [2022-12-14 15:57:04,436 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:57:04,436 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:57:04,436 INFO L85 PathProgramCache]: Analyzing trace with hash -230116198, now seen corresponding path program 8 times [2022-12-14 15:57:04,437 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:57:04,437 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [315659190] [2022-12-14 15:57:04,437 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:57:04,437 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:57:04,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:57:04,931 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 16 proven. 69 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:04,931 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:57:04,931 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [315659190] [2022-12-14 15:57:04,931 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [315659190] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:57:04,931 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1905642012] [2022-12-14 15:57:04,931 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:57:04,931 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:57:04,931 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:57:04,932 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:57:04,933 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-12-14 15:57:05,117 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2022-12-14 15:57:05,117 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:57:05,119 INFO L263 TraceCheckSpWp]: Trace formula consists of 251 conjuncts, 48 conjunts are in the unsatisfiable core [2022-12-14 15:57:05,121 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:57:05,130 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:57:05,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:57:05,244 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:11,669 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:57:11,669 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 19 [2022-12-14 15:57:11,750 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 25 proven. 60 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:11,751 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:57:12,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-12-14 15:57:12,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-12-14 15:57:12,605 INFO L134 CoverageAnalysis]: Checked inductivity of 85 backedges. 25 proven. 60 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:12,605 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1905642012] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:57:12,605 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [213858729] [2022-12-14 15:57:12,606 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 15:57:12,606 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:57:12,606 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:57:12,607 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:57:12,607 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:57:12,631 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:12,634 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:12,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:57:12,676 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:12,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:12,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:12,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:12,811 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:57:12,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:57:12,902 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:57:14,045 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18490#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:57:14,045 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:57:14,045 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:57:14,045 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 17, 17] total 51 [2022-12-14 15:57:14,045 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1771409703] [2022-12-14 15:57:14,046 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:57:14,046 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-12-14 15:57:14,046 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:57:14,047 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-12-14 15:57:14,047 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=340, Invalid=3198, Unknown=2, NotChecked=0, Total=3540 [2022-12-14 15:57:14,047 INFO L87 Difference]: Start difference. First operand 386 states and 442 transitions. Second operand has 52 states, 51 states have (on average 1.9019607843137254) internal successors, (97), 52 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:43,642 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 15:57:56,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:57:56,534 INFO L93 Difference]: Finished difference Result 916 states and 995 transitions. [2022-12-14 15:57:56,535 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 49 states. [2022-12-14 15:57:56,535 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 51 states have (on average 1.9019607843137254) internal successors, (97), 52 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-12-14 15:57:56,535 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:57:56,536 INFO L225 Difference]: With dead ends: 916 [2022-12-14 15:57:56,536 INFO L226 Difference]: Without dead ends: 916 [2022-12-14 15:57:56,537 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 163 GetRequests, 58 SyntacticMatches, 1 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2152 ImplicationChecksByTransitivity, 46.3s TimeCoverageRelationStatistics Valid=1902, Invalid=9223, Unknown=5, NotChecked=0, Total=11130 [2022-12-14 15:57:56,537 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 800 mSDsluCounter, 358 mSDsCounter, 0 mSdLazyCounter, 2312 mSolverCounterSat, 47 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 800 SdHoareTripleChecker+Valid, 384 SdHoareTripleChecker+Invalid, 2360 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 47 IncrementalHoareTripleChecker+Valid, 2312 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.7s IncrementalHoareTripleChecker+Time [2022-12-14 15:57:56,537 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [800 Valid, 384 Invalid, 2360 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [47 Valid, 2312 Invalid, 1 Unknown, 0 Unchecked, 4.7s Time] [2022-12-14 15:57:56,537 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 916 states. [2022-12-14 15:57:56,541 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 916 to 396. [2022-12-14 15:57:56,542 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 396 states, 393 states have (on average 1.1603053435114503) internal successors, (456), 395 states have internal predecessors, (456), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:56,542 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 396 states to 396 states and 456 transitions. [2022-12-14 15:57:56,542 INFO L78 Accepts]: Start accepts. Automaton has 396 states and 456 transitions. Word has length 33 [2022-12-14 15:57:56,542 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:57:56,542 INFO L495 AbstractCegarLoop]: Abstraction has 396 states and 456 transitions. [2022-12-14 15:57:56,542 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 51 states have (on average 1.9019607843137254) internal successors, (97), 52 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:57:56,543 INFO L276 IsEmpty]: Start isEmpty. Operand 396 states and 456 transitions. [2022-12-14 15:57:56,543 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-12-14 15:57:56,543 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:57:56,543 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:57:56,547 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Ended with exit code 0 [2022-12-14 15:57:56,743 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable44 [2022-12-14 15:57:56,743 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:57:56,744 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:57:56,744 INFO L85 PathProgramCache]: Analyzing trace with hash 1809691826, now seen corresponding path program 7 times [2022-12-14 15:57:56,744 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:57:56,744 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1432256618] [2022-12-14 15:57:56,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:57:56,744 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:57:56,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:57:57,019 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 4 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:57,019 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:57:57,019 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1432256618] [2022-12-14 15:57:57,019 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1432256618] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:57:57,019 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [943132378] [2022-12-14 15:57:57,019 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:57:57,019 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:57:57,019 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:57:57,020 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:57:57,020 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-12-14 15:57:57,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:57:57,115 INFO L263 TraceCheckSpWp]: Trace formula consists of 296 conjuncts, 51 conjunts are in the unsatisfiable core [2022-12-14 15:57:57,116 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:57:57,289 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:57,289 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:57:57,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 15:57:57,550 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 9 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:57:57,550 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [943132378] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:57:57,550 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2128588478] [2022-12-14 15:57:57,551 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:57:57,551 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:57:57,551 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:57:57,551 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:57:57,551 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:57:57,574 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:57,577 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:57:57,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:57:57,607 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:57:57,649 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:57,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:57,714 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:57:57,747 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:57:57,747 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:57:57,841 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:57:57,843 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:57:57,870 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 15:57:57,870 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 15:57:57,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:57:58,052 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:57:58,121 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:58:00,644 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20133#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:58:00,644 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:58:00,644 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:58:00,644 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 14, 14] total 30 [2022-12-14 15:58:00,644 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [953970807] [2022-12-14 15:58:00,645 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:58:00,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-12-14 15:58:00,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:58:00,645 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-12-14 15:58:00,645 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=182, Invalid=1710, Unknown=0, NotChecked=0, Total=1892 [2022-12-14 15:58:00,645 INFO L87 Difference]: Start difference. First operand 396 states and 456 transitions. Second operand has 31 states, 30 states have (on average 2.433333333333333) internal successors, (73), 31 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:01,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:58:01,265 INFO L93 Difference]: Finished difference Result 450 states and 501 transitions. [2022-12-14 15:58:01,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-12-14 15:58:01,266 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 2.433333333333333) internal successors, (73), 31 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-12-14 15:58:01,266 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:58:01,266 INFO L225 Difference]: With dead ends: 450 [2022-12-14 15:58:01,266 INFO L226 Difference]: Without dead ends: 450 [2022-12-14 15:58:01,267 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 67 SyntacticMatches, 5 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 854 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=485, Invalid=3055, Unknown=0, NotChecked=0, Total=3540 [2022-12-14 15:58:01,267 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 310 mSDsluCounter, 188 mSDsCounter, 0 mSdLazyCounter, 864 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 310 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 867 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 864 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:58:01,267 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [310 Valid, 205 Invalid, 867 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 864 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 15:58:01,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 450 states. [2022-12-14 15:58:01,270 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 450 to 409. [2022-12-14 15:58:01,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 409 states, 406 states have (on average 1.1551724137931034) internal successors, (469), 408 states have internal predecessors, (469), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:01,271 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 409 states to 409 states and 469 transitions. [2022-12-14 15:58:01,271 INFO L78 Accepts]: Start accepts. Automaton has 409 states and 469 transitions. Word has length 34 [2022-12-14 15:58:01,271 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:58:01,271 INFO L495 AbstractCegarLoop]: Abstraction has 409 states and 469 transitions. [2022-12-14 15:58:01,271 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 2.433333333333333) internal successors, (73), 31 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:01,271 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 469 transitions. [2022-12-14 15:58:01,272 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-12-14 15:58:01,272 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:58:01,272 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 6, 6, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:58:01,276 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Ended with exit code 0 [2022-12-14 15:58:01,472 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable45 [2022-12-14 15:58:01,473 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:58:01,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:58:01,474 INFO L85 PathProgramCache]: Analyzing trace with hash -2098332497, now seen corresponding path program 9 times [2022-12-14 15:58:01,474 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:58:01,474 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [295919131] [2022-12-14 15:58:01,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:58:01,475 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:58:01,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:58:01,839 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 21 proven. 78 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:58:01,839 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:58:01,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [295919131] [2022-12-14 15:58:01,839 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [295919131] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:58:01,839 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [792589915] [2022-12-14 15:58:01,839 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:58:01,839 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:58:01,839 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:58:01,840 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:58:01,841 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-12-14 15:58:01,962 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:58:01,962 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:58:01,964 INFO L263 TraceCheckSpWp]: Trace formula consists of 262 conjuncts, 54 conjunts are in the unsatisfiable core [2022-12-14 15:58:01,966 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:58:02,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:02,168 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:58:02,169 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 21 proven. 78 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:58:02,170 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:58:02,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 15:58:02,201 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 15:58:02,275 INFO L134 CoverageAnalysis]: Checked inductivity of 100 backedges. 21 proven. 78 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:58:02,275 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [792589915] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:58:02,276 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1640202544] [2022-12-14 15:58:02,276 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 15:58:02,276 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:58:02,276 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:58:02,276 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:58:02,276 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:58:02,311 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:02,313 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:02,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:58:02,355 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:02,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:02,428 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:02,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:02,512 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:58:02,512 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:58:02,592 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:58:03,597 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21274#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:58:03,597 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:58:03,597 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:58:03,597 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 19, 19] total 33 [2022-12-14 15:58:03,597 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [717061403] [2022-12-14 15:58:03,597 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:58:03,597 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2022-12-14 15:58:03,597 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:58:03,597 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2022-12-14 15:58:03,598 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=129, Invalid=1511, Unknown=0, NotChecked=0, Total=1640 [2022-12-14 15:58:03,598 INFO L87 Difference]: Start difference. First operand 409 states and 469 transitions. Second operand has 33 states, 33 states have (on average 1.8181818181818181) internal successors, (60), 33 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:04,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:58:04,624 INFO L93 Difference]: Finished difference Result 1182 states and 1278 transitions. [2022-12-14 15:58:04,624 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-12-14 15:58:04,624 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 33 states have (on average 1.8181818181818181) internal successors, (60), 33 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-12-14 15:58:04,624 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:58:04,625 INFO L225 Difference]: With dead ends: 1182 [2022-12-14 15:58:04,625 INFO L226 Difference]: Without dead ends: 1166 [2022-12-14 15:58:04,626 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 81 SyntacticMatches, 3 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 686 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=293, Invalid=2899, Unknown=0, NotChecked=0, Total=3192 [2022-12-14 15:58:04,626 INFO L413 NwaCegarLoop]: 67 mSDtfsCounter, 335 mSDsluCounter, 816 mSDsCounter, 0 mSdLazyCounter, 1421 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 335 SdHoareTripleChecker+Valid, 883 SdHoareTripleChecker+Invalid, 1433 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 1421 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 15:58:04,626 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [335 Valid, 883 Invalid, 1433 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 1421 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-12-14 15:58:04,627 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1166 states. [2022-12-14 15:58:04,631 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1166 to 483. [2022-12-14 15:58:04,631 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 483 states, 480 states have (on average 1.1583333333333334) internal successors, (556), 482 states have internal predecessors, (556), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:04,631 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 483 states to 483 states and 556 transitions. [2022-12-14 15:58:04,632 INFO L78 Accepts]: Start accepts. Automaton has 483 states and 556 transitions. Word has length 35 [2022-12-14 15:58:04,632 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:58:04,632 INFO L495 AbstractCegarLoop]: Abstraction has 483 states and 556 transitions. [2022-12-14 15:58:04,632 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 33 states have (on average 1.8181818181818181) internal successors, (60), 33 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:04,632 INFO L276 IsEmpty]: Start isEmpty. Operand 483 states and 556 transitions. [2022-12-14 15:58:04,632 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-12-14 15:58:04,632 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:58:04,632 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:58:04,637 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Ended with exit code 0 [2022-12-14 15:58:04,833 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable46 [2022-12-14 15:58:04,833 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:58:04,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:58:04,833 INFO L85 PathProgramCache]: Analyzing trace with hash 1507486130, now seen corresponding path program 3 times [2022-12-14 15:58:04,833 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:58:04,833 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1567153871] [2022-12-14 15:58:04,833 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:58:04,833 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:58:04,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:58:05,326 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 1 proven. 39 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:05,326 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:58:05,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1567153871] [2022-12-14 15:58:05,326 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1567153871] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:58:05,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1705572120] [2022-12-14 15:58:05,326 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:58:05,326 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:58:05,326 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:58:05,327 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:58:05,328 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-12-14 15:58:05,473 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:58:05,474 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:58:05,476 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 66 conjunts are in the unsatisfiable core [2022-12-14 15:58:05,478 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:58:05,520 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 15:58:05,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 15:58:06,403 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 5 proven. 35 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:06,404 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:58:07,126 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 13 proven. 27 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:07,126 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1705572120] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:58:07,127 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [800287681] [2022-12-14 15:58:07,127 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 15:58:07,127 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:58:07,127 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:58:07,127 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:58:07,128 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:58:07,150 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:07,153 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:07,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:58:07,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:07,215 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:07,230 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:07,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:07,296 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:07,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:07,329 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:07,361 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:58:07,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:58:07,506 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 15:58:07,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 15:58:07,554 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:07,613 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:07,746 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:58:10,526 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23246#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:58:10,526 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:58:10,527 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:58:10,527 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 17] total 49 [2022-12-14 15:58:10,527 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [579918383] [2022-12-14 15:58:10,527 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:58:10,527 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-12-14 15:58:10,527 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:58:10,527 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-12-14 15:58:10,528 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=373, Invalid=3787, Unknown=0, NotChecked=0, Total=4160 [2022-12-14 15:58:10,528 INFO L87 Difference]: Start difference. First operand 483 states and 556 transitions. Second operand has 51 states, 50 states have (on average 2.22) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:17,507 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:58:17,507 INFO L93 Difference]: Finished difference Result 780 states and 853 transitions. [2022-12-14 15:58:17,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 73 states. [2022-12-14 15:58:17,507 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 50 states have (on average 2.22) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-12-14 15:58:17,507 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:58:17,508 INFO L225 Difference]: With dead ends: 780 [2022-12-14 15:58:17,508 INFO L226 Difference]: Without dead ends: 732 [2022-12-14 15:58:17,509 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 195 GetRequests, 62 SyntacticMatches, 0 SemanticMatches, 133 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4935 ImplicationChecksByTransitivity, 10.2s TimeCoverageRelationStatistics Valid=2855, Invalid=15235, Unknown=0, NotChecked=0, Total=18090 [2022-12-14 15:58:17,510 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 1273 mSDsluCounter, 216 mSDsCounter, 0 mSdLazyCounter, 1539 mSolverCounterSat, 69 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1273 SdHoareTripleChecker+Valid, 232 SdHoareTripleChecker+Invalid, 1608 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 69 IncrementalHoareTripleChecker+Valid, 1539 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2022-12-14 15:58:17,510 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1273 Valid, 232 Invalid, 1608 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [69 Valid, 1539 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2022-12-14 15:58:17,510 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 732 states. [2022-12-14 15:58:17,514 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 732 to 487. [2022-12-14 15:58:17,514 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 487 states, 484 states have (on average 1.1611570247933884) internal successors, (562), 486 states have internal predecessors, (562), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:17,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 487 states to 487 states and 562 transitions. [2022-12-14 15:58:17,514 INFO L78 Accepts]: Start accepts. Automaton has 487 states and 562 transitions. Word has length 37 [2022-12-14 15:58:17,515 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:58:17,515 INFO L495 AbstractCegarLoop]: Abstraction has 487 states and 562 transitions. [2022-12-14 15:58:17,515 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 50 states have (on average 2.22) internal successors, (111), 50 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:17,515 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 562 transitions. [2022-12-14 15:58:17,515 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-12-14 15:58:17,515 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:58:17,515 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:58:17,520 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Ended with exit code 0 [2022-12-14 15:58:17,716 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-12-14 15:58:17,716 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:58:17,717 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:58:17,717 INFO L85 PathProgramCache]: Analyzing trace with hash -1301858287, now seen corresponding path program 10 times [2022-12-14 15:58:17,717 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:58:17,718 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [918337459] [2022-12-14 15:58:17,718 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:58:17,718 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:58:17,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:58:18,376 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 25 proven. 