./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 34885b99d6eef31987b044fabc3622fa239d5dff7e774ca124915f70431dc2b3 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 09:58:39,449 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 09:58:39,450 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 09:58:39,467 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 09:58:39,467 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 09:58:39,468 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 09:58:39,469 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 09:58:39,471 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 09:58:39,472 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 09:58:39,473 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 09:58:39,474 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 09:58:39,475 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 09:58:39,475 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 09:58:39,476 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 09:58:39,477 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 09:58:39,478 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 09:58:39,479 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 09:58:39,480 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 09:58:39,481 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 09:58:39,483 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 09:58:39,484 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 09:58:39,486 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 09:58:39,487 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 09:58:39,487 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 09:58:39,491 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 09:58:39,491 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 09:58:39,491 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 09:58:39,492 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 09:58:39,493 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 09:58:39,493 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 09:58:39,494 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 09:58:39,494 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 09:58:39,495 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 09:58:39,496 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 09:58:39,497 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 09:58:39,497 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 09:58:39,497 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 09:58:39,498 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 09:58:39,498 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 09:58:39,499 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 09:58:39,499 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 09:58:39,500 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-12-14 09:58:39,536 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 09:58:39,536 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 09:58:39,536 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 09:58:39,536 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 09:58:39,537 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 09:58:39,537 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 09:58:39,537 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 09:58:39,538 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 09:58:39,538 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 09:58:39,538 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 09:58:39,538 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 09:58:39,538 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 09:58:39,538 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 09:58:39,538 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 09:58:39,539 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 09:58:39,539 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 09:58:39,539 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 09:58:39,539 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 09:58:39,540 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-14 09:58:39,540 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-14 09:58:39,540 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 09:58:39,540 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 09:58:39,540 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-14 09:58:39,541 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 09:58:39,541 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 09:58:39,541 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 09:58:39,541 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-12-14 09:58:39,541 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-12-14 09:58:39,541 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-12-14 09:58:39,541 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 09:58:39,542 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-12-14 09:58:39,542 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 09:58:39,542 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 09:58:39,542 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 09:58:39,542 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 09:58:39,542 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 09:58:39,543 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 09:58:39,543 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 09:58:39,543 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 09:58:39,543 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 09:58:39,543 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 09:58:39,543 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 09:58:39,543 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 34885b99d6eef31987b044fabc3622fa239d5dff7e774ca124915f70431dc2b3 [2022-12-14 09:58:39,747 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 09:58:39,763 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 09:58:39,765 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 09:58:39,765 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 09:58:39,766 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 09:58:39,767 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i [2022-12-14 09:58:42,423 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 09:58:42,630 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 09:58:42,630 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/sv-benchmarks/c/array-memsafety/openbsd_cstrncat-alloca-2.i [2022-12-14 09:58:42,642 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/data/c7b0a0205/a4331058103641bdb36770e31643ac23/FLAG64cce8257 [2022-12-14 09:58:42,655 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/data/c7b0a0205/a4331058103641bdb36770e31643ac23 [2022-12-14 09:58:42,657 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 09:58:42,658 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 09:58:42,659 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 09:58:42,660 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 09:58:42,663 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 09:58:42,664 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 09:58:42" (1/1) ... [2022-12-14 09:58:42,664 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@36fc635a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42, skipping insertion in model container [2022-12-14 09:58:42,665 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 09:58:42" (1/1) ... [2022-12-14 09:58:42,672 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 09:58:42,703 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 09:58:42,932 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 09:58:42,942 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 09:58:42,976 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 09:58:42,998 INFO L208 MainTranslator]: Completed translation [2022-12-14 09:58:42,998 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42 WrapperNode [2022-12-14 09:58:42,998 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 09:58:42,999 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 09:58:42,999 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 09:58:42,999 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 09:58:43,006 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42" (1/1) ... [2022-12-14 09:58:43,016 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42" (1/1) ... [2022-12-14 09:58:43,035 INFO L138 Inliner]: procedures = 117, calls = 17, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 103 [2022-12-14 09:58:43,035 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 09:58:43,036 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 09:58:43,036 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 09:58:43,036 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 09:58:43,044 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42" (1/1) ... [2022-12-14 09:58:43,045 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42" (1/1) ... [2022-12-14 09:58:43,047 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42" (1/1) ... [2022-12-14 09:58:43,047 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42" (1/1) ... [2022-12-14 09:58:43,052 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42" (1/1) ... [2022-12-14 09:58:43,056 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42" (1/1) ... [2022-12-14 09:58:43,057 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42" (1/1) ... [2022-12-14 09:58:43,058 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42" (1/1) ... [2022-12-14 09:58:43,060 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 09:58:43,061 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 09:58:43,061 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 09:58:43,062 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 09:58:43,063 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42" (1/1) ... [2022-12-14 09:58:43,068 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 