88 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:18,376 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:58:18,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [918337459] [2022-12-14 15:58:18,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [918337459] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:58:18,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1539418442] [2022-12-14 15:58:18,377 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:58:18,377 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:58:18,377 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:58:18,377 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:58:18,381 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-12-14 15:58:18,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:58:18,476 INFO L263 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 62 conjunts are in the unsatisfiable core [2022-12-14 15:58:18,477 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:58:18,697 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:19,198 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 15:58:19,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 15:58:19,237 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 8 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:19,238 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:58:19,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 15:58:19,634 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 15:58:19,806 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 8 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:19,807 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1539418442] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:58:19,807 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2129174678] [2022-12-14 15:58:19,808 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 15:58:19,808 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:58:19,808 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:58:19,808 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:58:19,808 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:58:19,837 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:19,839 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:19,839 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:58:19,877 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:19,914 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:19,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:19,984 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:20,030 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:58:20,031 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:58:20,109 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:58:21,648 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24934#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:58:21,649 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:58:21,649 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:58:21,649 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 21, 21] total 51 [2022-12-14 15:58:21,649 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [165028278] [2022-12-14 15:58:21,649 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:58:21,649 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-12-14 15:58:21,649 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:58:21,650 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-12-14 15:58:21,650 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=172, Invalid=3250, Unknown=0, NotChecked=0, Total=3422 [2022-12-14 15:58:21,650 INFO L87 Difference]: Start difference. First operand 487 states and 562 transitions. Second operand has 51 states, 51 states have (on average 1.8235294117647058) internal successors, (93), 51 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:27,715 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:58:27,716 INFO L93 Difference]: Finished difference Result 1550 states and 1684 transitions. [2022-12-14 15:58:27,716 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-12-14 15:58:27,716 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 51 states have (on average 1.8235294117647058) internal successors, (93), 51 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 37 [2022-12-14 15:58:27,716 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:58:27,718 INFO L225 Difference]: With dead ends: 1550 [2022-12-14 15:58:27,718 INFO L226 Difference]: Without dead ends: 1532 [2022-12-14 15:58:27,718 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 177 GetRequests, 71 SyntacticMatches, 2 SemanticMatches, 104 ConstructedPredicates, 0 IntricatePredicates, 8 DeprecatedPredicates, 2256 ImplicationChecksByTransitivity, 6.8s TimeCoverageRelationStatistics Valid=1020, Invalid=10110, Unknown=0, NotChecked=0, Total=11130 [2022-12-14 15:58:27,719 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 1592 mSDsluCounter, 889 mSDsCounter, 0 mSdLazyCounter, 4056 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1592 SdHoareTripleChecker+Valid, 926 SdHoareTripleChecker+Invalid, 4086 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 4056 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-12-14 15:58:27,719 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1592 Valid, 926 Invalid, 4086 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 4056 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-12-14 15:58:27,719 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1532 states. [2022-12-14 15:58:27,725 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1532 to 571. [2022-12-14 15:58:27,725 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 571 states, 568 states have (on average 1.1742957746478873) internal successors, (667), 570 states have internal predecessors, (667), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:27,726 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 571 states to 571 states and 667 transitions. [2022-12-14 15:58:27,726 INFO L78 Accepts]: Start accepts. Automaton has 571 states and 667 transitions. Word has length 37 [2022-12-14 15:58:27,726 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:58:27,726 INFO L495 AbstractCegarLoop]: Abstraction has 571 states and 667 transitions. [2022-12-14 15:58:27,726 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 51 states have (on average 1.8235294117647058) internal successors, (93), 51 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:27,726 INFO L276 IsEmpty]: Start isEmpty. Operand 571 states and 667 transitions. [2022-12-14 15:58:27,726 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-12-14 15:58:27,726 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:58:27,726 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:58:27,731 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Ended with exit code 0 [2022-12-14 15:58:27,927 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-12-14 15:58:27,928 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:58:27,928 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:58:27,928 INFO L85 PathProgramCache]: Analyzing trace with hash 666809658, now seen corresponding path program 8 times [2022-12-14 15:58:27,929 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:58:27,929 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [279880704] [2022-12-14 15:58:27,929 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:58:27,929 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:58:27,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:58:28,604 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 10 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:28,604 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:58:28,604 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [279880704] [2022-12-14 15:58:28,604 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [279880704] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:58:28,605 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [110500097] [2022-12-14 15:58:28,605 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:58:28,605 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:58:28,605 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:58:28,606 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:58:28,606 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-12-14 15:58:28,783 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-12-14 15:58:28,783 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:58:28,786 INFO L263 TraceCheckSpWp]: Trace formula consists of 327 conjuncts, 98 conjunts are in the unsatisfiable core [2022-12-14 15:58:28,788 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:58:28,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:58:28,922 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:28,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:58:29,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:58:29,082 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:58:29,163 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:58:29,236 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:58:29,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:58:29,301 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 10 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:29,301 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:58:29,310 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1323 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1323) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-12-14 15:58:29,316 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1323 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1323) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-12-14 15:58:29,323 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1323 (Array Int Int)) (v_ArrVal_1322 (Array Int Int))) (= (select (select (store (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_1322) |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1323) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-12-14 15:58:29,810 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:58:29,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:58:29,816 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:58:29,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:58:29,824 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 15:58:30,097 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 10 proven. 34 refuted. 0 times theorem prover too weak. 0 trivial. 22 not checked. [2022-12-14 15:58:30,097 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [110500097] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:58:30,097 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [274969629] [2022-12-14 15:58:30,098 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:58:30,098 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:58:30,098 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:58:30,098 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:58:30,098 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:58:30,122 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:30,126 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:30,127 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:58:30,155 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:30,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:30,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:30,235 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:30,280 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:58:30,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:58:30,362 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:58:30,362 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:58:30,394 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 15:58:30,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 15:58:30,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:30,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:30,582 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:58:33,047 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '27432#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:58:33,047 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:58:33,047 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:58:33,047 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 21, 21] total 52 [2022-12-14 15:58:33,048 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [521892816] [2022-12-14 15:58:33,048 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:58:33,048 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-12-14 15:58:33,048 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:58:33,048 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-12-14 15:58:33,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=227, Invalid=3518, Unknown=49, NotChecked=366, Total=4160 [2022-12-14 15:58:33,048 INFO L87 Difference]: Start difference. First operand 571 states and 667 transitions. Second operand has 52 states, 52 states have (on average 1.7115384615384615) internal successors, (89), 52 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:34,722 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:58:34,723 INFO L93 Difference]: Finished difference Result 841 states and 974 transitions. [2022-12-14 15:58:34,723 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-12-14 15:58:34,723 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 52 states have (on average 1.7115384615384615) internal successors, (89), 52 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-12-14 15:58:34,723 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:58:34,724 INFO L225 Difference]: With dead ends: 841 [2022-12-14 15:58:34,724 INFO L226 Difference]: Without dead ends: 769 [2022-12-14 15:58:34,724 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 157 GetRequests, 72 SyntacticMatches, 5 SemanticMatches, 80 ConstructedPredicates, 3 IntricatePredicates, 0 DeprecatedPredicates, 1692 ImplicationChecksByTransitivity, 4.6s TimeCoverageRelationStatistics Valid=430, Invalid=5694, Unknown=50, NotChecked=468, Total=6642 [2022-12-14 15:58:34,725 INFO L413 NwaCegarLoop]: 40 mSDtfsCounter, 210 mSDsluCounter, 770 mSDsCounter, 0 mSdLazyCounter, 2089 mSolverCounterSat, 18 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 210 SdHoareTripleChecker+Valid, 810 SdHoareTripleChecker+Invalid, 2382 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 2089 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 273 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 15:58:34,725 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [210 Valid, 810 Invalid, 2382 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 2089 Invalid, 2 Unknown, 273 Unchecked, 0.8s Time] [2022-12-14 15:58:34,725 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 769 states. [2022-12-14 15:58:34,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 769 to 698. [2022-12-14 15:58:34,729 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 698 states, 695 states have (on average 1.1784172661870504) internal successors, (819), 697 states have internal predecessors, (819), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:34,730 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 698 states to 698 states and 819 transitions. [2022-12-14 15:58:34,730 INFO L78 Accepts]: Start accepts. Automaton has 698 states and 819 transitions. Word has length 38 [2022-12-14 15:58:34,730 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:58:34,730 INFO L495 AbstractCegarLoop]: Abstraction has 698 states and 819 transitions. [2022-12-14 15:58:34,730 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 52 states have (on average 1.7115384615384615) internal successors, (89), 52 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:34,730 INFO L276 IsEmpty]: Start isEmpty. Operand 698 states and 819 transitions. [2022-12-14 15:58:34,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-12-14 15:58:34,731 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:58:34,731 INFO L195 NwaCegarLoop]: trace histogram [6, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:58:34,736 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Ended with exit code 0 [2022-12-14 15:58:34,932 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 35 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable49 [2022-12-14 15:58:34,932 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:58:34,933 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:58:34,933 INFO L85 PathProgramCache]: Analyzing trace with hash -1070033111, now seen corresponding path program 9 times [2022-12-14 15:58:34,933 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:58:34,934 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1849887598] [2022-12-14 15:58:34,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:58:34,934 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:58:34,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:58:35,292 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 9 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:35,292 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:58:35,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1849887598] [2022-12-14 15:58:35,292 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1849887598] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:58:35,292 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [750129662] [2022-12-14 15:58:35,292 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:58:35,293 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:58:35,293 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:58:35,293 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:58:35,294 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Waiting until timeout for monitored process [2022-12-14 15:58:35,509 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:58:35,509 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:58:35,512 INFO L263 TraceCheckSpWp]: Trace formula consists of 340 conjuncts, 60 conjunts are in the unsatisfiable core [2022-12-14 15:58:35,513 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:58:35,723 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 16 proven. 59 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:35,723 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:58:36,010 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 15:58:36,086 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 16 proven. 59 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:36,086 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [750129662] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:58:36,087 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [512118997] [2022-12-14 15:58:36,087 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:58:36,087 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:58:36,087 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:58:36,088 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:58:36,088 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:58:36,110 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:36,112 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:36,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:58:36,140 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:36,170 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:36,192 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:36,230 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:36,276 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:58:36,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:58:36,367 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:58:36,368 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:58:36,393 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 15:58:36,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 15:58:36,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:36,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:36,670 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:58:38,987 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '29290#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:58:38,988 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:58:38,988 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:58:38,988 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16, 16] total 34 [2022-12-14 15:58:38,988 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [177486174] [2022-12-14 15:58:38,988 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:58:38,988 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2022-12-14 15:58:38,988 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:58:38,988 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2022-12-14 15:58:38,989 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=209, Invalid=2047, Unknown=0, NotChecked=0, Total=2256 [2022-12-14 15:58:38,989 INFO L87 Difference]: Start difference. First operand 698 states and 819 transitions. Second operand has 35 states, 34 states have (on average 2.5) internal successors, (85), 35 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:39,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:58:39,775 INFO L93 Difference]: Finished difference Result 782 states and 893 transitions. [2022-12-14 15:58:39,775 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-12-14 15:58:39,775 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 34 states have (on average 2.5) internal successors, (85), 35 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-12-14 15:58:39,776 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:58:39,777 INFO L225 Difference]: With dead ends: 782 [2022-12-14 15:58:39,777 INFO L226 Difference]: Without dead ends: 782 [2022-12-14 15:58:39,777 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 82 SyntacticMatches, 6 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1112 ImplicationChecksByTransitivity, 3.2s TimeCoverageRelationStatistics Valid=615, Invalid=3807, Unknown=0, NotChecked=0, Total=4422 [2022-12-14 15:58:39,777 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 435 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 968 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 435 SdHoareTripleChecker+Valid, 222 SdHoareTripleChecker+Invalid, 972 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 968 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 15:58:39,777 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [435 Valid, 222 Invalid, 972 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 968 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 15:58:39,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 782 states. [2022-12-14 15:58:39,784 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 782 to 707. [2022-12-14 15:58:39,784 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 707 states, 704 states have (on average 1.1761363636363635) internal successors, (828), 706 states have internal predecessors, (828), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:39,785 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 707 states to 707 states and 828 transitions. [2022-12-14 15:58:39,785 INFO L78 Accepts]: Start accepts. Automaton has 707 states and 828 transitions. Word has length 40 [2022-12-14 15:58:39,785 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:58:39,785 INFO L495 AbstractCegarLoop]: Abstraction has 707 states and 828 transitions. [2022-12-14 15:58:39,785 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 34 states have (on average 2.5) internal successors, (85), 35 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:39,785 INFO L276 IsEmpty]: Start isEmpty. Operand 707 states and 828 transitions. [2022-12-14 15:58:39,786 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-12-14 15:58:39,786 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:58:39,786 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:58:39,790 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (36)] Ended with exit code 0 [2022-12-14 15:58:39,987 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,36 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:58:39,987 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:58:39,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:58:39,988 INFO L85 PathProgramCache]: Analyzing trace with hash 1188711958, now seen corresponding path program 3 times [2022-12-14 15:58:39,988 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:58:39,989 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1270430444] [2022-12-14 15:58:39,989 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:58:39,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:58:40,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:58:40,601 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:40,601 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:58:40,601 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1270430444] [2022-12-14 15:58:40,601 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1270430444] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:58:40,601 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1102996965] [2022-12-14 15:58:40,602 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:58:40,602 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:58:40,602 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:58:40,602 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:58:40,603 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Waiting until timeout for monitored process [2022-12-14 15:58:40,848 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:58:40,848 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:58:40,850 INFO L263 TraceCheckSpWp]: Trace formula consists of 346 conjuncts, 71 conjunts are in the unsatisfiable core [2022-12-14 15:58:40,852 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:58:40,898 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 15:58:40,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 15:58:41,756 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:41,756 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:58:42,409 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 25 proven. 55 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:42,409 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1102996965] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:58:42,409 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1400139130] [2022-12-14 15:58:42,410 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:58:42,410 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:58:42,410 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:58:42,410 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:58:42,410 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:58:42,439 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:42,442 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:42,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:58:42,467 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:42,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:42,512 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:42,563 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:42,595 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:58:42,596 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:58:42,680 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:58:42,682 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:58:42,711 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 15:58:42,711 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 15:58:42,783 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:42,852 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:42,893 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:58:45,300 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '31118#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= |ULTIMATE.start_main_~length3~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:58:45,301 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:58:45,301 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:58:45,301 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 15, 15] total 46 [2022-12-14 15:58:45,301 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1036510346] [2022-12-14 15:58:45,301 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:58:45,301 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-12-14 15:58:45,301 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:58:45,302 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-12-14 15:58:45,302 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=349, Invalid=3311, Unknown=0, NotChecked=0, Total=3660 [2022-12-14 15:58:45,302 INFO L87 Difference]: Start difference. First operand 707 states and 828 transitions. Second operand has 48 states, 47 states have (on average 2.617021276595745) internal successors, (123), 47 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:48,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:58:48,866 INFO L93 Difference]: Finished difference Result 854 states and 970 transitions. [2022-12-14 15:58:48,867 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 47 states. [2022-12-14 15:58:48,867 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 47 states have (on average 2.617021276595745) internal successors, (123), 47 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-12-14 15:58:48,867 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:58:48,868 INFO L225 Difference]: With dead ends: 854 [2022-12-14 15:58:48,868 INFO L226 Difference]: Without dead ends: 854 [2022-12-14 15:58:48,868 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 78 SyntacticMatches, 0 SemanticMatches, 103 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2561 ImplicationChecksByTransitivity, 6.4s TimeCoverageRelationStatistics Valid=1789, Invalid=9131, Unknown=0, NotChecked=0, Total=10920 [2022-12-14 15:58:48,869 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 884 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 1488 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 884 SdHoareTripleChecker+Valid, 162 SdHoareTripleChecker+Invalid, 1546 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 1488 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 15:58:48,869 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [884 Valid, 162 Invalid, 1546 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 1488 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-14 15:58:48,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 854 states. [2022-12-14 15:58:48,873 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 854 to 713. [2022-12-14 15:58:48,873 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 713 states, 710 states have (on average 1.176056338028169) internal successors, (835), 712 states have internal predecessors, (835), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:48,874 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 713 states to 713 states and 835 transitions. [2022-12-14 15:58:48,874 INFO L78 Accepts]: Start accepts. Automaton has 713 states and 835 transitions. Word has length 41 [2022-12-14 15:58:48,874 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:58:48,874 INFO L495 AbstractCegarLoop]: Abstraction has 713 states and 835 transitions. [2022-12-14 15:58:48,874 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 47 states have (on average 2.617021276595745) internal successors, (123), 47 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:58:48,874 INFO L276 IsEmpty]: Start isEmpty. Operand 713 states and 835 transitions. [2022-12-14 15:58:48,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-12-14 15:58:48,875 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:58:48,875 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:58:48,880 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (37)] Forceful destruction successful, exit code 0 [2022-12-14 15:58:49,076 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable51,37 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:58:49,076 INFO L420 AbstractCegarLoop]: === Iteration 53 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:58:49,077 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:58:49,077 INFO L85 PathProgramCache]: Analyzing trace with hash 1538849020, now seen corresponding path program 4 times [2022-12-14 15:58:49,078 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:58:49,078 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [607288563] [2022-12-14 15:58:49,078 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:58:49,079 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:58:49,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:58:49,674 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 16 proven. 