09:58:43,078 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:58:43,087 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 09:58:43,089 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 09:58:43,116 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-12-14 09:58:43,116 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-12-14 09:58:43,116 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-12-14 09:58:43,116 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-12-14 09:58:43,116 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 09:58:43,116 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 09:58:43,199 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 09:58:43,201 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 09:58:43,369 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 09:58:43,432 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 09:58:43,433 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-12-14 09:58:43,435 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 09:58:43 BoogieIcfgContainer [2022-12-14 09:58:43,435 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 09:58:43,438 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 09:58:43,438 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 09:58:43,442 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 09:58:43,442 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 09:58:42" (1/3) ... [2022-12-14 09:58:43,442 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7de5279e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 09:58:43, skipping insertion in model container [2022-12-14 09:58:43,443 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 09:58:42" (2/3) ... [2022-12-14 09:58:43,443 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7de5279e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 09:58:43, skipping insertion in model container [2022-12-14 09:58:43,443 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 09:58:43" (3/3) ... [2022-12-14 09:58:43,444 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cstrncat-alloca-2.i [2022-12-14 09:58:43,464 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 09:58:43,464 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 17 error locations. [2022-12-14 09:58:43,498 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 09:58:43,503 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@65623f9c, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 09:58:43,503 INFO L358 AbstractCegarLoop]: Starting to check reachability of 17 error locations. [2022-12-14 09:58:43,506 INFO L276 IsEmpty]: Start isEmpty. Operand has 37 states, 19 states have (on average 2.3684210526315788) internal successors, (45), 36 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:43,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-12-14 09:58:43,511 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:43,511 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-12-14 09:58:43,511 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:43,515 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:43,515 INFO L85 PathProgramCache]: Analyzing trace with hash 163242, now seen corresponding path program 1 times [2022-12-14 09:58:43,522 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:43,522 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [59204286] [2022-12-14 09:58:43,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:43,523 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:43,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:43,641 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:43,641 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:43,641 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [59204286] [2022-12-14 09:58:43,642 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [59204286] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:58:43,642 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 09:58:43,642 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-12-14 09:58:43,644 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1854200845] [2022-12-14 09:58:43,644 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:58:43,649 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 09:58:43,649 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:43,676 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 09:58:43,677 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 09:58:43,679 INFO L87 Difference]: Start difference. First operand has 37 states, 19 states have (on average 2.3684210526315788) internal successors, (45), 36 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:43,740 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:43,740 INFO L93 Difference]: Finished difference Result 38 states and 44 transitions. [2022-12-14 09:58:43,742 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 09:58:43,743 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-12-14 09:58:43,743 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:43,749 INFO L225 Difference]: With dead ends: 38 [2022-12-14 09:58:43,749 INFO L226 Difference]: Without dead ends: 36 [2022-12-14 09:58:43,750 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 09:58:43,753 INFO L413 NwaCegarLoop]: 33 mSDtfsCounter, 1 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:43,754 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 51 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 09:58:43,767 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-12-14 09:58:43,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-12-14 09:58:43,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:43,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-12-14 09:58:43,779 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 3 [2022-12-14 09:58:43,779 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:43,779 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-12-14 09:58:43,779 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:43,780 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-12-14 09:58:43,780 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 09:58:43,780 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:43,780 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 09:58:43,780 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 09:58:43,781 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:43,781 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:43,782 INFO L85 PathProgramCache]: Analyzing trace with hash 5059762, now seen corresponding path program 1 times [2022-12-14 09:58:43,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:43,782 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1682706348] [2022-12-14 09:58:43,782 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:43,782 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:43,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:43,956 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:43,956 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:43,956 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1682706348] [2022-12-14 09:58:43,956 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1682706348] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:58:43,956 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 09:58:43,956 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 09:58:43,957 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1233401076] [2022-12-14 09:58:43,957 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:58:43,958 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 09:58:43,958 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:43,958 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 09:58:43,959 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 09:58:43,959 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:43,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:43,990 INFO L93 Difference]: Finished difference Result 34 states and 39 transitions. [2022-12-14 09:58:43,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 09:58:43,990 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 09:58:43,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:43,991 INFO L225 Difference]: With dead ends: 34 [2022-12-14 09:58:43,991 INFO L226 Difference]: Without dead ends: 34 [2022-12-14 09:58:43,991 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 09:58:43,992 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 34 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 24 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 24 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:43,993 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 18 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 24 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 09:58:43,993 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2022-12-14 09:58:43,995 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 34. [2022-12-14 09:58:43,995 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 19 states have (on average 2.0526315789473686) internal successors, (39), 33 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:43,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 39 transitions. [2022-12-14 09:58:43,996 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 39 transitions. Word has length 4 [2022-12-14 09:58:43,996 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:43,996 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 39 transitions. [2022-12-14 09:58:43,996 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:43,996 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 39 transitions. [2022-12-14 09:58:43,996 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 09:58:43,996 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:43,996 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 09:58:43,997 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 09:58:43,997 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:43,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:43,997 INFO L85 PathProgramCache]: Analyzing trace with hash 5059763, now seen corresponding path program 1 times [2022-12-14 09:58:43,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:43,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1227486416] [2022-12-14 09:58:43,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:43,998 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:44,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:44,176 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:44,176 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:44,176 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1227486416] [2022-12-14 09:58:44,176 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1227486416] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:58:44,177 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 09:58:44,177 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 09:58:44,177 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [581687820] [2022-12-14 09:58:44,177 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:58:44,177 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 09:58:44,177 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:44,178 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 09:58:44,178 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-12-14 09:58:44,178 INFO L87 Difference]: Start difference. First operand 34 states and 39 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:44,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:44,273 INFO L93 Difference]: Finished difference Result 65 states and 75 transitions. [2022-12-14 09:58:44,274 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 09:58:44,274 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 09:58:44,274 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:44,275 INFO L225 Difference]: With dead ends: 65 [2022-12-14 09:58:44,275 INFO L226 Difference]: Without dead ends: 65 [2022-12-14 09:58:44,275 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-12-14 09:58:44,276 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 108 mSDsluCounter, 32 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 108 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 67 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:44,277 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [108 Valid, 49 Invalid, 67 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 09:58:44,277 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-12-14 09:58:44,279 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 36. [2022-12-14 09:58:44,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 21 states have (on average 2.0) internal successors, (42), 35 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:44,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 42 transitions. [2022-12-14 09:58:44,280 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 42 transitions. Word has length 4 [2022-12-14 09:58:44,280 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:44,280 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 42 transitions. [2022-12-14 09:58:44,280 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:44,281 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 42 transitions. [2022-12-14 09:58:44,281 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 09:58:44,281 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:44,281 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 09:58:44,281 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 09:58:44,281 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:44,281 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:44,282 INFO L85 PathProgramCache]: Analyzing trace with hash 156955998, now seen corresponding path program 1 times [2022-12-14 09:58:44,282 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:44,282 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1661872135] [2022-12-14 09:58:44,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:44,282 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:44,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:44,346 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:44,346 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:44,347 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1661872135] [2022-12-14 09:58:44,347 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1661872135] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:58:44,347 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 09:58:44,347 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 09:58:44,347 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [177698261] [2022-12-14 09:58:44,347 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:58:44,348 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 09:58:44,348 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:44,348 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 09:58:44,348 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 09:58:44,349 INFO L87 Difference]: Start difference. First operand 36 states and 42 transitions. Second operand has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:44,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:44,407 INFO L93 Difference]: Finished difference Result 62 states and 71 transitions. [2022-12-14 09:58:44,408 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 09:58:44,408 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 09:58:44,408 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:44,408 INFO L225 Difference]: With dead ends: 62 [2022-12-14 09:58:44,408 INFO L226 Difference]: Without dead ends: 62 [2022-12-14 09:58:44,409 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-14 09:58:44,409 INFO L413 NwaCegarLoop]: 26 mSDtfsCounter, 130 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:44,410 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 74 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 09:58:44,410 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-12-14 09:58:44,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 37. [2022-12-14 09:58:44,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 22 states have (on average 1.9545454545454546) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:44,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-12-14 09:58:44,412 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 5 [2022-12-14 09:58:44,413 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:44,413 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-12-14 09:58:44,413 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:44,413 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-12-14 09:58:44,413 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 09:58:44,413 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:44,413 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 09:58:44,413 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-14 09:58:44,413 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:44,414 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:44,414 INFO L85 PathProgramCache]: Analyzing trace with hash 156958550, now seen corresponding path program 1 times [2022-12-14 09:58:44,414 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:44,414 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1451590368] [2022-12-14 09:58:44,414 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:44,414 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:44,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:44,528 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:44,528 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:44,528 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1451590368] [2022-12-14 09:58:44,528 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1451590368] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:58:44,528 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 09:58:44,528 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 09:58:44,528 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [532041282] [2022-12-14 09:58:44,529 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:58:44,529 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 09:58:44,529 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:44,529 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 09:58:44,530 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-12-14 09:58:44,530 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:44,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:44,570 INFO L93 Difference]: Finished difference Result 37 states and 42 transitions. [2022-12-14 09:58:44,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 09:58:44,571 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 09:58:44,571 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:44,571 INFO L225 Difference]: With dead ends: 37 [2022-12-14 09:58:44,571 INFO L226 Difference]: Without dead ends: 36 [2022-12-14 09:58:44,572 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-12-14 09:58:44,572 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 40 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 43 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 40 SdHoareTripleChecker+Valid, 73 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 43 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:44,573 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [40 Valid, 73 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 43 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 09:58:44,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-12-14 09:58:44,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-12-14 09:58:44,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 21 states have (on average 1.9523809523809523) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:44,576 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-12-14 09:58:44,576 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 5 [2022-12-14 09:58:44,576 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:44,576 