66 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:49,674 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:58:49,674 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [607288563] [2022-12-14 15:58:49,674 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [607288563] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:58:49,674 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [30213170] [2022-12-14 15:58:49,674 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:58:49,674 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:58:49,674 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:58:49,675 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:58:49,676 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Waiting until timeout for monitored process [2022-12-14 15:58:49,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:58:49,784 INFO L263 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 66 conjunts are in the unsatisfiable core [2022-12-14 15:58:49,786 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:58:49,830 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 15:58:49,830 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 15:58:51,002 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 25 proven. 57 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:51,002 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:58:52,013 INFO L134 CoverageAnalysis]: Checked inductivity of 82 backedges. 37 proven. 45 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:58:52,013 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [30213170] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:58:52,013 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [334717350] [2022-12-14 15:58:52,014 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 15:58:52,014 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:58:52,014 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:58:52,015 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:58:52,015 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:58:52,045 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:52,047 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:58:52,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:58:52,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:52,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:52,130 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:52,170 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:52,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:52,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:52,248 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:58:52,280 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:58:52,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:58:52,425 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 15:58:52,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 15:58:52,477 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:52,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:58:52,700 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:58:55,568 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '33088#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:58:55,568 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:58:55,568 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:58:55,568 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 20] total 60 [2022-12-14 15:58:55,568 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1216260448] [2022-12-14 15:58:55,568 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:58:55,568 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-12-14 15:58:55,569 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:58:55,569 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-12-14 15:58:55,569 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=513, Invalid=5187, Unknown=0, NotChecked=0, Total=5700 [2022-12-14 15:58:55,570 INFO L87 Difference]: Start difference. First operand 713 states and 835 transitions. Second operand has 62 states, 61 states have (on average 2.0163934426229506) internal successors, (123), 61 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:06,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:59:06,150 INFO L93 Difference]: Finished difference Result 1455 states and 1584 transitions. [2022-12-14 15:59:06,150 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 97 states. [2022-12-14 15:59:06,150 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 61 states have (on average 2.0163934426229506) internal successors, (123), 61 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-12-14 15:59:06,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:59:06,152 INFO L225 Difference]: With dead ends: 1455 [2022-12-14 15:59:06,152 INFO L226 Difference]: Without dead ends: 1331 [2022-12-14 15:59:06,153 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 235 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 168 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7803 ImplicationChecksByTransitivity, 13.7s TimeCoverageRelationStatistics Valid=4517, Invalid=24213, Unknown=0, NotChecked=0, Total=28730 [2022-12-14 15:59:06,153 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 1150 mSDsluCounter, 511 mSDsCounter, 0 mSdLazyCounter, 3042 mSolverCounterSat, 69 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1150 SdHoareTripleChecker+Valid, 539 SdHoareTripleChecker+Invalid, 3111 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 69 IncrementalHoareTripleChecker+Valid, 3042 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2022-12-14 15:59:06,153 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1150 Valid, 539 Invalid, 3111 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [69 Valid, 3042 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2022-12-14 15:59:06,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1331 states. [2022-12-14 15:59:06,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1331 to 645. [2022-12-14 15:59:06,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 645 states, 642 states have (on average 1.1401869158878504) internal successors, (732), 644 states have internal predecessors, (732), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:06,159 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 645 states to 645 states and 732 transitions. [2022-12-14 15:59:06,159 INFO L78 Accepts]: Start accepts. Automaton has 645 states and 732 transitions. Word has length 41 [2022-12-14 15:59:06,159 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:59:06,159 INFO L495 AbstractCegarLoop]: Abstraction has 645 states and 732 transitions. [2022-12-14 15:59:06,159 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 61 states have (on average 2.0163934426229506) internal successors, (123), 61 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:06,159 INFO L276 IsEmpty]: Start isEmpty. Operand 645 states and 732 transitions. [2022-12-14 15:59:06,160 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-12-14 15:59:06,160 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:59:06,160 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 8, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:59:06,165 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (38)] Forceful destruction successful, exit code 0 [2022-12-14 15:59:06,360 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable52,38 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:59:06,361 INFO L420 AbstractCegarLoop]: === Iteration 54 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:59:06,362 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:59:06,362 INFO L85 PathProgramCache]: Analyzing trace with hash -985515832, now seen corresponding path program 11 times [2022-12-14 15:59:06,362 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:59:06,363 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1737554419] [2022-12-14 15:59:06,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:59:06,363 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:59:06,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:59:06,970 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 36 proven. 109 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:06,970 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:59:06,970 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1737554419] [2022-12-14 15:59:06,970 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1737554419] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:59:06,970 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1234341991] [2022-12-14 15:59:06,970 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:59:06,970 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:59:06,970 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:59:06,971 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:59:06,972 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Waiting until timeout for monitored process [2022-12-14 15:59:07,173 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 10 check-sat command(s) [2022-12-14 15:59:07,173 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:59:07,175 INFO L263 TraceCheckSpWp]: Trace formula consists of 299 conjuncts, 68 conjunts are in the unsatisfiable core [2022-12-14 15:59:07,177 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:59:07,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:08,050 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 15:59:08,051 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 15:59:08,092 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 9 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:08,092 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:59:08,428 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 15:59:08,429 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 15:59:08,570 INFO L134 CoverageAnalysis]: Checked inductivity of 145 backedges. 9 proven. 136 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:08,570 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1234341991] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:59:08,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [70414578] [2022-12-14 15:59:08,571 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 15:59:08,571 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:59:08,571 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:59:08,571 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:59:08,572 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:59:08,601 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:59:08,603 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:59:08,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:59:08,642 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:08,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:08,701 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:08,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:08,772 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:59:08,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:59:08,857 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:59:10,178 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '35685#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:59:10,178 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:59:10,178 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:59:10,179 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 23, 23] total 55 [2022-12-14 15:59:10,179 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2020579464] [2022-12-14 15:59:10,179 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:59:10,179 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 55 states [2022-12-14 15:59:10,179 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:59:10,179 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 55 interpolants. [2022-12-14 15:59:10,180 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=188, Invalid=3718, Unknown=0, NotChecked=0, Total=3906 [2022-12-14 15:59:10,180 INFO L87 Difference]: Start difference. First operand 645 states and 732 transitions. Second operand has 55 states, 55 states have (on average 1.8727272727272728) internal successors, (103), 55 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:17,509 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:59:17,510 INFO L93 Difference]: Finished difference Result 2110 states and 2264 transitions. [2022-12-14 15:59:17,510 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 73 states. [2022-12-14 15:59:17,510 INFO L78 Accepts]: Start accepts. Automaton has has 55 states, 55 states have (on average 1.8727272727272728) internal successors, (103), 55 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-12-14 15:59:17,510 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:59:17,516 INFO L225 Difference]: With dead ends: 2110 [2022-12-14 15:59:17,516 INFO L226 Difference]: Without dead ends: 2090 [2022-12-14 15:59:17,517 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 214 GetRequests, 81 SyntacticMatches, 2 SemanticMatches, 131 ConstructedPredicates, 0 IntricatePredicates, 9 DeprecatedPredicates, 4350 ImplicationChecksByTransitivity, 7.5s TimeCoverageRelationStatistics Valid=1150, Invalid=16406, Unknown=0, NotChecked=0, Total=17556 [2022-12-14 15:59:17,517 INFO L413 NwaCegarLoop]: 76 mSDtfsCounter, 578 mSDsluCounter, 1651 mSDsCounter, 0 mSdLazyCounter, 4984 mSolverCounterSat, 24 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 578 SdHoareTripleChecker+Valid, 1727 SdHoareTripleChecker+Invalid, 5008 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 24 IncrementalHoareTripleChecker+Valid, 4984 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2022-12-14 15:59:17,517 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [578 Valid, 1727 Invalid, 5008 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [24 Valid, 4984 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2022-12-14 15:59:17,518 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2090 states. [2022-12-14 15:59:17,524 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2090 to 759. [2022-12-14 15:59:17,524 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 759 states, 756 states have (on average 1.1441798941798942) internal successors, (865), 758 states have internal predecessors, (865), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:17,525 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 759 states to 759 states and 865 transitions. [2022-12-14 15:59:17,525 INFO L78 Accepts]: Start accepts. Automaton has 759 states and 865 transitions. Word has length 41 [2022-12-14 15:59:17,528 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:59:17,528 INFO L495 AbstractCegarLoop]: Abstraction has 759 states and 865 transitions. [2022-12-14 15:59:17,528 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 55 states, 55 states have (on average 1.8727272727272728) internal successors, (103), 55 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:17,528 INFO L276 IsEmpty]: Start isEmpty. Operand 759 states and 865 transitions. [2022-12-14 15:59:17,528 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-12-14 15:59:17,528 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:59:17,528 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:59:17,533 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (39)] Ended with exit code 0 [2022-12-14 15:59:17,729 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable53,39 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:59:17,730 INFO L420 AbstractCegarLoop]: === Iteration 55 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:59:17,730 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:59:17,730 INFO L85 PathProgramCache]: Analyzing trace with hash 912622641, now seen corresponding path program 10 times [2022-12-14 15:59:17,731 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:59:17,731 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2122699366] [2022-12-14 15:59:17,731 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:59:17,732 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:59:17,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:59:18,623 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 12 proven. 85 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:18,624 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:59:18,624 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2122699366] [2022-12-14 15:59:18,624 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2122699366] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:59:18,624 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1044807115] [2022-12-14 15:59:18,624 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:59:18,624 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:59:18,624 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:59:18,625 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:59:18,625 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Waiting until timeout for monitored process [2022-12-14 15:59:18,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:59:18,750 INFO L263 TraceCheckSpWp]: Trace formula consists of 371 conjuncts, 110 conjunts are in the unsatisfiable core [2022-12-14 15:59:18,753 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:59:18,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:59:18,971 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:19,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:59:19,146 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:59:19,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:19,265 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:19,315 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 15:59:19,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 15:59:19,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 15:59:19,332 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 12 proven. 85 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:19,332 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:59:19,396 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1617 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_1617) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ |c_ULTIMATE.start_cstrcat_~append#1.offset| 1)) 0)) is different from false [2022-12-14 15:59:24,362 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:59:24,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 15:59:24,368 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:59:24,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 15:59:24,526 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 12 proven. 75 refuted. 0 times theorem prover too weak. 0 trivial. 10 not checked. [2022-12-14 15:59:24,526 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1044807115] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:59:24,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [622566979] [2022-12-14 15:59:24,527 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 15:59:24,527 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:59:24,527 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:59:24,527 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:59:24,527 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:59:24,553 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:59:24,556 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:59:24,556 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:59:24,582 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:59:24,619 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:24,636 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:24,672 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:24,714 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:59:24,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:59:24,808 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:59:24,809 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:59:24,833 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 15:59:24,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 15:59:24,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:59:24,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:59:25,049 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:59:27,739 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '39016#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:59:27,739 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:59:27,739 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:59:27,739 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29, 24, 24] total 55 [2022-12-14 15:59:27,740 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2022745799] [2022-12-14 15:59:27,740 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:59:27,740 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 55 states [2022-12-14 15:59:27,740 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:59:27,740 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 55 interpolants. [2022-12-14 15:59:27,741 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=238, Invalid=4090, Unknown=98, NotChecked=130, Total=4556 [2022-12-14 15:59:27,741 INFO L87 Difference]: Start difference. First operand 759 states and 865 transitions. Second operand has 55 states, 55 states have (on average 1.8181818181818181) internal successors, (100), 55 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:29,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:59:29,754 INFO L93 Difference]: Finished difference Result 1132 states and 1275 transitions. [2022-12-14 15:59:29,755 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-12-14 15:59:29,755 INFO L78 Accepts]: Start accepts. Automaton has has 55 states, 55 states have (on average 1.8181818181818181) internal successors, (100), 55 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-12-14 15:59:29,755 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:59:29,756 INFO L225 Difference]: With dead ends: 1132 [2022-12-14 15:59:29,756 INFO L226 Difference]: Without dead ends: 1026 [2022-12-14 15:59:29,757 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 89 SyntacticMatches, 5 SemanticMatches, 87 ConstructedPredicates, 1 IntricatePredicates, 1 DeprecatedPredicates, 1858 ImplicationChecksByTransitivity, 9.6s TimeCoverageRelationStatistics Valid=474, Invalid=7084, Unknown=102, NotChecked=172, Total=7832 [2022-12-14 15:59:29,757 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 315 mSDsluCounter, 721 mSDsCounter, 0 mSdLazyCounter, 2272 mSolverCounterSat, 21 mSolverCounterUnsat, 8 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 315 SdHoareTripleChecker+Valid, 770 SdHoareTripleChecker+Invalid, 2423 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 2272 IncrementalHoareTripleChecker+Invalid, 8 IncrementalHoareTripleChecker+Unknown, 122 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-12-14 15:59:29,757 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [315 Valid, 770 Invalid, 2423 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 2272 Invalid, 8 Unknown, 122 Unchecked, 1.0s Time] [2022-12-14 15:59:29,757 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1026 states. [2022-12-14 15:59:29,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1026 to 900. [2022-12-14 15:59:29,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 900 states, 897 states have (on average 1.1505016722408026) internal successors, (1032), 899 states have internal predecessors, (1032), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:29,763 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 900 states to 900 states and 1032 transitions. [2022-12-14 15:59:29,763 INFO L78 Accepts]: Start accepts. Automaton has 900 states and 1032 transitions. Word has length 44 [2022-12-14 15:59:29,763 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:59:29,764 INFO L495 AbstractCegarLoop]: Abstraction has 900 states and 1032 transitions. [2022-12-14 15:59:29,764 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 55 states, 55 states have (on average 1.8181818181818181) internal successors, (100), 55 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:29,764 INFO L276 IsEmpty]: Start isEmpty. Operand 900 states and 1032 transitions. [2022-12-14 15:59:29,764 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-12-14 15:59:29,764 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:59:29,764 INFO L195 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:59:29,769 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (40)] Forceful destruction successful, exit code 0 [2022-12-14 15:59:29,965 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable54,40 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:59:29,965 INFO L420 AbstractCegarLoop]: === Iteration 56 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:59:29,966 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:59:29,966 INFO L85 PathProgramCache]: Analyzing trace with hash -410462112, now seen corresponding path program 5 times [2022-12-14 15:59:29,967 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:59:29,967 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [459981621] [2022-12-14 15:59:29,967 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:59:29,967 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:59:30,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:59:30,634 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 5 proven. 61 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:30,634 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:59:30,635 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [459981621] [2022-12-14 15:59:30,635 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [459981621] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:59:30,635 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [488166557] [2022-12-14 15:59:30,635 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:59:30,635 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:59:30,635 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:59:30,636 INFO L229 MonitoredProcess]: Starting monitored process 41 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:59:30,636 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Waiting until timeout for monitored process [2022-12-14 15:59:30,850 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 15:59:30,850 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:59:30,852 INFO L263 TraceCheckSpWp]: Trace formula consists of 354 conjuncts, 65 conjunts are in the unsatisfiable core [2022-12-14 15:59:30,854 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:59:30,897 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 15:59:30,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 15:59:32,157 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 12 proven. 54 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:32,157 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:59:33,304 INFO L134 CoverageAnalysis]: Checked inductivity of 66 backedges. 25 proven. 41 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:59:33,304 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [488166557] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:59:33,304 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1690131743] [2022-12-14 15:59:33,305 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 15:59:33,305 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:59:33,305 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:59:33,305 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:59:33,305 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:59:33,337 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:59:33,340 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:59:33,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:59:33,374 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:59:33,404 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:33,424 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:33,486 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:33,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:33,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:33,571 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:59:33,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:59:33,719 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 15:59:33,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 15:59:33,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:59:33,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:59:34,005 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:59:37,343 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '41431#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:59:37,343 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:59:37,343 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:59:37,343 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 21, 20] total 61 [2022-12-14 15:59:37,343 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1455689189] [2022-12-14 15:59:37,343 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:59:37,343 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 63 states [2022-12-14 15:59:37,343 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:59:37,344 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 63 interpolants. [2022-12-14 15:59:37,344 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=452, Invalid=5400, Unknown=0, NotChecked=0, Total=5852 [2022-12-14 15:59:37,344 INFO L87 Difference]: Start difference. First operand 900 states and 1032 transitions. Second operand has 63 states, 62 states have (on average 2.1774193548387095) internal successors, (135), 62 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:53,527 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:59:53,527 INFO L93 Difference]: Finished difference Result 1718 states and 1863 transitions. [2022-12-14 15:59:53,528 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 114 states. [2022-12-14 15:59:53,528 INFO L78 Accepts]: Start accepts. Automaton has has 63 states, 62 states have (on average 2.1774193548387095) internal successors, (135), 62 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-12-14 15:59:53,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:59:53,530 INFO L225 Difference]: With dead ends: 1718 [2022-12-14 15:59:53,530 INFO L226 Difference]: Without dead ends: 1582 [2022-12-14 15:59:53,531 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 264 GetRequests, 77 SyntacticMatches, 1 SemanticMatches, 186 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9504 ImplicationChecksByTransitivity, 19.9s TimeCoverageRelationStatistics Valid=5977, Invalid=29179, Unknown=0, NotChecked=0, Total=35156 [2022-12-14 15:59:53,532 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 2129 mSDsluCounter, 416 mSDsCounter, 0 mSdLazyCounter, 2743 mSolverCounterSat, 92 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2129 SdHoareTripleChecker+Valid, 440 SdHoareTripleChecker+Invalid, 2835 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 92 IncrementalHoareTripleChecker+Valid, 2743 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-12-14 15:59:53,532 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2129 Valid, 440 Invalid, 2835 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [92 Valid, 2743 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-12-14 15:59:53,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1582 states. [2022-12-14 15:59:53,538 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1582 to 912. [2022-12-14 15:59:53,538 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 912 states, 909 states have (on average 1.1485148514851484) internal successors, (1044), 911 states have internal predecessors, (1044), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:53,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 912 states to 912 states and 1044 transitions. [2022-12-14 15:59:53,539 INFO L78 Accepts]: Start accepts. Automaton has 912 states and 1044 transitions. Word has length 45 [2022-12-14 15:59:53,539 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:59:53,539 INFO L495 AbstractCegarLoop]: Abstraction has 912 states and 1044 transitions. [2022-12-14 15:59:53,539 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 63 states, 62 states have (on average 2.1774193548387095) internal successors, (135), 62 states have internal predecessors, (135), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:53,539 INFO L276 IsEmpty]: Start isEmpty. Operand 912 states and 1044 transitions. [2022-12-14 15:59:53,540 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-12-14 15:59:53,540 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:59:53,540 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 9, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:59:53,545 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (41)] Forceful destruction successful, exit code 0 [2022-12-14 15:59:53,741 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 41 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable55 [2022-12-14 15:59:53,741 INFO L420 AbstractCegarLoop]: === Iteration 57 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:59:53,742 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:59:53,742 INFO L85 PathProgramCache]: Analyzing trace with hash 1529273883, now seen corresponding path program 4 times [2022-12-14 15:59:53,742 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:59:53,742 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1492136199] [2022-12-14 15:59:53,743 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:59:53,743 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:59:53,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:59:54,191 INFO L134 CoverageAnalysis]: Checked inductivity of 163 backedges. 