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-12-14 09:58:44,577 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.0) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:44,577 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-12-14 09:58:44,577 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 09:58:44,577 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:44,577 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-12-14 09:58:44,577 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 09:58:44,578 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:44,578 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:44,578 INFO L85 PathProgramCache]: Analyzing trace with hash 567551535, now seen corresponding path program 1 times [2022-12-14 09:58:44,578 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:44,578 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [19625401] [2022-12-14 09:58:44,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:44,579 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:44,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:44,770 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:44,771 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:44,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [19625401] [2022-12-14 09:58:44,771 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [19625401] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:58:44,771 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1056586100] [2022-12-14 09:58:44,771 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:44,771 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:44,772 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:58:44,772 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:58:44,773 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 09:58:44,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:44,827 INFO L263 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 20 conjunts are in the unsatisfiable core [2022-12-14 09:58:44,833 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:58:44,933 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:58:44,939 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 09:58:44,949 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 09:58:45,053 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:45,053 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 09:58:45,174 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:58:45,181 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:45,181 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1056586100] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 09:58:45,182 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [553632039] [2022-12-14 09:58:45,200 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-12-14 09:58:45,200 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 09:58:45,204 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 09:58:45,210 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 09:58:45,210 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 09:58:45,270 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:58:45,273 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:58:45,274 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 09:58:45,332 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 09:58:45,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:45,430 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:45,453 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 09:58:45,750 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '525#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_#t~nondet14#1| 127) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet14#1|)) (= |#NULL.base| 0))' at error location [2022-12-14 09:58:45,750 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 09:58:45,750 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 09:58:45,751 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 11 [2022-12-14 09:58:45,751 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1586469897] [2022-12-14 09:58:45,751 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 09:58:45,751 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-12-14 09:58:45,751 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:45,752 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-12-14 09:58:45,752 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2022-12-14 09:58:45,753 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:45,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:45,989 INFO L93 Difference]: Finished difference Result 65 states and 75 transitions. [2022-12-14 09:58:45,990 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-14 09:58:45,990 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 09:58:45,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:45,990 INFO L225 Difference]: With dead ends: 65 [2022-12-14 09:58:45,991 INFO L226 Difference]: Without dead ends: 65 [2022-12-14 09:58:45,991 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 4 SyntacticMatches, 1 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=106, Invalid=314, Unknown=0, NotChecked=0, Total=420 [2022-12-14 09:58:45,992 INFO L413 NwaCegarLoop]: 32 mSDtfsCounter, 138 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 138 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 156 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:45,992 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [138 Valid, 112 Invalid, 156 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 09:58:45,993 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-12-14 09:58:45,995 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 34. [2022-12-14 09:58:45,995 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 20 states have (on average 1.95) internal successors, (39), 33 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:45,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 39 transitions. [2022-12-14 09:58:45,996 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 39 transitions. Word has length 6 [2022-12-14 09:58:45,996 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:45,996 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 39 transitions. [2022-12-14 09:58:45,996 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 12 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:45,996 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 39 transitions. [2022-12-14 09:58:45,997 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 09:58:45,997 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:45,997 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:58:46,004 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 09:58:46,197 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:46,198 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:46,198 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:46,198 INFO L85 PathProgramCache]: Analyzing trace with hash 414331746, now seen corresponding path program 1 times [2022-12-14 09:58:46,198 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:46,198 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1071355918] [2022-12-14 09:58:46,199 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:46,199 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:46,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:46,233 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 09:58:46,233 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:46,233 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1071355918] [2022-12-14 09:58:46,233 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1071355918] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:58:46,233 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 09:58:46,233 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 09:58:46,233 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [289819834] [2022-12-14 09:58:46,234 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:58:46,234 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 09:58:46,234 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:46,234 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 09:58:46,234 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 09:58:46,235 INFO L87 Difference]: Start difference. First operand 34 states and 39 transitions. Second operand has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:46,256 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:46,256 INFO L93 Difference]: Finished difference Result 32 states and 37 transitions. [2022-12-14 09:58:46,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 09:58:46,257 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 09:58:46,257 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:46,257 INFO L225 Difference]: With dead ends: 32 [2022-12-14 09:58:46,257 INFO L226 Difference]: Without dead ends: 32 [2022-12-14 09:58:46,258 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 09:58:46,258 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 28 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:46,259 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 17 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 09:58:46,259 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2022-12-14 09:58:46,261 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 32. [2022-12-14 09:58:46,261 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 20 states have (on average 1.85) internal successors, (37), 31 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:46,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 37 transitions. [2022-12-14 09:58:46,262 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 37 transitions. Word has length 7 [2022-12-14 09:58:46,262 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:46,262 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 37 transitions. [2022-12-14 09:58:46,262 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 3.5) internal successors, (7), 3 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:46,262 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 37 transitions. [2022-12-14 09:58:46,262 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 09:58:46,263 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:46,263 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:58:46,263 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-12-14 09:58:46,263 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:46,263 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:46,264 INFO L85 PathProgramCache]: Analyzing trace with hash 414331747, now seen corresponding path program 1 times [2022-12-14 09:58:46,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:46,264 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1480482545] [2022-12-14 09:58:46,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:46,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:46,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:46,354 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:46,354 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:46,355 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1480482545] [2022-12-14 09:58:46,355 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1480482545] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:58:46,355 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1218789357] [2022-12-14 09:58:46,355 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:46,355 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:46,355 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:58:46,356 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:58:46,357 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 09:58:46,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:46,400 INFO L263 TraceCheckSpWp]: Trace formula consists of 75 conjuncts, 7 conjunts are in the unsatisfiable core [2022-12-14 09:58:46,402 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:58:46,442 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:46,442 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 09:58:46,485 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:46,485 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1218789357] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 09:58:46,485 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1673993305] [2022-12-14 09:58:46,487 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-12-14 09:58:46,487 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 09:58:46,487 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 09:58:46,488 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 09:58:46,488 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 09:58:46,538 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:58:46,543 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:58:46,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 09:58:46,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:46,620 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:46,644 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:46,696 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 09:58:47,215 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '751#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (not (< (+ |ULTIMATE.start_main_~i~0#1| 1) |ULTIMATE.start_main_~length1~0#1|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (< (+ |ULTIMATE.start_main_~i~1#1| 1) |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-12-14 09:58:47,215 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 09:58:47,215 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 09:58:47,215 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 11 [2022-12-14 09:58:47,215 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [631566083] [2022-12-14 09:58:47,215 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 09:58:47,216 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2022-12-14 09:58:47,216 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:47,216 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2022-12-14 09:58:47,216 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=66, Invalid=240, Unknown=0, NotChecked=0, Total=306 [2022-12-14 09:58:47,217 INFO L87 Difference]: Start difference. First operand 32 states and 37 transitions. Second operand has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:47,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:47,323 INFO L93 Difference]: Finished difference Result 60 states and 69 transitions. [2022-12-14 09:58:47,323 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 09:58:47,324 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 09:58:47,324 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:47,324 INFO L225 Difference]: With dead ends: 60 [2022-12-14 09:58:47,324 INFO L226 Difference]: Without dead ends: 60 [2022-12-14 09:58:47,325 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 7 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 109 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=105, Invalid=401, Unknown=0, NotChecked=0, Total=506 [2022-12-14 09:58:47,325 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 209 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 209 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:47,326 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [209 Valid, 132 Invalid, 82 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 09:58:47,326 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2022-12-14 09:58:47,328 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 35. [2022-12-14 09:58:47,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 23 states have (on average 1.7826086956521738) internal successors, (41), 34 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:47,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 41 transitions. [2022-12-14 09:58:47,328 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 41 transitions. Word has length 7 [2022-12-14 09:58:47,328 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:47,328 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 41 transitions. [2022-12-14 09:58:47,329 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 11 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:47,329 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 41 transitions. [2022-12-14 09:58:47,329 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 09:58:47,329 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:47,329 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:58:47,335 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 09:58:47,530 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:47,530 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:47,531 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:47,531 INFO L85 PathProgramCache]: Analyzing trace with hash 414334298, now seen corresponding path program 1 times [2022-12-14 09:58:47,531 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:47,531 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1981300452] [2022-12-14 09:58:47,531 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:47,531 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:47,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:47,626 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:47,626 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:47,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1981300452] [2022-12-14 09:58:47,627 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1981300452] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:58:47,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1675421277] [2022-12-14 09:58:47,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:47,627 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:47,627 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:58:47,628 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:58:47,629 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 09:58:47,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:47,675 INFO L263 TraceCheckSpWp]: Trace formula consists of 73 conjuncts, 9 conjunts are in the unsatisfiable core [2022-12-14 09:58:47,676 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:58:47,746 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:47,746 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 09:58:47,746 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1675421277] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:58:47,746 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 09:58:47,746 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 7 [2022-12-14 09:58:47,747 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [252320624] [2022-12-14 09:58:47,747 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:58:47,747 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 09:58:47,747 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:47,747 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 09:58:47,747 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2022-12-14 09:58:47,748 INFO L87 Difference]: Start difference. First operand 35 states and 41 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:47,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:47,799 INFO L93 Difference]: Finished difference Result 34 states and 40 transitions. [2022-12-14 09:58:47,799 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 09:58:47,800 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 09:58:47,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:47,800 INFO L225 Difference]: With dead ends: 34 [2022-12-14 09:58:47,800 INFO L226 Difference]: Without dead ends: 34 [2022-12-14 09:58:47,800 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 1 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=30, Invalid=80, Unknown=0, NotChecked=0, Total=110 [2022-12-14 09:58:47,801 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 95 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:47,801 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [95 