49 proven. 113 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:59:54,191 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:59:54,191 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1492136199] [2022-12-14 15:59:54,191 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1492136199] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:59:54,191 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [261519188] [2022-12-14 15:59:54,191 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:59:54,191 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:59:54,192 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:59:54,192 INFO L229 MonitoredProcess]: Starting monitored process 42 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:59:54,193 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Waiting until timeout for monitored process [2022-12-14 15:59:54,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:59:54,296 INFO L263 TraceCheckSpWp]: Trace formula consists of 325 conjuncts, 58 conjunts are in the unsatisfiable core [2022-12-14 15:59:54,298 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:59:54,306 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:59:54,306 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:59:54,489 INFO L134 CoverageAnalysis]: Checked inductivity of 163 backedges. 64 proven. 98 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:59:54,490 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:59:54,988 INFO L134 CoverageAnalysis]: Checked inductivity of 163 backedges. 64 proven. 98 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 15:59:54,988 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [261519188] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:59:54,988 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [273827957] [2022-12-14 15:59:54,989 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 15:59:54,989 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:59:54,989 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:59:54,989 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:59:54,989 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:59:55,017 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:59:55,020 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:59:55,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:59:55,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:55,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:55,110 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:55,144 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:55,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:55,212 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:55,238 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:59:55,266 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:59:55,266 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:59:55,460 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:59:57,394 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '44617#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:59:57,394 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:59:57,394 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:59:57,394 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 22, 22] total 55 [2022-12-14 15:59:57,394 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1970457912] [2022-12-14 15:59:57,394 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:59:57,394 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 56 states [2022-12-14 15:59:57,395 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:59:57,395 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 56 interpolants. [2022-12-14 15:59:57,395 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=491, Invalid=3799, Unknown=0, NotChecked=0, Total=4290 [2022-12-14 15:59:57,395 INFO L87 Difference]: Start difference. First operand 912 states and 1044 transitions. Second operand has 56 states, 55 states have (on average 2.0545454545454547) internal successors, (113), 56 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:58,987 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:59:58,987 INFO L93 Difference]: Finished difference Result 2402 states and 2588 transitions. [2022-12-14 15:59:58,987 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2022-12-14 15:59:58,987 INFO L78 Accepts]: Start accepts. Automaton has has 56 states, 55 states have (on average 2.0545454545454547) internal successors, (113), 56 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-12-14 15:59:58,987 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:59:58,990 INFO L225 Difference]: With dead ends: 2402 [2022-12-14 15:59:58,990 INFO L226 Difference]: Without dead ends: 2402 [2022-12-14 15:59:58,991 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 91 SyntacticMatches, 0 SemanticMatches, 85 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2031 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=1244, Invalid=6238, Unknown=0, NotChecked=0, Total=7482 [2022-12-14 15:59:58,991 INFO L413 NwaCegarLoop]: 81 mSDtfsCounter, 482 mSDsluCounter, 821 mSDsCounter, 0 mSdLazyCounter, 2969 mSolverCounterSat, 33 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 482 SdHoareTripleChecker+Valid, 902 SdHoareTripleChecker+Invalid, 3002 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 33 IncrementalHoareTripleChecker+Valid, 2969 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:59:58,991 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [482 Valid, 902 Invalid, 3002 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [33 Valid, 2969 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-12-14 15:59:58,992 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2402 states. [2022-12-14 15:59:58,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2402 to 924. [2022-12-14 15:59:59,000 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 924 states, 921 states have (on average 1.1530944625407167) internal successors, (1062), 923 states have internal predecessors, (1062), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:59,001 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 924 states to 924 states and 1062 transitions. [2022-12-14 15:59:59,001 INFO L78 Accepts]: Start accepts. Automaton has 924 states and 1062 transitions. Word has length 45 [2022-12-14 15:59:59,001 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:59:59,001 INFO L495 AbstractCegarLoop]: Abstraction has 924 states and 1062 transitions. [2022-12-14 15:59:59,001 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 56 states, 55 states have (on average 2.0545454545454547) internal successors, (113), 56 states have internal predecessors, (113), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:59:59,001 INFO L276 IsEmpty]: Start isEmpty. Operand 924 states and 1062 transitions. [2022-12-14 15:59:59,002 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-12-14 15:59:59,002 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:59:59,002 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 9, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:59:59,006 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (42)] Forceful destruction successful, exit code 0 [2022-12-14 15:59:59,202 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 42 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable56 [2022-12-14 15:59:59,202 INFO L420 AbstractCegarLoop]: === Iteration 58 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 15:59:59,202 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:59:59,202 INFO L85 PathProgramCache]: Analyzing trace with hash -1411914049, now seen corresponding path program 12 times [2022-12-14 15:59:59,202 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:59:59,203 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1627058045] [2022-12-14 15:59:59,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:59:59,203 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:59:59,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:00:00,101 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 49 proven. 132 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:00,102 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:00:00,102 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1627058045] [2022-12-14 16:00:00,102 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1627058045] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:00:00,102 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1478682923] [2022-12-14 16:00:00,102 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:00:00,102 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:00:00,102 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:00:00,103 INFO L229 MonitoredProcess]: Starting monitored process 43 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:00:00,103 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Waiting until timeout for monitored process [2022-12-14 16:00:00,251 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:00:00,251 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:00:00,253 INFO L263 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 92 conjunts are in the unsatisfiable core [2022-12-14 16:00:00,255 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:00:00,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:02,003 INFO L321 Elim1Store]: treesize reduction 57, result has 12.3 percent of original size [2022-12-14 16:00:02,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 0 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 36 case distinctions, treesize of input 88 treesize of output 42 [2022-12-14 16:00:02,045 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 11 proven. 170 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:02,046 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:00:03,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 121 treesize of output 105 [2022-12-14 16:00:03,498 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 16:00:03,498 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 0 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 121 treesize of output 89 [2022-12-14 16:00:03,971 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-12-14 16:00:04,444 INFO L134 CoverageAnalysis]: Checked inductivity of 181 backedges. 66 proven. 115 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:04,444 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1478682923] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:00:04,444 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1563679651] [2022-12-14 16:00:04,445 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 16:00:04,445 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:00:04,445 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:00:04,445 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:00:04,445 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:00:04,467 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:00:04,469 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:00:04,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:00:04,510 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:04,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:04,565 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:04,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:04,643 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:00:04,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:00:04,722 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:00:06,418 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '48344#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:00:06,418 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:00:06,418 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:00:06,418 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 32, 32] total 85 [2022-12-14 16:00:06,419 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [618013234] [2022-12-14 16:00:06,419 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:00:06,419 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 85 states [2022-12-14 16:00:06,419 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:00:06,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 85 interpolants. [2022-12-14 16:00:06,420 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=485, Invalid=8071, Unknown=0, NotChecked=0, Total=8556 [2022-12-14 16:00:06,420 INFO L87 Difference]: Start difference. First operand 924 states and 1062 transitions. Second operand has 85 states, 85 states have (on average 1.5411764705882354) internal successors, (131), 85 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:34,432 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:00:34,432 INFO L93 Difference]: Finished difference Result 2821 states and 3044 transitions. [2022-12-14 16:00:34,432 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 188 states. [2022-12-14 16:00:34,432 INFO L78 Accepts]: Start accepts. Automaton has has 85 states, 85 states have (on average 1.5411764705882354) internal successors, (131), 85 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 45 [2022-12-14 16:00:34,432 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:00:34,436 INFO L225 Difference]: With dead ends: 2821 [2022-12-14 16:00:34,436 INFO L226 Difference]: Without dead ends: 2799 [2022-12-14 16:00:34,439 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 343 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 276 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21878 ImplicationChecksByTransitivity, 25.4s TimeCoverageRelationStatistics Valid=4870, Invalid=72136, Unknown=0, NotChecked=0, Total=77006 [2022-12-14 16:00:34,439 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 1659 mSDsluCounter, 1538 mSDsCounter, 0 mSdLazyCounter, 12528 mSolverCounterSat, 122 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1659 SdHoareTripleChecker+Valid, 1590 SdHoareTripleChecker+Invalid, 12650 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 122 IncrementalHoareTripleChecker+Valid, 12528 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.1s IncrementalHoareTripleChecker+Time [2022-12-14 16:00:34,439 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1659 Valid, 1590 Invalid, 12650 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [122 Valid, 12528 Invalid, 0 Unknown, 0 Unchecked, 8.1s Time] [2022-12-14 16:00:34,440 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2799 states. [2022-12-14 16:00:34,452 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2799 to 1060. [2022-12-14 16:00:34,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1060 states, 1057 states have (on average 1.1617786187322612) internal successors, (1228), 1059 states have internal predecessors, (1228), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:34,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1060 states to 1060 states and 1228 transitions. [2022-12-14 16:00:34,453 INFO L78 Accepts]: Start accepts. Automaton has 1060 states and 1228 transitions. Word has length 45 [2022-12-14 16:00:34,453 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:00:34,453 INFO L495 AbstractCegarLoop]: Abstraction has 1060 states and 1228 transitions. [2022-12-14 16:00:34,453 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 85 states, 85 states have (on average 1.5411764705882354) internal successors, (131), 85 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:34,454 INFO L276 IsEmpty]: Start isEmpty. Operand 1060 states and 1228 transitions. [2022-12-14 16:00:34,454 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-12-14 16:00:34,454 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:00:34,454 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:00:34,459 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (43)] Ended with exit code 0 [2022-12-14 16:00:34,655 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 43 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable57 [2022-12-14 16:00:34,655 INFO L420 AbstractCegarLoop]: === Iteration 59 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:00:34,656 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:00:34,656 INFO L85 PathProgramCache]: Analyzing trace with hash -1927022880, now seen corresponding path program 11 times [2022-12-14 16:00:34,657 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:00:34,657 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [672901061] [2022-12-14 16:00:34,657 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:00:34,657 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:00:34,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:00:35,104 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 16 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:35,104 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:00:35,104 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [672901061] [2022-12-14 16:00:35,105 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [672901061] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:00:35,105 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1028955294] [2022-12-14 16:00:35,105 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:00:35,105 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:00:35,105 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:00:35,106 INFO L229 MonitoredProcess]: Starting monitored process 44 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:00:35,106 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Waiting until timeout for monitored process [2022-12-14 16:00:35,380 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-12-14 16:00:35,381 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:00:35,383 INFO L263 TraceCheckSpWp]: Trace formula consists of 384 conjuncts, 59 conjunts are in the unsatisfiable core [2022-12-14 16:00:35,384 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:00:35,680 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 25 proven. 83 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:35,680 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:00:36,017 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 16:00:36,132 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 25 proven. 83 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:36,132 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1028955294] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:00:36,133 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1916702701] [2022-12-14 16:00:36,133 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 16:00:36,134 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:00:36,134 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:00:36,134 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:00:36,134 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:00:36,164 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:00:36,166 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:00:36,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:00:36,198 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:00:36,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:36,254 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:36,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:36,343 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:00:36,343 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:00:36,425 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:00:36,425 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:00:36,450 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 16:00:36,451 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 16:00:36,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:00:36,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:00:36,746 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:00:39,135 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '52920#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:00:39,135 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:00:39,135 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:00:39,135 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 18] total 45 [2022-12-14 16:00:39,135 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [9464105] [2022-12-14 16:00:39,135 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:00:39,135 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-12-14 16:00:39,136 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:00:39,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-12-14 16:00:39,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=347, Invalid=3075, Unknown=0, NotChecked=0, Total=3422 [2022-12-14 16:00:39,136 INFO L87 Difference]: Start difference. First operand 1060 states and 1228 transitions. Second operand has 46 states, 45 states have (on average 2.688888888888889) internal successors, (121), 46 states have internal predecessors, (121), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:40,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:00:40,250 INFO L93 Difference]: Finished difference Result 1205 states and 1363 transitions. [2022-12-14 16:00:40,250 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2022-12-14 16:00:40,250 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 45 states have (on average 2.688888888888889) internal successors, (121), 46 states have internal predecessors, (121), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 46 [2022-12-14 16:00:40,250 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:00:40,252 INFO L225 Difference]: With dead ends: 1205 [2022-12-14 16:00:40,252 INFO L226 Difference]: Without dead ends: 1205 [2022-12-14 16:00:40,252 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 90 SyntacticMatches, 7 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1888 ImplicationChecksByTransitivity, 3.7s TimeCoverageRelationStatistics Valid=939, Invalid=5541, Unknown=0, NotChecked=0, Total=6480 [2022-12-14 16:00:40,252 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 362 mSDsluCounter, 296 mSDsCounter, 0 mSdLazyCounter, 1255 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 362 SdHoareTripleChecker+Valid, 319 SdHoareTripleChecker+Invalid, 1260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 1255 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 16:00:40,252 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [362 Valid, 319 Invalid, 1260 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 1255 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 16:00:40,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1205 states. [2022-12-14 16:00:40,258 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1205 to 1073. [2022-12-14 16:00:40,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1073 states, 1070 states have (on average 1.1598130841121495) internal successors, (1241), 1072 states have internal predecessors, (1241), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:40,260 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1073 states to 1073 states and 1241 transitions. [2022-12-14 16:00:40,260 INFO L78 Accepts]: Start accepts. Automaton has 1073 states and 1241 transitions. Word has length 46 [2022-12-14 16:00:40,260 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:00:40,260 INFO L495 AbstractCegarLoop]: Abstraction has 1073 states and 1241 transitions. [2022-12-14 16:00:40,260 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 45 states have (on average 2.688888888888889) internal successors, (121), 46 states have internal predecessors, (121), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:40,260 INFO L276 IsEmpty]: Start isEmpty. Operand 1073 states and 1241 transitions. [2022-12-14 16:00:40,261 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-14 16:00:40,261 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:00:40,261 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:00:40,266 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (44)] Forceful destruction successful, exit code 0 [2022-12-14 16:00:40,461 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 44 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable58 [2022-12-14 16:00:40,462 INFO L420 AbstractCegarLoop]: === Iteration 60 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:00:40,463 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:00:40,463 INFO L85 PathProgramCache]: Analyzing trace with hash 938309572, now seen corresponding path program 6 times [2022-12-14 16:00:40,463 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:00:40,464 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [716583011] [2022-12-14 16:00:40,464 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:00:40,464 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:00:40,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:00:41,226 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 9 proven. 81 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:41,226 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:00:41,226 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [716583011] [2022-12-14 16:00:41,226 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [716583011] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:00:41,226 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [274260303] [2022-12-14 16:00:41,226 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:00:41,226 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:00:41,227 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:00:41,227 INFO L229 MonitoredProcess]: Starting monitored process 45 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:00:41,228 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Waiting until timeout for monitored process [2022-12-14 16:00:41,572 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:00:41,572 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:00:41,575 INFO L263 TraceCheckSpWp]: Trace formula consists of 394 conjuncts, 107 conjunts are in the unsatisfiable core [2022-12-14 16:00:41,577 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:00:41,622 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 16:00:41,622 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 16:00:42,894 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 17 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:42,894 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:00:43,963 INFO L134 CoverageAnalysis]: Checked inductivity of 90 backedges. 29 proven. 61 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:00:43,964 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [274260303] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:00:43,964 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2145525992] [2022-12-14 16:00:43,965 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 16:00:43,965 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:00:43,965 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:00:43,965 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:00:43,965 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:00:43,989 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:00:43,991 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:00:43,992 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:00:44,021 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:00:44,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:44,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:44,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:44,138 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:44,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:00:44,179 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:00:44,179 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:00:44,321 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 16:00:44,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 16:00:44,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:00:44,434 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:00:44,562 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:00:47,732 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '55606#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:00:47,732 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:00:47,732 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:00:47,733 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 21] total 61 [2022-12-14 16:00:47,733 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [213342989] [2022-12-14 16:00:47,733 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:00:47,733 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 63 states [2022-12-14 16:00:47,733 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:00:47,733 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 63 interpolants. [2022-12-14 16:00:47,733 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=499, Invalid=5353, Unknown=0, NotChecked=0, Total=5852 [2022-12-14 16:00:47,734 INFO L87 Difference]: Start difference. First operand 1073 states and 1241 transitions. Second operand has 63 states, 62 states have (on average 2.370967741935484) internal successors, (147), 62 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:59,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:00:59,532 INFO L93 Difference]: Finished difference Result 1557 states and 1726 transitions. [2022-12-14 16:00:59,533 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 106 states. [2022-12-14 16:00:59,533 INFO L78 Accepts]: Start accepts. Automaton has has 63 states, 62 states have (on average 2.370967741935484) internal successors, (147), 62 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-12-14 16:00:59,533 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:00:59,536 INFO L225 Difference]: With dead ends: 1557 [2022-12-14 16:00:59,536 INFO L226 Difference]: Without dead ends: 1493 [2022-12-14 16:00:59,537 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 178 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9063 ImplicationChecksByTransitivity, 15.4s TimeCoverageRelationStatistics Valid=5548, Invalid=26672, Unknown=0, NotChecked=0, Total=32220 [2022-12-14 16:00:59,538 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 1265 mSDsluCounter, 335 mSDsCounter, 0 mSdLazyCounter, 2641 mSolverCounterSat, 85 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1265 SdHoareTripleChecker+Valid, 355 SdHoareTripleChecker+Invalid, 2726 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 85 IncrementalHoareTripleChecker+Valid, 2641 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2022-12-14 16:00:59,538 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1265 Valid, 355 Invalid, 2726 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [85 Valid, 2641 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2022-12-14 16:00:59,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1493 states. [2022-12-14 16:00:59,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1493 to 1077. [2022-12-14 16:00:59,545 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1077 states, 1074 states have (on average 1.1610800744878957) internal successors, (1247), 1076 states have internal predecessors, (1247), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:59,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1077 states to 1077 states and 1247 transitions. [2022-12-14 16:00:59,545 INFO L78 Accepts]: Start accepts. Automaton has 1077 states and 1247 transitions. Word has length 49 [2022-12-14 16:00:59,546 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:00:59,546 INFO L495 AbstractCegarLoop]: Abstraction has 1077 states and 1247 transitions. [2022-12-14 16:00:59,546 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 63 states, 62 states have (on average 2.370967741935484) internal successors, (147), 62 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:00:59,546 INFO L276 IsEmpty]: Start isEmpty. Operand 1077 states and 1247 transitions. [2022-12-14 16:00:59,546 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-14 16:00:59,546 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:00:59,546 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 10, 10, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:00:59,552 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (45)] Ended with exit code 0 [2022-12-14 16:00:59,747 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 45 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable59 [2022-12-14 16:00:59,747 INFO L420 AbstractCegarLoop]: === Iteration 61 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:00:59,748 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:00:59,748 INFO L85 PathProgramCache]: Analyzing trace with hash -915166574, now seen corresponding path program 5 times [2022-12-14 16:00:59,749 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:00:59,749 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1637604960] [2022-12-14 16:00:59,749 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:00:59,749 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:00:59,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:01:00,303 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 64 proven. 