Valid, 13 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 09:58:47,802 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2022-12-14 09:58:47,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 34. [2022-12-14 09:58:47,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 23 states have (on average 1.7391304347826086) internal successors, (40), 33 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:47,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 40 transitions. [2022-12-14 09:58:47,804 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 40 transitions. Word has length 7 [2022-12-14 09:58:47,804 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:47,804 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 40 transitions. [2022-12-14 09:58:47,804 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:47,804 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 40 transitions. [2022-12-14 09:58:47,804 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-12-14 09:58:47,804 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:47,805 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:58:47,810 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 09:58:48,005 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:48,006 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:48,006 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:48,006 INFO L85 PathProgramCache]: Analyzing trace with hash -40538646, now seen corresponding path program 1 times [2022-12-14 09:58:48,006 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:48,007 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1590941891] [2022-12-14 09:58:48,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:48,007 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:48,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:48,287 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:48,287 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:48,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1590941891] [2022-12-14 09:58:48,287 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1590941891] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:58:48,288 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1528658104] [2022-12-14 09:58:48,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:48,288 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:48,288 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:58:48,289 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:58:48,289 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-12-14 09:58:48,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:48,334 INFO L263 TraceCheckSpWp]: Trace formula consists of 81 conjuncts, 12 conjunts are in the unsatisfiable core [2022-12-14 09:58:48,335 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:58:48,359 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 09:58:48,359 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 09:58:48,418 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 09:58:48,418 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 09:58:48,418 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1528658104] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:58:48,418 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 09:58:48,418 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 8 [2022-12-14 09:58:48,418 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1530256888] [2022-12-14 09:58:48,419 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:58:48,419 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 09:58:48,419 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:48,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 09:58:48,419 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-12-14 09:58:48,420 INFO L87 Difference]: Start difference. First operand 34 states and 40 transitions. Second operand has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:48,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:48,481 INFO L93 Difference]: Finished difference Result 59 states and 69 transitions. [2022-12-14 09:58:48,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 09:58:48,482 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-12-14 09:58:48,482 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:48,482 INFO L225 Difference]: With dead ends: 59 [2022-12-14 09:58:48,483 INFO L226 Difference]: Without dead ends: 59 [2022-12-14 09:58:48,483 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=42, Invalid=68, Unknown=0, NotChecked=0, Total=110 [2022-12-14 09:58:48,483 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 109 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 61 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 109 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 61 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:48,484 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [109 Valid, 42 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 61 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 09:58:48,484 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2022-12-14 09:58:48,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 37. [2022-12-14 09:58:48,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 26 states have (on average 1.6923076923076923) internal successors, (44), 36 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:48,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 44 transitions. [2022-12-14 09:58:48,486 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 44 transitions. Word has length 8 [2022-12-14 09:58:48,487 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:48,487 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 44 transitions. [2022-12-14 09:58:48,487 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.6) internal successors, (8), 5 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:48,487 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 44 transitions. [2022-12-14 09:58:48,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2022-12-14 09:58:48,487 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:48,487 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1] [2022-12-14 09:58:48,491 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-12-14 09:58:48,688 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-14 09:58:48,689 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:48,690 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:48,690 INFO L85 PathProgramCache]: Analyzing trace with hash -1355677593, now seen corresponding path program 2 times [2022-12-14 09:58:48,691 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:48,691 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1959646482] [2022-12-14 09:58:48,692 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:48,692 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:48,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:49,020 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:49,020 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:49,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1959646482] [2022-12-14 09:58:49,020 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1959646482] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:58:49,020 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1447562285] [2022-12-14 09:58:49,020 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 09:58:49,021 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:49,021 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:58:49,022 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:58:49,022 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-12-14 09:58:49,068 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2022-12-14 09:58:49,069 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 09:58:49,069 INFO L263 TraceCheckSpWp]: Trace formula consists of 62 conjuncts, 14 conjunts are in the unsatisfiable core [2022-12-14 09:58:49,071 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:58:49,104 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 09:58:49,105 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 09:58:49,187 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 09:58:49,187 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 09:58:49,187 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1447562285] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:58:49,187 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 09:58:49,187 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 9 [2022-12-14 09:58:49,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2101812261] [2022-12-14 09:58:49,188 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:58:49,188 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 09:58:49,188 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:49,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 09:58:49,189 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2022-12-14 09:58:49,189 INFO L87 Difference]: Start difference. First operand 37 states and 44 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:49,263 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:49,263 INFO L93 Difference]: Finished difference Result 57 states and 67 transitions. [2022-12-14 09:58:49,263 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 09:58:49,263 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2022-12-14 09:58:49,263 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:49,263 INFO L225 Difference]: With dead ends: 57 [2022-12-14 09:58:49,263 INFO L226 Difference]: Without dead ends: 57 [2022-12-14 09:58:49,264 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=94, Unknown=0, NotChecked=0, Total=132 [2022-12-14 09:58:49,264 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 84 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:49,264 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 42 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 09:58:49,265 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-12-14 