136 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 16:01:00,303 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:01:00,303 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1637604960] [2022-12-14 16:01:00,304 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1637604960] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:01:00,304 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1693679965] [2022-12-14 16:01:00,304 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:01:00,304 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:01:00,304 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:01:00,305 INFO L229 MonitoredProcess]: Starting monitored process 46 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:01:00,305 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Waiting until timeout for monitored process [2022-12-14 16:01:00,547 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 11 check-sat command(s) [2022-12-14 16:01:00,547 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:01:00,549 INFO L263 TraceCheckSpWp]: Trace formula consists of 349 conjuncts, 54 conjunts are in the unsatisfiable core [2022-12-14 16:01:00,551 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:01:00,560 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 16:01:00,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 16:01:00,930 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 81 proven. 119 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 16:01:00,930 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:01:01,570 INFO L134 CoverageAnalysis]: Checked inductivity of 201 backedges. 81 proven. 119 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 16:01:01,570 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1693679965] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:01:01,571 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1011010214] [2022-12-14 16:01:01,571 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 16:01:01,571 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:01:01,572 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:01:01,572 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:01:01,572 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:01:01,598 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:01:01,599 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:01:01,600 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:01:01,628 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:01:01,661 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:01,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:01,728 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:01,760 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:01,785 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:01,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:01,841 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:01:01,842 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:01:02,031 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:01:03,956 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '58819#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (not (<= (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1) (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:01:03,956 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:01:03,956 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:01:03,956 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 24, 24] total 70 [2022-12-14 16:01:03,956 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [629206444] [2022-12-14 16:01:03,956 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:01:03,956 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 71 states [2022-12-14 16:01:03,956 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:01:03,957 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 71 interpolants. [2022-12-14 16:01:03,957 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=808, Invalid=5672, Unknown=0, NotChecked=0, Total=6480 [2022-12-14 16:01:03,957 INFO L87 Difference]: Start difference. First operand 1077 states and 1247 transitions. Second operand has 71 states, 70 states have (on average 2.0285714285714285) internal successors, (142), 71 states have internal predecessors, (142), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:01:05,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:01:05,060 INFO L93 Difference]: Finished difference Result 2963 states and 3204 transitions. [2022-12-14 16:01:05,061 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-12-14 16:01:05,061 INFO L78 Accepts]: Start accepts. Automaton has has 71 states, 70 states have (on average 2.0285714285714285) internal successors, (142), 71 states have internal predecessors, (142), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-12-14 16:01:05,061 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:01:05,064 INFO L225 Difference]: With dead ends: 2963 [2022-12-14 16:01:05,064 INFO L226 Difference]: Without dead ends: 2963 [2022-12-14 16:01:05,064 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 192 GetRequests, 90 SyntacticMatches, 0 SemanticMatches, 102 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3327 ImplicationChecksByTransitivity, 3.5s TimeCoverageRelationStatistics Valid=1789, Invalid=8923, Unknown=0, NotChecked=0, Total=10712 [2022-12-14 16:01:05,065 INFO L413 NwaCegarLoop]: 88 mSDtfsCounter, 679 mSDsluCounter, 495 mSDsCounter, 0 mSdLazyCounter, 1666 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 679 SdHoareTripleChecker+Valid, 583 SdHoareTripleChecker+Invalid, 1728 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 1666 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 16:01:05,065 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [679 Valid, 583 Invalid, 1728 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 1666 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-12-14 16:01:05,066 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2963 states. [2022-12-14 16:01:05,074 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2963 to 1089. [2022-12-14 16:01:05,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1089 states, 1086 states have (on average 1.1648250460405156) internal successors, (1265), 1088 states have internal predecessors, (1265), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:01:05,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1089 states to 1089 states and 1265 transitions. [2022-12-14 16:01:05,075 INFO L78 Accepts]: Start accepts. Automaton has 1089 states and 1265 transitions. Word has length 49 [2022-12-14 16:01:05,075 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:01:05,075 INFO L495 AbstractCegarLoop]: Abstraction has 1089 states and 1265 transitions. [2022-12-14 16:01:05,076 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 71 states, 70 states have (on average 2.0285714285714285) internal successors, (142), 71 states have internal predecessors, (142), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:01:05,076 INFO L276 IsEmpty]: Start isEmpty. Operand 1089 states and 1265 transitions. [2022-12-14 16:01:05,076 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-14 16:01:05,076 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:01:05,076 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:01:05,081 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (46)] Ended with exit code 0 [2022-12-14 16:01:05,277 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable60,46 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:01:05,277 INFO L420 AbstractCegarLoop]: === Iteration 62 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:01:05,278 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:01:05,278 INFO L85 PathProgramCache]: Analyzing trace with hash -1916821078, now seen corresponding path program 7 times [2022-12-14 16:01:05,278 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:01:05,279 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [134842421] [2022-12-14 16:01:05,279 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:01:05,279 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:01:05,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:01:06,018 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 36 proven. 104 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:01:06,018 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:01:06,018 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [134842421] [2022-12-14 16:01:06,019 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [134842421] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:01:06,019 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1026144699] [2022-12-14 16:01:06,019 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:01:06,019 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:01:06,019 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:01:06,020 INFO L229 MonitoredProcess]: Starting monitored process 47 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:01:06,020 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Waiting until timeout for monitored process [2022-12-14 16:01:06,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:01:06,176 INFO L263 TraceCheckSpWp]: Trace formula consists of 362 conjuncts, 76 conjunts are in the unsatisfiable core [2022-12-14 16:01:06,178 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:01:06,233 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 16:01:06,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 16:01:07,684 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 49 proven. 91 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:01:07,684 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:01:08,843 INFO L134 CoverageAnalysis]: Checked inductivity of 140 backedges. 65 proven. 75 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:01:08,843 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1026144699] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:01:08,843 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [427833217] [2022-12-14 16:01:08,843 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 16:01:08,843 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:01:08,844 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:01:08,844 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:01:08,844 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:01:08,866 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:01:08,869 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:01:08,869 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:01:08,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:01:08,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:08,943 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:08,981 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:09,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:09,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:09,070 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:01:09,070 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:01:09,207 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 16:01:09,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 16:01:09,265 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:01:09,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:01:09,510 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:01:12,890 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '63289#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:01:12,891 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:01:12,891 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:01:12,891 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 24, 24] total 72 [2022-12-14 16:01:12,891 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349041726] [2022-12-14 16:01:12,891 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:01:12,891 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 74 states [2022-12-14 16:01:12,891 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:01:12,891 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 74 interpolants. [2022-12-14 16:01:12,892 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=683, Invalid=6973, Unknown=0, NotChecked=0, Total=7656 [2022-12-14 16:01:12,892 INFO L87 Difference]: Start difference. First operand 1089 states and 1265 transitions. Second operand has 74 states, 73 states have (on average 2.0136986301369864) internal successors, (147), 73 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:01:27,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:01:27,744 INFO L93 Difference]: Finished difference Result 2452 states and 2648 transitions. [2022-12-14 16:01:27,744 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 125 states. [2022-12-14 16:01:27,744 INFO L78 Accepts]: Start accepts. Automaton has has 74 states, 73 states have (on average 2.0136986301369864) internal successors, (147), 73 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-12-14 16:01:27,744 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:01:27,748 INFO L225 Difference]: With dead ends: 2452 [2022-12-14 16:01:27,748 INFO L226 Difference]: Without dead ends: 2300 [2022-12-14 16:01:27,750 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 291 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 208 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12106 ImplicationChecksByTransitivity, 18.3s TimeCoverageRelationStatistics Valid=7204, Invalid=36686, Unknown=0, NotChecked=0, Total=43890 [2022-12-14 16:01:27,750 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 1641 mSDsluCounter, 665 mSDsCounter, 0 mSdLazyCounter, 3936 mSolverCounterSat, 97 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1641 SdHoareTripleChecker+Valid, 701 SdHoareTripleChecker+Invalid, 4033 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 97 IncrementalHoareTripleChecker+Valid, 3936 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-12-14 16:01:27,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1641 Valid, 701 Invalid, 4033 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [97 Valid, 3936 Invalid, 0 Unknown, 0 Unchecked, 2.1s Time] [2022-12-14 16:01:27,751 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2300 states. [2022-12-14 16:01:27,758 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2300 to 961. [2022-12-14 16:01:27,758 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 961 states, 958 states have (on average 1.1346555323590815) internal successors, (1087), 960 states have internal predecessors, (1087), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:01:27,759 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 961 states to 961 states and 1087 transitions. [2022-12-14 16:01:27,759 INFO L78 Accepts]: Start accepts. Automaton has 961 states and 1087 transitions. Word has length 49 [2022-12-14 16:01:27,759 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:01:27,759 INFO L495 AbstractCegarLoop]: Abstraction has 961 states and 1087 transitions. [2022-12-14 16:01:27,759 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 74 states, 73 states have (on average 2.0136986301369864) internal successors, (147), 73 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:01:27,759 INFO L276 IsEmpty]: Start isEmpty. Operand 961 states and 1087 transitions. [2022-12-14 16:01:27,760 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-14 16:01:27,760 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:01:27,760 INFO L195 NwaCegarLoop]: trace histogram [11, 11, 10, 10, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:01:27,765 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (47)] Ended with exit code 0 [2022-12-14 16:01:27,960 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable61,47 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:01:27,960 INFO L420 AbstractCegarLoop]: === Iteration 63 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:01:27,960 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:01:27,960 INFO L85 PathProgramCache]: Analyzing trace with hash 1478128118, now seen corresponding path program 13 times [2022-12-14 16:01:27,961 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:01:27,961 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [266551843] [2022-12-14 16:01:27,961 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:01:27,961 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:01:27,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:01:28,641 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 64 proven. 157 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:01:28,642 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:01:28,642 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [266551843] [2022-12-14 16:01:28,642 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [266551843] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:01:28,642 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1868855102] [2022-12-14 16:01:28,642 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:01:28,642 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:01:28,642 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:01:28,643 INFO L229 MonitoredProcess]: Starting monitored process 48 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:01:28,643 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Waiting until timeout for monitored process [2022-12-14 16:01:28,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:01:28,768 INFO L263 TraceCheckSpWp]: Trace formula consists of 347 conjuncts, 80 conjunts are in the unsatisfiable core [2022-12-14 16:01:28,769 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:01:29,089 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:29,766 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 16:01:29,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 16:01:29,806 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 11 proven. 210 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:01:29,806 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:01:30,298 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 16:01:30,299 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 16:01:30,463 INFO L134 CoverageAnalysis]: Checked inductivity of 221 backedges. 11 proven. 210 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:01:30,464 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1868855102] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:01:30,464 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1360083584] [2022-12-14 16:01:30,464 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 16:01:30,464 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:01:30,464 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:01:30,465 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:01:30,465 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:01:30,488 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:01:30,490 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:01:30,490 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:01:30,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:01:30,563 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:30,590 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:30,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:30,670 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:01:30,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:01:30,755 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:01:32,176 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '67313#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:01:32,176 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:01:32,176 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:01:32,176 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 27, 27] total 65 [2022-12-14 16:01:32,176 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [484348358] [2022-12-14 16:01:32,176 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:01:32,176 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 65 states [2022-12-14 16:01:32,176 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:01:32,177 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 65 interpolants. [2022-12-14 16:01:32,177 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=227, Invalid=5029, Unknown=0, NotChecked=0, Total=5256 [2022-12-14 16:01:32,177 INFO L87 Difference]: Start difference. First operand 961 states and 1087 transitions. Second operand has 65 states, 65 states have (on average 1.8923076923076922) internal successors, (123), 65 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:01:41,785 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:01:41,786 INFO L93 Difference]: Finished difference Result 3504 states and 3741 transitions. [2022-12-14 16:01:41,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 63 states. [2022-12-14 16:01:41,786 INFO L78 Accepts]: Start accepts. Automaton has has 65 states, 65 states have (on average 1.8923076923076922) internal successors, (123), 65 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-12-14 16:01:41,786 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:01:41,789 INFO L225 Difference]: With dead ends: 3504 [2022-12-14 16:01:41,789 INFO L226 Difference]: Without dead ends: 3480 [2022-12-14 16:01:41,790 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 231 GetRequests, 98 SyntacticMatches, 2 SemanticMatches, 131 ConstructedPredicates, 0 IntricatePredicates, 11 DeprecatedPredicates, 3721 ImplicationChecksByTransitivity, 8.6s TimeCoverageRelationStatistics Valid=1360, Invalid=16196, Unknown=0, NotChecked=0, Total=17556 [2022-12-14 16:01:41,790 INFO L413 NwaCegarLoop]: 52 mSDtfsCounter, 2219 mSDsluCounter, 1720 mSDsCounter, 0 mSdLazyCounter, 7436 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2219 SdHoareTripleChecker+Valid, 1772 SdHoareTripleChecker+Invalid, 7478 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 7436 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.1s IncrementalHoareTripleChecker+Time [2022-12-14 16:01:41,790 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2219 Valid, 1772 Invalid, 7478 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 7436 Invalid, 0 Unknown, 0 Unchecked, 4.1s Time] [2022-12-14 16:01:41,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3480 states. [2022-12-14 16:01:41,800 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3480 to 1133. [2022-12-14 16:01:41,801 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1133 states, 1130 states have (on average 1.1424778761061947) internal successors, (1291), 1132 states have internal predecessors, (1291), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:01:41,802 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1133 states to 1133 states and 1291 transitions. [2022-12-14 16:01:41,802 INFO L78 Accepts]: Start accepts. Automaton has 1133 states and 1291 transitions. Word has length 49 [2022-12-14 16:01:41,802 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:01:41,802 INFO L495 AbstractCegarLoop]: Abstraction has 1133 states and 1291 transitions. [2022-12-14 16:01:41,802 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 65 states, 65 states have (on average 1.8923076923076922) internal successors, (123), 65 states have internal predecessors, (123), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:01:41,802 INFO L276 IsEmpty]: Start isEmpty. Operand 1133 states and 1291 transitions. [2022-12-14 16:01:41,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-14 16:01:41,803 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:01:41,803 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:01:41,808 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (48)] Forceful destruction successful, exit code 0 [2022-12-14 16:01:42,003 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable62,48 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:01:42,004 INFO L420 AbstractCegarLoop]: === Iteration 64 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:01:42,004 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:01:42,004 INFO L85 PathProgramCache]: Analyzing trace with hash -627298200, now seen corresponding path program 12 times [2022-12-14 16:01:42,005 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:01:42,005 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [60978582] [2022-12-14 16:01:42,005 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:01:42,005 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:01:42,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:01:43,375 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 16 proven. 118 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:01:43,375 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:01:43,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [60978582] [2022-12-14 16:01:43,376 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [60978582] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:01:43,376 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1995798695] [2022-12-14 16:01:43,376 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:01:43,376 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:01:43,376 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:01:43,377 INFO L229 MonitoredProcess]: Starting monitored process 49 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:01:43,377 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Waiting until timeout for monitored process [2022-12-14 16:01:43,830 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:01:43,830 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:01:43,835 INFO L263 TraceCheckSpWp]: Trace formula consists of 415 conjuncts, 161 conjunts are in the unsatisfiable core [2022-12-14 16:01:43,838 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:01:43,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 16:01:44,206 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:44,273 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:01:44,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:01:44,606 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:01:44,749 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:01:44,909 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:01:45,088 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:01:45,283 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:01:45,451 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:01:45,453 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 16:01:45,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-12-14 16:01:45,456 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 14 proven. 120 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:01:45,456 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:01:45,465 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2191 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2191) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-12-14 16:01:49,884 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2191 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2191) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 2 |c_ULTIMATE.start_cstrcat_~append#1.offset|)))) is different from false [2022-12-14 16:01:54,337 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2191 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_~s#1.base| v_ArrVal_2191) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 3 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0)) is different from false [2022-12-14 16:01:58,981 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2186 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_2186) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 6 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-12-14 16:01:58,984 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 16:01:58,985 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 16:01:58,989 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 16:01:58,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 16:01:58,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 16:01:59,394 INFO L134 CoverageAnalysis]: Checked inductivity of 134 backedges. 14 proven. 86 refuted. 0 times theorem prover too weak. 0 trivial. 34 not checked. [2022-12-14 16:01:59,394 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1995798695] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:01:59,394 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1505797686] [2022-12-14 16:01:59,395 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 16:01:59,395 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:01:59,395 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:01:59,395 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:01:59,395 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:01:59,418 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:01:59,420 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:01:59,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:01:59,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:01:59,487 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:59,507 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:59,545 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:01:59,584 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:01:59,584 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:01:59,654 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:01:59,655 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:01:59,684 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 16:01:59,684 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 16:01:59,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:01:59,841 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:01:59,888 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:02:02,649 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '72453#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:02:02,649 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:02:02,650 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:02:02,650 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [36, 27, 27] total 80 [2022-12-14 16:02:02,650 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1994252183] [2022-12-14 16:02:02,650 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:02:02,650 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 80 states [2022-12-14 16:02:02,650 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:02,651 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 80 interpolants. [2022-12-14 16:02:02,651 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=316, Invalid=7437, Unknown=95, NotChecked=708, Total=8556 [2022-12-14 16:02:02,651 INFO L87 Difference]: Start difference. First operand 1133 states and 1291 transitions. Second operand has 80 states, 80 states have (on average 1.7) internal successors, (136), 80 states have internal predecessors, (136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:07,769 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:02:07,769 INFO L93 Difference]: Finished difference Result 1796 states and 2010 transitions. [2022-12-14 16:02:07,769 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2022-12-14 16:02:07,769 INFO L78 Accepts]: Start accepts. Automaton has has 80 states, 80 states have (on average 1.7) internal successors, (136), 80 states have internal predecessors, (136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-12-14 16:02:07,769 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:02:07,770 INFO L225 Difference]: With dead ends: 1796 [2022-12-14 16:02:07,770 INFO L226 Difference]: Without dead ends: 1527 [2022-12-14 16:02:07,771 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 231 GetRequests, 91 SyntacticMatches, 4 SemanticMatches, 136 ConstructedPredicates, 4 IntricatePredicates, 3 DeprecatedPredicates, 5285 ImplicationChecksByTransitivity, 21.4s TimeCoverageRelationStatistics Valid=970, Invalid=16759, Unknown=109, NotChecked=1068, Total=18906 [2022-12-14 16:02:07,771 INFO L413 NwaCegarLoop]: 60 mSDtfsCounter, 590 mSDsluCounter, 1569 mSDsCounter, 0 mSdLazyCounter, 4106 mSolverCounterSat, 46 mSolverCounterUnsat, 65 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 590 SdHoareTripleChecker+Valid, 1629 SdHoareTripleChecker+Invalid, 4859 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 4106 IncrementalHoareTripleChecker+Invalid, 65 IncrementalHoareTripleChecker+Unknown, 642 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-12-14 16:02:07,771 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [590 Valid, 1629 Invalid, 4859 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 4106 Invalid, 65 Unknown, 642 Unchecked, 2.1s Time] [2022-12-14 16:02:07,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1527 states. [2022-12-14 16:02:07,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1527 to 1318. [2022-12-14 16:02:07,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1318 states, 1315 states have (on average 1.1482889733840305) internal successors, (1510), 1317 states have internal predecessors, (1510), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:07,780 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1318 states to 1318 states and 1510 transitions. [2022-12-14 16:02:07,780 INFO L78 Accepts]: Start accepts. Automaton has 1318 states and 1510 transitions. Word has length 50 [2022-12-14 16:02:07,780 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:02:07,780 INFO L495 AbstractCegarLoop]: Abstraction has 1318 states and 1510 transitions. [2022-12-14 16:02:07,780 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 80 states, 80 states have (on average 1.7) internal successors, (136), 80 states have internal predecessors, (136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:07,780 INFO L276 IsEmpty]: Start isEmpty. Operand 1318 states and 1510 transitions. [2022-12-14 16:02:07,781 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-12-14 16:02:07,781 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:07,781 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:02:07,786 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (49)] Forceful destruction successful, exit code 0 [2022-12-14 16:02:07,981 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable63,49 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:07,982 INFO L420 AbstractCegarLoop]: === Iteration 65 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:02:07,983 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:07,983 INFO L85 PathProgramCache]: Analyzing trace with hash 1520411607, now seen corresponding path program 13 times [2022-12-14 16:02:07,983 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:07,983 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1322217700] [2022-12-14 16:02:07,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:07,984 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:08,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:08,418 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 25 proven. 122 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:08,418 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:08,418 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1322217700] [2022-12-14 16:02:08,418 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1322217700] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:02:08,418 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [545587566] [2022-12-14 16:02:08,418 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:02:08,418 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:08,418 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:02:08,419 INFO L229 MonitoredProcess]: Starting monitored process 50 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:02:08,420 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Waiting until timeout for monitored process [2022-12-14 16:02:08,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:08,598 INFO L263 TraceCheckSpWp]: Trace formula consists of 428 conjuncts, 78 conjunts are in the unsatisfiable core [2022-12-14 16:02:08,600 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:02:08,867 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 36 proven. 111 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:08,867 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:02:09,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 16:02:09,341 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 36 proven. 111 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:09,341 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [545587566] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:02:09,341 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1661380282] [2022-12-14 16:02:09,342 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 16:02:09,342 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:02:09,342 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:02:09,342 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:02:09,342 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:02:09,366 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:02:09,368 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:02:09,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:02:09,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:02:09,431 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:09,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:09,492 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:09,537 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:02:09,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:02:09,623 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:02:09,623 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:02:09,650 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 16:02:09,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 16:02:09,731 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:02:09,795 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:02:09,844 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:02:11,905 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '76021#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:02:11,905 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:02:11,905 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:02:11,905 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 20] total 42 [2022-12-14 16:02:11,906 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [907057137] [2022-12-14 16:02:11,906 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:02:11,906 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-12-14 16:02:11,906 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:11,906 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-12-14 16:02:11,906 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=275, Invalid=2805, Unknown=0, NotChecked=0, Total=3080 [2022-12-14 16:02:11,906 INFO L87 Difference]: Start difference. First operand 1318 states and 1510 transitions. Second operand has 43 states, 42 states have (on average 2.5952380952380953) internal successors, (109), 43 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:13,151 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:02:13,151 INFO L93 Difference]: Finished difference Result 1547 states and 1730 transitions. [2022-12-14 16:02:13,151 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-12-14 16:02:13,152 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 42 states have (on average 2.5952380952380953) internal successors, (109), 43 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-12-14 16:02:13,152 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:02:13,153 INFO L225 Difference]: With dead ends: 1547 [2022-12-14 16:02:13,153 INFO L226 Difference]: Without dead ends: 1547 [2022-12-14 16:02:13,153 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 112 SyntacticMatches, 8 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1732 ImplicationChecksByTransitivity, 3.3s TimeCoverageRelationStatistics Valid=932, Invalid=5548, Unknown=0, NotChecked=0, Total=6480 [2022-12-14 16:02:13,154 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 420 mSDsluCounter, 360 mSDsCounter, 0 mSdLazyCounter, 1634 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 420 SdHoareTripleChecker+Valid, 386 SdHoareTripleChecker+Invalid, 1640 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 1634 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 16:02:13,154 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [420 Valid, 386 Invalid, 1640 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 1634 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-12-14 16:02:13,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1547 states. [2022-12-14 16:02:13,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1547 to 1335. [2022-12-14 16:02:13,161 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1335 states, 1332 states have (on average 1.1463963963963963) internal successors, (1527), 1334 states have internal predecessors, (1527), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:13,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1335 states to 1335 states and 1527 transitions. [2022-12-14 16:02:13,162 INFO L78 Accepts]: Start accepts. Automaton has 1335 states and 1527 transitions. Word has length 52 [2022-12-14 16:02:13,162 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:02:13,162 INFO L495 AbstractCegarLoop]: Abstraction has 1335 states and 1527 transitions. [2022-12-14 16:02:13,162 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 43 states, 42 states have (on average 2.5952380952380953) internal successors, (109), 43 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:13,162 INFO L276 IsEmpty]: Start isEmpty. Operand 1335 states and 1527 transitions. [2022-12-14 16:02:13,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-14 16:02:13,163 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:13,163 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:02:13,168 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (50)] Forceful destruction successful, exit code 0 [2022-12-14 16:02:13,363 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 50 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable64 [2022-12-14 16:02:13,364 INFO L420 AbstractCegarLoop]: === Iteration 66 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:02:13,365 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:13,365 INFO L85 PathProgramCache]: Analyzing trace with hash -111880408, now seen corresponding path program 4 times [2022-12-14 16:02:13,365 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:13,365 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1469474155] [2022-12-14 16:02:13,366 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:13,366 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:13,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:14,242 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 25 proven. 129 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:14,242 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:14,242 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1469474155] [2022-12-14 16:02:14,242 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1469474155] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:02:14,242 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [68864459] [2022-12-14 16:02:14,242 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:02:14,242 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:14,242 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:02:14,243 INFO L229 MonitoredProcess]: Starting monitored process 51 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:02:14,244 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Waiting until timeout for monitored process [2022-12-14 16:02:14,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:14,411 INFO L263 TraceCheckSpWp]: Trace formula consists of 434 conjuncts, 85 conjunts are in the unsatisfiable core [2022-12-14 16:02:14,413 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:02:14,469 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 16:02:14,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 16:02:15,315 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 36 proven. 118 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:15,316 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:02:16,335 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 49 proven. 105 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:16,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [68864459] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:02:16,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1489216013] [2022-12-14 16:02:16,336 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 16:02:16,336 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:02:16,336 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:02:16,336 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:02:16,336 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:02:16,364 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:02:16,365 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:02:16,366 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:02:16,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:16,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:16,438 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:16,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:16,517 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:02:16,517 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:02:16,594 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:02:16,595 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:02:16,622 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 16:02:16,622 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 16:02:16,700 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:02:16,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:02:16,880 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:02:20,171 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '79340#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= |ULTIMATE.start_main_~length3~0#1| 1) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:02:20,171 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:02:20,172 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:02:20,172 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 19, 19] total 60 [2022-12-14 16:02:20,172 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1331636953] [2022-12-14 16:02:20,172 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:02:20,172 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 62 states [2022-12-14 16:02:20,172 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:20,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 62 interpolants. [2022-12-14 16:02:20,173 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=420, Invalid=5130, Unknown=0, NotChecked=0, Total=5550 [2022-12-14 16:02:20,173 INFO L87 Difference]: Start difference. First operand 1335 states and 1527 transitions. Second operand has 62 states, 61 states have (on average 2.6065573770491803) internal successors, (159), 61 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:28,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:02:28,673 INFO L93 Difference]: Finished difference Result 2136 states and 2347 transitions. [2022-12-14 16:02:28,673 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 87 states. [2022-12-14 16:02:28,673 INFO L78 Accepts]: Start accepts. Automaton has has 62 states, 61 states have (on average 2.6065573770491803) internal successors, (159), 61 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-12-14 16:02:28,673 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:02:28,674 INFO L225 Difference]: With dead ends: 2136 [2022-12-14 16:02:28,675 INFO L226 Difference]: Without dead ends: 2136 [2022-12-14 16:02:28,675 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 106 SyntacticMatches, 0 SemanticMatches, 157 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6115 ImplicationChecksByTransitivity, 11.8s TimeCoverageRelationStatistics Valid=4680, Invalid=20442, Unknown=0, NotChecked=0, Total=25122 [2022-12-14 16:02:28,676 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 1990 mSDsluCounter, 415 mSDsCounter, 0 mSdLazyCounter, 3384 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1990 SdHoareTripleChecker+Valid, 440 SdHoareTripleChecker+Invalid, 3480 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 3384 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-12-14 16:02:28,676 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1990 Valid, 440 Invalid, 3480 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 3384 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-12-14 16:02:28,676 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2136 states. [2022-12-14 16:02:28,683 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2136 to 1341. [2022-12-14 16:02:28,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1341 states, 1338 states have (on average 1.1464872944693572) internal successors, (1534), 1340 states have internal predecessors, (1534), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:28,685 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1341 states to 1341 states and 1534 transitions. [2022-12-14 16:02:28,685 INFO L78 Accepts]: Start accepts. Automaton has 1341 states and 1534 transitions. Word has length 53 [2022-12-14 16:02:28,685 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:02:28,685 INFO L495 AbstractCegarLoop]: Abstraction has 1341 states and 1534 transitions. [2022-12-14 16:02:28,685 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 62 states, 61 states have (on average 2.6065573770491803) internal successors, (159), 61 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:28,685 INFO L276 IsEmpty]: Start isEmpty. Operand 1341 states and 1534 transitions. [2022-12-14 16:02:28,686 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-14 16:02:28,686 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:28,686 INFO L195 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:02:28,691 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (51)] Ended with exit code 0 [2022-12-14 16:02:28,886 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable65,51 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:28,887 INFO L420 AbstractCegarLoop]: === Iteration 67 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:02:28,887 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:28,888 INFO L85 PathProgramCache]: Analyzing trace with hash -144360434, now seen corresponding path program 8 times [2022-12-14 16:02:28,888 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:28,888 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [122330119] [2022-12-14 16:02:28,888 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:28,889 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:28,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:29,790 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 17 proven. 91 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:29,790 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:29,790 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [122330119] [2022-12-14 16:02:29,790 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [122330119] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:02:29,790 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1276796002] [2022-12-14 16:02:29,790 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:02:29,790 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:29,790 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:02:29,791 INFO L229 MonitoredProcess]: Starting monitored process 52 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:02:29,792 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Waiting until timeout for monitored process [2022-12-14 16:02:30,180 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-12-14 16:02:30,180 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:02:30,184 INFO L263 TraceCheckSpWp]: Trace formula consists of 402 conjuncts, 71 conjunts are in the unsatisfiable core [2022-12-14 16:02:30,186 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:02:30,245 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 16:02:30,245 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 16:02:31,472 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 24 proven. 84 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:31,473 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:02:32,929 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 45 proven. 63 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:32,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1276796002] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:02:32,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [577285325] [2022-12-14 16:02:32,931 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 16:02:32,931 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:02:32,931 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:02:32,931 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:02:32,931 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:02:32,970 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:02:32,972 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:02:32,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:02:33,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:02:33,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:33,054 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:33,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:02:33,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:33,151 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:33,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:33,202 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:02:33,202 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:02:33,351 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 16:02:33,351 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 16:02:33,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:02:33,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:02:33,597 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:02:37,255 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '83386#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:02:37,256 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:02:37,256 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:02:37,256 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 26, 24] total 74 [2022-12-14 16:02:37,256 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1130893113] [2022-12-14 16:02:37,256 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:02:37,256 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 76 states [2022-12-14 16:02:37,256 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:37,257 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 76 interpolants. [2022-12-14 16:02:37,257 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=552, Invalid=7458, Unknown=0, NotChecked=0, Total=8010 [2022-12-14 16:02:37,257 INFO L87 Difference]: Start difference. First operand 1341 states and 1534 transitions. Second operand has 76 states, 75 states have (on average 2.12) internal successors, (159), 75 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:58,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:02:58,500 INFO L93 Difference]: Finished difference Result 2925 states and 3150 transitions. [2022-12-14 16:02:58,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 169 states. [2022-12-14 16:02:58,501 INFO L78 Accepts]: Start accepts. Automaton has has 76 states, 75 states have (on average 2.12) internal successors, (159), 75 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-12-14 16:02:58,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:02:58,504 INFO L225 Difference]: With dead ends: 2925 [2022-12-14 16:02:58,504 INFO L226 Difference]: Without dead ends: 2757 [2022-12-14 16:02:58,506 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 347 GetRequests, 93 SyntacticMatches, 0 SemanticMatches, 254 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18875 ImplicationChecksByTransitivity, 24.9s TimeCoverageRelationStatistics Valid=11511, Invalid=53769, Unknown=0, NotChecked=0, Total=65280 [2022-12-14 16:02:58,506 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 3285 mSDsluCounter, 745 mSDsCounter, 0 mSdLazyCounter, 4498 mSolverCounterSat, 163 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3285 SdHoareTripleChecker+Valid, 777 SdHoareTripleChecker+Invalid, 4661 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 163 IncrementalHoareTripleChecker+Valid, 4498 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-12-14 16:02:58,506 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3285 Valid, 777 Invalid, 4661 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [163 Valid, 4498 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-12-14 16:02:58,507 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2757 states. [2022-12-14 16:02:58,516 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2757 to 1361. [2022-12-14 16:02:58,516 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1361 states, 1358 states have (on average 1.1443298969072164) internal successors, (1554), 1360 states have internal predecessors, (1554), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:58,517 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1361 states to 1361 states and 1554 transitions. [2022-12-14 16:02:58,517 INFO L78 Accepts]: Start accepts. Automaton has 1361 states and 1554 transitions. Word has length 53 [2022-12-14 16:02:58,517 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:02:58,517 INFO L495 AbstractCegarLoop]: Abstraction has 1361 states and 1554 transitions. [2022-12-14 16:02:58,517 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 76 states, 75 states have (on average 2.12) internal successors, (159), 75 states have internal predecessors, (159), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:58,518 INFO L276 IsEmpty]: Start isEmpty. Operand 1361 states and 1554 transitions. [2022-12-14 16:02:58,518 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-14 16:02:58,518 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:58,518 INFO L195 NwaCegarLoop]: trace histogram [12, 12, 11, 11, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:02:58,524 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (52)] Forceful destruction successful, exit code 0 [2022-12-14 16:02:58,719 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 52 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable66 [2022-12-14 16:02:58,719 INFO L420 AbstractCegarLoop]: === Iteration 68 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:02:58,719 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:58,719 INFO L85 PathProgramCache]: Analyzing trace with hash -537916819, now seen corresponding path program 14 times [2022-12-14 16:02:58,720 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:58,720 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1920519358] [2022-12-14 16:02:58,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:58,720 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:58,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:59,645 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 81 proven. 184 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:59,646 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:59,646 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1920519358] [2022-12-14 16:02:59,646 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1920519358] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:02:59,646 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1783234109] [2022-12-14 16:02:59,646 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:02:59,646 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:59,646 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:02:59,647 INFO L229 MonitoredProcess]: Starting monitored process 53 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:02:59,647 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Waiting until timeout for monitored process [2022-12-14 16:03:00,015 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 13 check-sat command(s) [2022-12-14 16:03:00,016 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:03:00,019 INFO L263 TraceCheckSpWp]: Trace formula consists of 371 conjuncts, 86 conjunts are in the unsatisfiable core [2022-12-14 16:03:00,021 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:00,485 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:01,373 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 16:03:01,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 16:03:01,418 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 12 proven. 253 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:01,418 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:03:02,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 16:03:02,161 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 16:03:02,413 INFO L134 CoverageAnalysis]: Checked inductivity of 265 backedges. 12 proven. 