09:58:49,266 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 35. [2022-12-14 09:58:49,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 25 states have (on average 1.68) internal successors, (42), 34 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:49,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 42 transitions. [2022-12-14 09:58:49,266 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 42 transitions. Word has length 9 [2022-12-14 09:58:49,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:49,266 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 42 transitions. [2022-12-14 09:58:49,266 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:49,266 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 42 transitions. [2022-12-14 09:58:49,266 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-12-14 09:58:49,267 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:49,267 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:58:49,272 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-12-14 09:58:49,467 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:49,469 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:49,470 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:49,470 INFO L85 PathProgramCache]: Analyzing trace with hash -302873236, now seen corresponding path program 1 times [2022-12-14 09:58:49,470 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:49,470 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2053689936] [2022-12-14 09:58:49,471 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:49,471 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:49,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:49,603 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:49,603 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:49,603 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2053689936] [2022-12-14 09:58:49,604 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2053689936] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:58:49,604 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 09:58:49,604 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 09:58:49,604 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [876289899] [2022-12-14 09:58:49,604 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:58:49,604 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 09:58:49,604 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:49,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 09:58:49,605 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 09:58:49,605 INFO L87 Difference]: Start difference. First operand 35 states and 42 transitions. Second operand has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:49,644 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:49,644 INFO L93 Difference]: Finished difference Result 33 states and 40 transitions. [2022-12-14 09:58:49,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 09:58:49,644 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-12-14 09:58:49,644 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:49,644 INFO L225 Difference]: With dead ends: 33 [2022-12-14 09:58:49,645 INFO L226 Difference]: Without dead ends: 33 [2022-12-14 09:58:49,645 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-14 09:58:49,645 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 55 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 45 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 45 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:49,646 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 19 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 45 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 09:58:49,646 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-12-14 09:58:49,648 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 32. [2022-12-14 09:58:49,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 25 states have (on average 1.56) internal successors, (39), 31 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:49,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 39 transitions. [2022-12-14 09:58:49,648 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 39 transitions. Word has length 10 [2022-12-14 09:58:49,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:49,648 INFO L495 AbstractCegarLoop]: Abstraction has 32 states and 39 transitions. [2022-12-14 09:58:49,649 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:49,649 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 39 transitions. [2022-12-14 09:58:49,649 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-12-14 09:58:49,649 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:49,649 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:58:49,649 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-12-14 09:58:49,649 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:49,650 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:49,650 INFO L85 PathProgramCache]: Analyzing trace with hash -302873235, now seen corresponding path program 1 times [2022-12-14 09:58:49,650 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:49,650 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [277342960] [2022-12-14 09:58:49,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:49,650 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:49,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:49,743 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:49,743 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:49,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [277342960] [2022-12-14 09:58:49,743 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [277342960] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:58:49,743 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1057949641] [2022-12-14 09:58:49,743 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:49,743 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:49,744 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:58:49,744 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:58:49,745 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-12-14 09:58:49,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:49,802 INFO L263 TraceCheckSpWp]: Trace formula consists of 118 conjuncts, 27 conjunts are in the unsatisfiable core [2022-12-14 09:58:49,804 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:58:49,940 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:49,941 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 09:58:49,975 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-12-14 09:58:50,095 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:50,095 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1057949641] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 09:58:50,096 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [744961132] [2022-12-14 09:58:50,097 INFO L159 IcfgInterpreter]: Started Sifa with 10 locations of interest [2022-12-14 09:58:50,097 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 09:58:50,097 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 09:58:50,097 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 09:58:50,097 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 09:58:50,130 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:58:50,132 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:58:50,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 09:58:50,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 09:58:50,213 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:50,234 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:50,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 09:58:50,326 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 09:58:50,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 09:58:50,366 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 09:58:51,416 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [744961132] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:58:51,416 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 09:58:51,416 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [5, 8, 8] total 25 [2022-12-14 09:58:51,416 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [423756876] [2022-12-14 09:58:51,416 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:58:51,417 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-12-14 09:58:51,417 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:51,417 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-12-14 09:58:51,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2022-12-14 09:58:51,417 INFO L87 Difference]: Start difference. First operand 32 states and 39 transitions. Second operand has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:51,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:51,555 INFO L93 Difference]: Finished difference Result 58 states and 69 transitions. [2022-12-14 09:58:51,555 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-12-14 09:58:51,556 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-12-14 09:58:51,556 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:51,556 INFO L225 Difference]: With dead ends: 58 [2022-12-14 09:58:51,556 INFO L226 Difference]: Without dead ends: 58 [2022-12-14 09:58:51,556 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 33 GetRequests, 8 SyntacticMatches, 1 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 127 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=121, Invalid=529, Unknown=0, NotChecked=0, Total=650 [2022-12-14 09:58:51,556 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 102 mSDsluCounter, 41 mSDsCounter, 0 mSdLazyCounter, 115 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 116 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 115 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:51,557 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 49 Invalid, 116 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 115 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 09:58:51,557 