253 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:02,413 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1783234109] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:03:02,413 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1633586941] [2022-12-14 16:03:02,414 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 16:03:02,414 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:03:02,414 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:03:02,414 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:03:02,414 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:03:02,441 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:03:02,443 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:03:02,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:03:02,478 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:02,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:02,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:02,573 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:02,626 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:03:02,627 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:03:02,713 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:04,264 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '88401#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:04,264 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:04,264 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:04,264 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 29, 29] total 71 [2022-12-14 16:03:04,264 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1161771806] [2022-12-14 16:03:04,265 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:04,265 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 71 states [2022-12-14 16:03:04,265 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:04,265 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 71 interpolants. [2022-12-14 16:03:04,266 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=250, Invalid=5912, Unknown=0, NotChecked=0, Total=6162 [2022-12-14 16:03:04,266 INFO L87 Difference]: Start difference. First operand 1361 states and 1554 transitions. Second operand has 71 states, 71 states have (on average 1.8732394366197183) internal successors, (133), 71 states have internal predecessors, (133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:16,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:16,392 INFO L93 Difference]: Finished difference Result 4792 states and 5143 transitions. [2022-12-14 16:03:16,392 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 70 states. [2022-12-14 16:03:16,392 INFO L78 Accepts]: Start accepts. Automaton has has 71 states, 71 states have (on average 1.8732394366197183) internal successors, (133), 71 states have internal predecessors, (133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-12-14 16:03:16,392 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:16,398 INFO L225 Difference]: With dead ends: 4792 [2022-12-14 16:03:16,398 INFO L226 Difference]: Without dead ends: 4766 [2022-12-14 16:03:16,399 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 253 GetRequests, 107 SyntacticMatches, 2 SemanticMatches, 144 ConstructedPredicates, 0 IntricatePredicates, 12 DeprecatedPredicates, 4470 ImplicationChecksByTransitivity, 11.3s TimeCoverageRelationStatistics Valid=1674, Invalid=19496, Unknown=0, NotChecked=0, Total=21170 [2022-12-14 16:03:16,399 INFO L413 NwaCegarLoop]: 57 mSDtfsCounter, 2585 mSDsluCounter, 2169 mSDsCounter, 0 mSdLazyCounter, 9188 mSolverCounterSat, 46 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2585 SdHoareTripleChecker+Valid, 2226 SdHoareTripleChecker+Invalid, 9234 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 46 IncrementalHoareTripleChecker+Valid, 9188 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.9s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:16,399 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2585 Valid, 2226 Invalid, 9234 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [46 Valid, 9188 Invalid, 0 Unknown, 0 Unchecked, 4.9s Time] [2022-12-14 16:03:16,403 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4766 states. [2022-12-14 16:03:16,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4766 to 1561. [2022-12-14 16:03:16,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1561 states, 1558 states have (on average 1.1553273427471116) internal successors, (1800), 1560 states have internal predecessors, (1800), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:16,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1561 states to 1561 states and 1800 transitions. [2022-12-14 16:03:16,427 INFO L78 Accepts]: Start accepts. Automaton has 1561 states and 1800 transitions. Word has length 53 [2022-12-14 16:03:16,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:16,427 INFO L495 AbstractCegarLoop]: Abstraction has 1561 states and 1800 transitions. [2022-12-14 16:03:16,428 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 71 states, 71 states have (on average 1.8732394366197183) internal successors, (133), 71 states have internal predecessors, (133), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:16,428 INFO L276 IsEmpty]: Start isEmpty. Operand 1561 states and 1800 transitions. [2022-12-14 16:03:16,430 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-12-14 16:03:16,430 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:16,430 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:03:16,435 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (53)] Ended with exit code 0 [2022-12-14 16:03:16,630 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 53 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable67 [2022-12-14 16:03:16,630 INFO L420 AbstractCegarLoop]: === Iteration 69 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:03:16,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:16,631 INFO L85 PathProgramCache]: Analyzing trace with hash -134575649, now seen corresponding path program 14 times [2022-12-14 16:03:16,631 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:16,631 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1382304462] [2022-12-14 16:03:16,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:16,631 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:16,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:17,806 INFO L134 CoverageAnalysis]: Checked inductivity of 177 backedges. 16 proven. 161 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:17,806 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:17,806 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1382304462] [2022-12-14 16:03:17,806 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1382304462] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:17,806 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2017538797] [2022-12-14 16:03:17,806 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:03:17,806 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:17,806 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:17,807 INFO L229 MonitoredProcess]: Starting monitored process 54 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:17,808 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (54)] Waiting until timeout for monitored process [2022-12-14 16:03:18,337 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2022-12-14 16:03:18,337 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:03:18,342 INFO L263 TraceCheckSpWp]: Trace formula consists of 459 conjuncts, 189 conjunts are in the unsatisfiable core [2022-12-14 16:03:18,346 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:18,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 16:03:18,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:18,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:19,078 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:19,259 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:19,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:19,553 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:19,680 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:19,820 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:19,980 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 16:03:20,103 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:03:20,105 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 16:03:20,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 17 treesize of output 10 [2022-12-14 16:03:20,108 INFO L134 CoverageAnalysis]: Checked inductivity of 177 backedges. 16 proven. 161 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:20,108 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:03:20,117 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_2562 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2562) |c_ULTIMATE.start_cstrcat_~append#1.base|) |c_ULTIMATE.start_cstrcat_~append#1.offset|) 0)) is different from false [2022-12-14 16:03:38,701 WARN L837 $PredicateComparison]: unable to prove that (and (not (= |c_ULTIMATE.start_cstrcat_~s#1.base| |c_ULTIMATE.start_cstrcat_~append#1.base|)) (forall ((v_ArrVal_2556 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrcat_#t~post4#1.base| v_ArrVal_2556) |c_ULTIMATE.start_cstrcat_~append#1.base|) (+ 6 |c_ULTIMATE.start_cstrcat_~append#1.offset|)) 0))) is different from false [2022-12-14 16:03:38,920 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 16:03:38,920 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 16:03:38,925 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 16:03:38,925 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 16:03:38,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 16:03:39,523 INFO L134 CoverageAnalysis]: Checked inductivity of 177 backedges. 16 proven. 135 refuted. 0 times theorem prover too weak. 0 trivial. 26 not checked. [2022-12-14 16:03:39,523 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2017538797] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:03:39,523 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1480768979] [2022-12-14 16:03:39,524 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 16:03:39,524 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:03:39,524 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:03:39,524 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:03:39,524 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:03:39,555 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:03:39,558 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:03:39,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:03:39,590 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:39,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:39,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:39,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:39,719 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:03:39,719 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:03:39,815 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:03:39,816 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:03:39,841 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 16:03:39,841 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 16:03:39,921 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:40,037 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:40,104 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:43,192 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '95313#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:43,192 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:43,192 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:43,192 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [37, 30, 30] total 86 [2022-12-14 16:03:43,192 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [769358347] [2022-12-14 16:03:43,192 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:43,192 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 86 states [2022-12-14 16:03:43,193 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:43,193 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 86 interpolants. [2022-12-14 16:03:43,193 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=357, Invalid=8837, Unknown=126, NotChecked=382, Total=9702 [2022-12-14 16:03:43,193 INFO L87 Difference]: Start difference. First operand 1561 states and 1800 transitions. Second operand has 86 states, 86 states have (on average 1.7674418604651163) internal successors, (152), 86 states have internal predecessors, (152), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:48,113 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:48,113 INFO L93 Difference]: Finished difference Result 2309 states and 2625 transitions. [2022-12-14 16:03:48,114 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2022-12-14 16:03:48,114 INFO L78 Accepts]: Start accepts. Automaton has has 86 states, 86 states have (on average 1.7674418604651163) internal successors, (152), 86 states have internal predecessors, (152), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-12-14 16:03:48,114 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:48,116 INFO L225 Difference]: With dead ends: 2309 [2022-12-14 16:03:48,116 INFO L226 Difference]: Without dead ends: 2107 [2022-12-14 16:03:48,116 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 249 GetRequests, 104 SyntacticMatches, 4 SemanticMatches, 141 ConstructedPredicates, 2 IntricatePredicates, 0 DeprecatedPredicates, 5634 ImplicationChecksByTransitivity, 26.8s TimeCoverageRelationStatistics Valid=959, Invalid=18663, Unknown=126, NotChecked=558, Total=20306 [2022-12-14 16:03:48,117 INFO L413 NwaCegarLoop]: 69 mSDtfsCounter, 539 mSDsluCounter, 1755 mSDsCounter, 0 mSdLazyCounter, 5009 mSolverCounterSat, 41 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 539 SdHoareTripleChecker+Valid, 1824 SdHoareTripleChecker+Invalid, 5292 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 41 IncrementalHoareTripleChecker+Valid, 5009 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 242 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:48,117 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [539 Valid, 1824 Invalid, 5292 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [41 Valid, 5009 Invalid, 0 Unknown, 242 Unchecked, 2.2s Time] [2022-12-14 16:03:48,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2107 states. [2022-12-14 16:03:48,127 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2107 to 1794. [2022-12-14 16:03:48,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1794 states, 1791 states have (on average 1.1635957565605808) internal successors, (2084), 1793 states have internal predecessors, (2084), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:48,129 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1794 states to 1794 states and 2084 transitions. [2022-12-14 16:03:48,129 INFO L78 Accepts]: Start accepts. Automaton has 1794 states and 2084 transitions. Word has length 56 [2022-12-14 16:03:48,129 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:48,129 INFO L495 AbstractCegarLoop]: Abstraction has 1794 states and 2084 transitions. [2022-12-14 16:03:48,130 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 86 states, 86 states have (on average 1.7674418604651163) internal successors, (152), 86 states have internal predecessors, (152), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:48,130 INFO L276 IsEmpty]: Start isEmpty. Operand 1794 states and 2084 transitions. [2022-12-14 16:03:48,131 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-12-14 16:03:48,131 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:48,131 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 5, 5, 5, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:03:48,137 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (54)] Ended with exit code 0 [2022-12-14 16:03:48,331 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 54 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable68 [2022-12-14 16:03:48,331 INFO L420 AbstractCegarLoop]: === Iteration 70 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:03:48,331 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:48,331 INFO L85 PathProgramCache]: Analyzing trace with hash 2118784626, now seen corresponding path program 9 times [2022-12-14 16:03:48,331 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:48,332 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [970917276] [2022-12-14 16:03:48,332 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:48,332 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:48,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:49,207 INFO L134 CoverageAnalysis]: Checked inductivity of 116 backedges. 13 proven. 103 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:49,208 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:49,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [970917276] [2022-12-14 16:03:49,208 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [970917276] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:49,208 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [466001840] [2022-12-14 16:03:49,208 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:03:49,208 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:49,208 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:49,209 INFO L229 MonitoredProcess]: Starting monitored process 55 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:49,209 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (55)] Waiting until timeout for monitored process [2022-12-14 16:03:49,405 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:03:49,405 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:03:49,408 INFO L263 TraceCheckSpWp]: Trace formula consists of 442 conjuncts, 96 conjunts are in the unsatisfiable core [2022-12-14 16:03:49,410 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:49,462 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 16:03:49,462 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 16:03:51,323 INFO L134 CoverageAnalysis]: Checked inductivity of 116 backedges. 25 proven. 91 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:51,324 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:03:53,067 INFO L134 CoverageAnalysis]: Checked inductivity of 116 backedges. 41 proven. 75 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:53,067 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [466001840] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:03:53,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1707699401] [2022-12-14 16:03:53,068 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 16:03:53,068 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:03:53,068 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:03:53,068 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:03:53,068 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:03:53,092 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:03:53,095 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:03:53,095 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:03:53,122 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:53,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:53,166 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:53,212 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:53,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:53,261 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:53,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:53,306 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:03:53,306 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:03:53,447 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 16:03:53,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 16:03:53,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:53,554 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:53,685 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:57,148 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '99931#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:57,148 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:57,148 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:57,148 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 25, 25] total 74 [2022-12-14 16:03:57,148 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [665195477] [2022-12-14 16:03:57,149 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:57,149 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 76 states [2022-12-14 16:03:57,149 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:57,149 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 76 interpolants. [2022-12-14 16:03:57,149 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=653, Invalid=7357, Unknown=0, NotChecked=0, Total=8010 [2022-12-14 16:03:57,149 INFO L87 Difference]: Start difference. First operand 1794 states and 2084 transitions. Second operand has 76 states, 75 states have (on average 2.28) internal successors, (171), 75 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:04:18,533 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:04:18,533 INFO L93 Difference]: Finished difference Result 2945 states and 3249 transitions. [2022-12-14 16:04:18,534 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 148 states. [2022-12-14 16:04:18,534 INFO L78 Accepts]: Start accepts. Automaton has has 76 states, 75 states have (on average 2.28) internal successors, (171), 75 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-12-14 16:04:18,534 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:04:18,536 INFO L225 Difference]: With dead ends: 2945 [2022-12-14 16:04:18,536 INFO L226 Difference]: Without dead ends: 2777 [2022-12-14 16:04:18,538 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 338 GetRequests, 105 SyntacticMatches, 0 SemanticMatches, 233 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16379 ImplicationChecksByTransitivity, 25.7s TimeCoverageRelationStatistics Valid=9867, Invalid=45123, Unknown=0, NotChecked=0, Total=54990 [2022-12-14 16:04:18,538 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 2517 mSDsluCounter, 540 mSDsCounter, 0 mSdLazyCounter, 3387 mSolverCounterSat, 130 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2517 SdHoareTripleChecker+Valid, 568 SdHoareTripleChecker+Invalid, 3517 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 130 IncrementalHoareTripleChecker+Valid, 3387 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2022-12-14 16:04:18,538 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2517 Valid, 568 Invalid, 3517 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [130 Valid, 3387 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2022-12-14 16:04:18,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2777 states. [2022-12-14 16:04:18,552 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2777 to 1806. [2022-12-14 16:04:18,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1806 states, 1803 states have (on average 1.1625069328896285) internal successors, (2096), 1805 states have internal predecessors, (2096), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:04:18,554 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1806 states to 1806 states and 2096 transitions. [2022-12-14 16:04:18,555 INFO L78 Accepts]: Start accepts. Automaton has 1806 states and 2096 transitions. Word has length 57 [2022-12-14 16:04:18,555 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:04:18,555 INFO L495 AbstractCegarLoop]: Abstraction has 1806 states and 2096 transitions. [2022-12-14 16:04:18,555 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 76 states, 75 states have (on average 2.28) internal successors, (171), 75 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:04:18,555 INFO L276 IsEmpty]: Start isEmpty. Operand 1806 states and 2096 transitions. [2022-12-14 16:04:18,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-12-14 16:04:18,557 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:04:18,557 INFO L195 NwaCegarLoop]: trace histogram [11, 10, 10, 10, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:04:18,563 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (55)] Forceful destruction successful, exit code 0 [2022-12-14 16:04:18,758 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 55 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable69 [2022-12-14 16:04:18,759 INFO L420 AbstractCegarLoop]: === Iteration 71 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:04:18,759 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:04:18,760 INFO L85 PathProgramCache]: Analyzing trace with hash -350601384, now seen corresponding path program 10 times [2022-12-14 16:04:18,760 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:04:18,760 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1313797332] [2022-12-14 16:04:18,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:04:18,761 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:04:18,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:04:19,666 INFO L134 CoverageAnalysis]: Checked inductivity of 214 backedges. 64 proven. 150 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:04:19,666 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:04:19,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1313797332] [2022-12-14 16:04:19,666 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1313797332] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:04:19,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [76130027] [2022-12-14 16:04:19,666 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:04:19,666 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:04:19,666 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:04:19,667 INFO L229 MonitoredProcess]: Starting monitored process 56 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:04:19,668 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (56)] Waiting until timeout for monitored process [2022-12-14 16:04:19,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:04:19,835 INFO L263 TraceCheckSpWp]: Trace formula consists of 410 conjuncts, 82 conjunts are in the unsatisfiable core [2022-12-14 16:04:19,837 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:04:19,888 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 16:04:19,888 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 16:04:20,933 INFO L134 CoverageAnalysis]: Checked inductivity of 214 backedges. 81 proven. 133 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:04:20,933 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:04:22,379 INFO L134 CoverageAnalysis]: Checked inductivity of 214 backedges. 101 proven. 113 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:04:22,379 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [76130027] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:04:22,379 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1509099788] [2022-12-14 16:04:22,380 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 16:04:22,380 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:04:22,380 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:04:22,380 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:04:22,380 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:04:22,402 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:04:22,405 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:04:22,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:04:22,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:22,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:22,484 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:22,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:22,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:22,555 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:22,594 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:04:22,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:04:22,750 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 16:04:22,750 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 16:04:22,802 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:04:22,892 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:04:23,033 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:04:26,437 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '105407#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:04:26,437 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:04:26,437 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:04:26,437 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 28, 28] total 83 [2022-12-14 16:04:26,437 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1571695570] [2022-12-14 16:04:26,437 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:04:26,438 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 85 states [2022-12-14 16:04:26,438 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:04:26,438 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 85 interpolants. [2022-12-14 16:04:26,439 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=726, Invalid=8976, Unknown=0, NotChecked=0, Total=9702 [2022-12-14 16:04:26,439 INFO L87 Difference]: Start difference. First operand 1806 states and 2096 transitions. Second operand has 85 states, 84 states have (on average 2.0357142857142856) internal successors, (171), 84 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:04:42,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:04:42,882 INFO L93 Difference]: Finished difference Result 4389 states and 4725 transitions. [2022-12-14 16:04:42,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 133 states. [2022-12-14 16:04:42,883 INFO L78 Accepts]: Start accepts. Automaton has has 85 states, 84 states have (on average 2.0357142857142856) internal successors, (171), 84 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-12-14 16:04:42,883 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:04:42,885 INFO L225 Difference]: With dead ends: 4389 [2022-12-14 16:04:42,885 INFO L226 Difference]: Without dead ends: 4197 [2022-12-14 16:04:42,887 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 327 GetRequests, 99 SyntacticMatches, 1 SemanticMatches, 227 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13357 ImplicationChecksByTransitivity, 19.9s TimeCoverageRelationStatistics Valid=9696, Invalid=42516, Unknown=0, NotChecked=0, Total=52212 [2022-12-14 16:04:42,887 INFO L413 NwaCegarLoop]: 44 mSDtfsCounter, 1780 mSDsluCounter, 910 mSDsCounter, 0 mSdLazyCounter, 4632 mSolverCounterSat, 100 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1780 SdHoareTripleChecker+Valid, 954 SdHoareTripleChecker+Invalid, 4732 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 100 IncrementalHoareTripleChecker+Valid, 4632 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.2s IncrementalHoareTripleChecker+Time [2022-12-14 16:04:42,888 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1780 Valid, 954 Invalid, 4732 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [100 Valid, 4632 Invalid, 0 Unknown, 0 Unchecked, 2.2s Time] [2022-12-14 16:04:42,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4197 states. [2022-12-14 16:04:42,901 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4197 to 1566. [2022-12-14 16:04:42,902 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1566 states, 1563 states have (on average 1.1349968010236724) internal successors, (1774), 1565 states have internal predecessors, (1774), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:04:42,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1566 states to 1566 states and 1774 transitions. [2022-12-14 16:04:42,903 INFO L78 Accepts]: Start accepts. Automaton has 1566 states and 1774 transitions. Word has length 57 [2022-12-14 16:04:42,903 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:04:42,903 INFO L495 AbstractCegarLoop]: Abstraction has 1566 states and 1774 transitions. [2022-12-14 16:04:42,903 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 85 states, 84 states have (on average 2.0357142857142856) internal successors, (171), 84 states have internal predecessors, (171), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:04:42,903 INFO L276 IsEmpty]: Start isEmpty. Operand 1566 states and 1774 transitions. [2022-12-14 16:04:42,904 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-12-14 16:04:42,904 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:04:42,904 INFO L195 NwaCegarLoop]: trace histogram [13, 13, 12, 12, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:04:42,910 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (56)] Forceful destruction successful, exit code 0 [2022-12-14 16:04:43,104 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable70,56 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:04:43,105 INFO L420 AbstractCegarLoop]: === Iteration 72 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:04:43,105 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:04:43,105 INFO L85 PathProgramCache]: Analyzing trace with hash 1882382372, now seen corresponding path program 15 times [2022-12-14 16:04:43,105 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:04:43,105 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [991741156] [2022-12-14 16:04:43,105 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:04:43,105 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:04:43,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:04:44,304 INFO L134 CoverageAnalysis]: Checked inductivity of 313 backedges. 100 proven. 213 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:04:44,304 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:04:44,304 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [991741156] [2022-12-14 16:04:44,304 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [991741156] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:04:44,304 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2093424923] [2022-12-14 16:04:44,304 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:04:44,304 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:04:44,305 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:04:44,305 INFO L229 MonitoredProcess]: Starting monitored process 57 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:04:44,306 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (57)] Waiting until timeout for monitored process [2022-12-14 16:04:44,506 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:04:44,506 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:04:44,509 INFO L263 TraceCheckSpWp]: Trace formula consists of 395 conjuncts, 94 conjunts are in the unsatisfiable core [2022-12-14 16:04:44,510 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:04:44,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:47,850 INFO L321 Elim1Store]: treesize reduction 13, result has 48.0 percent of original size [2022-12-14 16:04:47,851 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 38 treesize of output 26 [2022-12-14 16:04:47,896 INFO L134 CoverageAnalysis]: Checked inductivity of 313 backedges. 17 proven. 294 refuted. 2 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:04:47,896 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:04:49,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 46 treesize of output 40 [2022-12-14 16:04:49,121 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 16:04:49,121 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 46 treesize of output 34 [2022-12-14 16:04:49,440 INFO L134 CoverageAnalysis]: Checked inductivity of 313 backedges. 19 proven. 294 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:04:49,440 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2093424923] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:04:49,440 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1999966140] [2022-12-14 16:04:49,440 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 16:04:49,441 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:04:49,441 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:04:49,441 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:04:49,441 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:04:49,464 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:04:49,466 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:04:49,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:04:49,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:04:49,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:49,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:49,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:49,631 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:04:49,632 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:04:49,713 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:04:51,422 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '112054#(and (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_~s#1.base|) (+ |ULTIMATE.start_cstrcat_~s#1.offset| 1)) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (<= |ULTIMATE.start_cstrcat_~append#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:04:51,423 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:04:51,423 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:04:51,423 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [30, 33, 33] total 82 [2022-12-14 16:04:51,423 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [546950270] [2022-12-14 16:04:51,423 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:04:51,423 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 82 states [2022-12-14 16:04:51,423 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:04:51,424 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 82 interpolants. [2022-12-14 16:04:51,424 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=323, Invalid=7685, Unknown=2, NotChecked=0, Total=8010 [2022-12-14 16:04:51,425 INFO L87 Difference]: Start difference. First operand 1566 states and 1774 transitions. Second operand has 82 states, 82 states have (on average 1.7926829268292683) internal successors, (147), 82 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:08:11,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:08:11,809 INFO L93 Difference]: Finished difference Result 5825 states and 6212 transitions. [2022-12-14 16:08:11,809 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 137 states. [2022-12-14 16:08:11,809 INFO L78 Accepts]: Start accepts. Automaton has has 82 states, 82 states have (on average 1.7926829268292683) internal successors, (147), 82 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-12-14 16:08:11,809 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:08:11,812 INFO L225 Difference]: With dead ends: 5825 [2022-12-14 16:08:11,812 INFO L226 Difference]: Without dead ends: 5797 [2022-12-14 16:08:11,814 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 334 GetRequests, 110 SyntacticMatches, 2 SemanticMatches, 222 ConstructedPredicates, 0 IntricatePredicates, 11 DeprecatedPredicates, 14149 ImplicationChecksByTransitivity, 103.2s TimeCoverageRelationStatistics Valid=2878, Invalid=47070, Unknown=4, NotChecked=0, Total=49952 [2022-12-14 16:08:11,814 INFO L413 NwaCegarLoop]: 98 mSDtfsCounter, 1533 mSDsluCounter, 2681 mSDsCounter, 0 mSdLazyCounter, 9671 mSolverCounterSat, 48 mSolverCounterUnsat, 142 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 103.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1533 SdHoareTripleChecker+Valid, 2779 SdHoareTripleChecker+Invalid, 9861 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 9671 IncrementalHoareTripleChecker+Invalid, 142 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 103.9s IncrementalHoareTripleChecker+Time [2022-12-14 16:08:11,814 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1533 Valid, 2779 Invalid, 9861 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 9671 Invalid, 142 Unknown, 0 Unchecked, 103.9s Time] [2022-12-14 16:08:11,816 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5797 states. [2022-12-14 16:08:11,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5797 to 1810. [2022-12-14 16:08:11,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1810 states, 1807 states have (on average 1.1394576646375207) internal successors, (2059), 1809 states have internal predecessors, (2059), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:08:11,834 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1810 states to 1810 states and 2059 transitions. [2022-12-14 16:08:11,834 INFO L78 Accepts]: Start accepts. Automaton has 1810 states and 2059 transitions. Word has length 57 [2022-12-14 16:08:11,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:08:11,834 INFO L495 AbstractCegarLoop]: Abstraction has 1810 states and 2059 transitions. [2022-12-14 16:08:11,834 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 82 states, 82 states have (on average 1.7926829268292683) internal successors, (147), 82 states have internal predecessors, (147), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:08:11,834 INFO L276 IsEmpty]: Start isEmpty. Operand 1810 states and 2059 transitions. [2022-12-14 16:08:11,835 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-12-14 16:08:11,835 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:08:11,835 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:08:11,840 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (57)] Forceful destruction successful, exit code 0 [2022-12-14 16:08:12,036 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable71,57 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:08:12,036 INFO L420 AbstractCegarLoop]: === Iteration 73 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:08:12,037 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:08:12,037 INFO L85 PathProgramCache]: Analyzing trace with hash -2043711986, now seen corresponding path program 15 times [2022-12-14 16:08:12,037 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:08:12,037 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [175511495] [2022-12-14 16:08:12,038 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:08:12,038 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:08:12,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:08:12,632 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 36 proven. 156 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:08:12,632 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:08:12,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [175511495] [2022-12-14 16:08:12,632 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [175511495] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:08:12,632 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1062438745] [2022-12-14 16:08:12,632 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:08:12,633 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:08:12,633 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:08:12,633 INFO L229 MonitoredProcess]: Starting monitored process 58 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:08:12,634 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (58)] Waiting until timeout for monitored process [2022-12-14 16:08:13,401 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:08:13,401 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:08:13,405 INFO L263 TraceCheckSpWp]: Trace formula consists of 472 conjuncts, 89 conjunts are in the unsatisfiable core [2022-12-14 16:08:13,406 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:08:13,777 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 49 proven. 143 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:08:13,777 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:08:14,153 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-12-14 16:08:14,467 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 49 proven. 143 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:08:14,467 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1062438745] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:08:14,467 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1739980798] [2022-12-14 16:08:14,467 INFO L159 IcfgInterpreter]: Started Sifa with 14 locations of interest [2022-12-14 16:08:14,468 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:08:14,468 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:08:14,468 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:08:14,468 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:08:14,496 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:08:14,498 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:08:14,499 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:08:14,529 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:08:14,567 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:14,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:14,633 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:14,677 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:08:14,677 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:08:14,765 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:08:14,766 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 16:08:14,799 INFO L321 Elim1Store]: treesize reduction 79, result has 24.8 percent of original size [2022-12-14 16:08:14,799 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 45 [2022-12-14 16:08:14,881 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:08:14,966 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:08:15,020 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:08:17,555 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '120362#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (= |ULTIMATE.start_cstrcat_~s#1.offset| (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length3~0#1| 1) (= |ULTIMATE.start_cstrcat_~s#1.base| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (= |ULTIMATE.start_cstrcat_~append#1.base| |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (= (+ |ULTIMATE.start_cstrcat_#t~post5#1.offset| 1) |ULTIMATE.start_cstrcat_~append#1.offset|) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:08:17,555 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:08:17,556 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:08:17,556 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 21, 21] total 53 [2022-12-14 16:08:17,556 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1514519975] [2022-12-14 16:08:17,556 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:08:17,556 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-12-14 16:08:17,556 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:08:17,556 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-12-14 16:08:17,557 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=445, Invalid=3977, Unknown=0, NotChecked=0, Total=4422 [2022-12-14 16:08:17,557 INFO L87 Difference]: Start difference. First operand 1810 states and 2059 transitions. Second operand has 54 states, 53 states have (on average 2.641509433962264) internal successors, (140), 54 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:08:18,885 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:08:18,885 INFO L93 Difference]: Finished difference Result 2150 states and 2392 transitions. [2022-12-14 16:08:18,886 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-12-14 16:08:18,886 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 53 states have (on average 2.641509433962264) internal successors, (140), 54 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2022-12-14 16:08:18,886 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:08:18,887 INFO L225 Difference]: With dead ends: 2150 [2022-12-14 16:08:18,887 INFO L226 Difference]: Without dead ends: 2150 [2022-12-14 16:08:18,887 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 222 GetRequests, 129 SyntacticMatches, 0 SemanticMatches, 93 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2211 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=1470, Invalid=7460, Unknown=0, NotChecked=0, Total=8930 [2022-12-14 16:08:18,887 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 711 mSDsluCounter, 443 mSDsCounter, 0 mSdLazyCounter, 1882 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 711 SdHoareTripleChecker+Valid, 472 SdHoareTripleChecker+Invalid, 1889 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 1882 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-12-14 16:08:18,887 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [711 Valid, 472 Invalid, 1889 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 1882 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-12-14 16:08:18,888 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2150 states. [2022-12-14 16:08:18,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2150 to 1831. [2022-12-14 16:08:18,897 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1831 states, 1828 states have (on average 1.1378555798687089) internal successors, (2080), 1830 states have internal predecessors, (2080), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:08:18,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1831 states to 1831 states and 2080 transitions. [2022-12-14 16:08:18,898 INFO L78 Accepts]: Start accepts. Automaton has 1831 states and 2080 transitions. Word has length 58 [2022-12-14 16:08:18,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:08:18,898 INFO L495 AbstractCegarLoop]: Abstraction has 1831 states and 2080 transitions. [2022-12-14 16:08:18,898 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 53 states have (on average 2.641509433962264) internal successors, (140), 54 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:08:18,899 INFO L276 IsEmpty]: Start isEmpty. Operand 1831 states and 2080 transitions. [2022-12-14 16:08:18,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-12-14 16:08:18,900 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:08:18,900 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 7, 7, 7, 7, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:08:18,905 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (58)] Forceful destruction successful, exit code 0 [2022-12-14 16:08:19,100 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable72,58 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:08:19,101 INFO L420 AbstractCegarLoop]: === Iteration 74 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:08:19,102 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:08:19,102 INFO L85 PathProgramCache]: Analyzing trace with hash 1973170390, now seen corresponding path program 11 times [2022-12-14 16:08:19,102 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:08:19,102 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [872206528] [2022-12-14 16:08:19,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:08:19,103 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:08:19,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:08:20,025 INFO L134 CoverageAnalysis]: Checked inductivity of 164 backedges. 25 proven. 139 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:08:20,026 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:08:20,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [872206528] [2022-12-14 16:08:20,026 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [872206528] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:08:20,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [295466144] [2022-12-14 16:08:20,026 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:08:20,026 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:08:20,026 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:08:20,027 INFO L229 MonitoredProcess]: Starting monitored process 59 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:08:20,027 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (59)] Waiting until timeout for monitored process [2022-12-14 16:08:20,868 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2022-12-14 16:08:20,868 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:08:20,873 INFO L263 TraceCheckSpWp]: Trace formula consists of 482 conjuncts, 117 conjunts are in the unsatisfiable core [2022-12-14 16:08:20,875 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:08:20,928 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 16:08:20,928 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 16:08:21,928 INFO L134 CoverageAnalysis]: Checked inductivity of 164 backedges. 32 proven. 132 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:08:21,928 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:08:23,350 INFO L134 CoverageAnalysis]: Checked inductivity of 164 backedges. 53 proven. 111 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:08:23,350 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [295466144] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:08:23,351 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1028019206] [2022-12-14 16:08:23,351 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 16:08:23,352 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:08:23,352 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:08:23,352 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:08:23,352 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:08:23,378 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:08:23,381 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:08:23,381 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:08:23,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:23,444 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:23,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:23,499 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:08:23,535 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:23,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:23,574 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:23,603 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:08:23,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:08:23,749 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 16:08:23,750 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 16:08:23,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:08:23,875 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:08:24,026 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:08:27,313 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '124848#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:08:27,313 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:08:27,313 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:08:27,313 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 26, 24] total 74 [2022-12-14 16:08:27,313 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [33789630] [2022-12-14 16:08:27,313 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:08:27,314 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 76 states [2022-12-14 16:08:27,314 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:08:27,314 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 76 interpolants. [2022-12-14 16:08:27,314 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=562, Invalid=7448, Unknown=0, NotChecked=0, Total=8010 [2022-12-14 16:08:27,314 INFO L87 Difference]: Start difference. First operand 1831 states and 2080 transitions. Second operand has 76 states, 75 states have (on average 2.44) internal successors, (183), 75 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:08:41,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:08:41,805 INFO L93 Difference]: Finished difference Result 3469 states and 3759 transitions. [2022-12-14 16:08:41,805 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 135 states. [2022-12-14 16:08:41,805 INFO L78 Accepts]: Start accepts. Automaton has has 76 states, 75 states have (on average 2.44) internal successors, (183), 75 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 61 [2022-12-14 16:08:41,805 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:08:41,807 INFO L225 Difference]: With dead ends: 3469 [2022-12-14 16:08:41,807 INFO L226 Difference]: Without dead ends: 3389 [2022-12-14 16:08:41,810 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 337 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 220 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12833 ImplicationChecksByTransitivity, 18.3s TimeCoverageRelationStatistics Valid=9005, Invalid=40057, Unknown=0, NotChecked=0, Total=49062 [2022-12-14 16:08:41,810 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 2726 mSDsluCounter, 464 mSDsCounter, 0 mSdLazyCounter, 3359 mSolverCounterSat, 165 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2726 SdHoareTripleChecker+Valid, 488 SdHoareTripleChecker+Invalid, 3524 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 165 IncrementalHoareTripleChecker+Valid, 3359 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-12-14 16:08:41,810 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2726 Valid, 488 Invalid, 3524 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [165 Valid, 3359 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-12-14 16:08:41,811 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3389 states. [2022-12-14 16:08:41,829 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3389 to 1835. [2022-12-14 16:08:41,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1835 states, 1832 states have (on average 1.138646288209607) internal successors, (2086), 1834 states have internal predecessors, (2086), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:08:41,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1835 states to 1835 states and 2086 transitions. [2022-12-14 16:08:41,831 INFO L78 Accepts]: Start accepts. Automaton has 1835 states and 2086 transitions. Word has length 61 [2022-12-14 16:08:41,831 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:08:41,831 INFO L495 AbstractCegarLoop]: Abstraction has 1835 states and 2086 transitions. [2022-12-14 16:08:41,831 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 76 states, 75 states have (on average 2.44) internal successors, (183), 75 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:08:41,832 INFO L276 IsEmpty]: Start isEmpty. Operand 1835 states and 2086 transitions. [2022-12-14 16:08:41,833 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-12-14 16:08:41,833 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:08:41,833 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:08:41,839 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (59)] Ended with exit code 0 [2022-12-14 16:08:42,034 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable73,59 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:08:42,035 INFO L420 AbstractCegarLoop]: === Iteration 75 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 12 more)] === [2022-12-14 16:08:42,035 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:08:42,036 INFO L85 PathProgramCache]: Analyzing trace with hash 78714044, now seen corresponding path program 12 times [2022-12-14 16:08:42,036 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:08:42,036 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1055337580] [2022-12-14 16:08:42,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:08:42,037 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:08:42,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:08:43,173 INFO L134 CoverageAnalysis]: Checked inductivity of 166 backedges. 37 proven. 129 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:08:43,173 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:08:43,173 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1055337580] [2022-12-14 16:08:43,173 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1055337580] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:08:43,173 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [836590291] [2022-12-14 16:08:43,173 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:08:43,173 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:08:43,173 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:08:43,174 INFO L229 MonitoredProcess]: Starting monitored process 60 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:08:43,174 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d7a5f7e3-5d47-451f-b6a3-3859e574a4d2/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (60)] Waiting until timeout for monitored process [2022-12-14 16:08:43,631 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:08:43,631 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:08:43,635 INFO L263 TraceCheckSpWp]: Trace formula consists of 450 conjuncts, 99 conjunts are in the unsatisfiable core [2022-12-14 16:08:43,637 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:08:43,687 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 16:08:43,687 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 16:08:45,697 INFO L134 CoverageAnalysis]: Checked inductivity of 166 backedges. 53 proven. 113 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:08:45,697 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:08:47,741 INFO L134 CoverageAnalysis]: Checked inductivity of 166 backedges. 73 proven. 93 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:08:47,742 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [836590291] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:08:47,742 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2031306308] [2022-12-14 16:08:47,742 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 16:08:47,742 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:08:47,742 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:08:47,743 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:08:47,743 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:08:47,767 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:08:47,771 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 16:08:47,771 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 16:08:47,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:47,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:47,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:47,912 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:08:47,940 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:47,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:47,985 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:48,020 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 16:08:48,020 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 16:08:48,160 INFO L321 Elim1Store]: treesize reduction 24, result has 45.5 percent of original size [2022-12-14 16:08:48,160 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 26 treesize of output 33 [2022-12-14 16:08:48,214 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:08:48,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:08:48,444 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:08:52,437 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '130876#(and (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.base|) (< (select |#length| |ULTIMATE.start_cstrcat_#t~post4#1.base|) (+ |ULTIMATE.start_cstrcat_#t~post4#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_cstrcat_#t~post4#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc10#1.base|) (<= |ULTIMATE.start_cstrcat_#in~append#1.offset| 0) (<= |ULTIMATE.start_cstrcat_~save~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~s#1.base|) (<= 0 |ULTIMATE.start_cstrcat_~append#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_cstrcat_#in~s#1.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.base|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_~save~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_cstrcat_~s#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~append#1.offset|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 1 |ULTIMATE.start_cstrcat_~append#1.offset|) (<= |ULTIMATE.start_main_~length3~0#1| 2147483646) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_cstrcat_#t~post5#1.offset|) (<= 0 |ULTIMATE.start_cstrcat_#in~s#1.base|) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 2 |ULTIMATE.start_main_~length2~0#1|) (<= 1 |ULTIMATE.start_main_~length3~0#1|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc10#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 16:08:52,437 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:08:52,437 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:08:52,437 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 28, 28] total 84 [2022-12-14 16:08:52,437 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [394185080] [2022-12-14 16:08:52,437 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:08:52,437 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 86 states [2022-12-14 16:08:52,437 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:08:52,438 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 86 interpolants. [2022-12-14 16:08:52,438 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=816, Invalid=9084, Unknown=0, NotChecked=0, Total=9900 [2022-12-14 16:08:52,438 INFO L87 Difference]: Start difference. First operand 1835 states and 2086 transitions. Second operand has 86 states, 85 states have (on average 2.152941176470588) internal successors, (183), 85 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)