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-12-14 09:58:51,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 36. [2022-12-14 09:58:51,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 29 states have (on average 1.4827586206896552) internal successors, (43), 35 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:51,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 43 transitions. [2022-12-14 09:58:51,558 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 43 transitions. Word has length 10 [2022-12-14 09:58:51,558 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:51,558 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 43 transitions. [2022-12-14 09:58:51,559 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 9 states have (on average 1.1111111111111112) internal successors, (10), 9 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:51,559 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 43 transitions. [2022-12-14 09:58:51,559 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 09:58:51,559 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:51,559 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1] [2022-12-14 09:58:51,564 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-12-14 09:58:51,759 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:51,761 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:51,762 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:51,762 INFO L85 PathProgramCache]: Analyzing trace with hash -1431003436, now seen corresponding path program 1 times [2022-12-14 09:58:51,762 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:51,762 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [747426633] [2022-12-14 09:58:51,763 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:51,763 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:51,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:51,886 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 1 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:51,886 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:51,886 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [747426633] [2022-12-14 09:58:51,886 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [747426633] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:58:51,887 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1611450359] [2022-12-14 09:58:51,887 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:51,887 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:51,887 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:58:51,888 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:58:51,889 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-12-14 09:58:51,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:51,942 INFO L263 TraceCheckSpWp]: Trace formula consists of 101 conjuncts, 9 conjunts are in the unsatisfiable core [2022-12-14 09:58:51,943 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:58:52,009 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:52,009 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 09:58:52,071 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:52,071 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1611450359] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 09:58:52,072 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [408311683] [2022-12-14 09:58:52,073 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-12-14 09:58:52,073 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 09:58:52,073 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 09:58:52,073 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 09:58:52,074 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 09:58:52,110 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:58:52,113 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:58:52,114 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 09:58:52,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 09:58:52,202 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:52,225 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:52,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:52,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:52,354 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:52,368 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 09:58:52,789 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1544#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 09:58:52,790 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 09:58:52,790 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 09:58:52,790 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 16 [2022-12-14 09:58:52,790 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1313915297] [2022-12-14 09:58:52,790 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 09:58:52,790 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-12-14 09:58:52,790 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:52,790 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-12-14 09:58:52,791 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=101, Invalid=405, Unknown=0, NotChecked=0, Total=506 [2022-12-14 09:58:52,791 INFO L87 Difference]: Start difference. First operand 36 states and 43 transitions. Second operand has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:52,945 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:52,945 INFO L93 Difference]: Finished difference Result 101 states and 117 transitions. [2022-12-14 09:58:52,945 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-14 09:58:52,946 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 09:58:52,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:52,946 INFO L225 Difference]: With dead ends: 101 [2022-12-14 09:58:52,946 INFO L226 Difference]: Without dead ends: 101 [2022-12-14 09:58:52,947 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 47 GetRequests, 15 SyntacticMatches, 2 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 259 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=207, Invalid=785, Unknown=0, NotChecked=0, Total=992 [2022-12-14 09:58:52,947 INFO L413 NwaCegarLoop]: 36 mSDtfsCounter, 350 mSDsluCounter, 255 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 291 SdHoareTripleChecker+Invalid, 162 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:52,948 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [350 Valid, 291 Invalid, 162 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 09:58:52,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2022-12-14 09:58:52,949 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 41. [2022-12-14 09:58:52,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 34 states have (on average 1.4705882352941178) internal successors, (50), 40 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:52,949 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 50 transitions. [2022-12-14 09:58:52,949 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 50 transitions. Word has length 11 [2022-12-14 09:58:52,949 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:52,950 INFO L495 AbstractCegarLoop]: Abstraction has 41 states and 50 transitions. [2022-12-14 09:58:52,950 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 17 states have (on average 1.6470588235294117) internal successors, (28), 16 states have internal predecessors, (28), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:52,950 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 50 transitions. [2022-12-14 09:58:52,950 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2022-12-14 09:58:52,950 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:52,950 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:58:52,954 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2022-12-14 09:58:53,151 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-12-14 09:58:53,152 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:53,152 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:53,153 INFO L85 PathProgramCache]: Analyzing trace with hash 996597990, now seen corresponding path program 1 times [2022-12-14 09:58:53,153 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:53,153 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1425745968] [2022-12-14 09:58:53,153 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:53,154 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:53,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:53,408 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:53,408 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:53,409 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1425745968] [2022-12-14 09:58:53,409 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1425745968] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:58:53,409 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [434792541] [2022-12-14 09:58:53,409 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:53,409 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:53,409 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:58:53,410 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:58:53,411 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-12-14 09:58:53,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:53,473 INFO L263 TraceCheckSpWp]: Trace formula consists of 129 conjuncts, 42 conjunts are in the unsatisfiable core [2022-12-14 09:58:53,474 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:58:53,496 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 09:58:53,636 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 09:58:53,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 09:58:53,787 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:58:53,788 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 09:58:53,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 10 [2022-12-14 09:58:53,806 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:53,806 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 09:58:53,886 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 09:58:53,886 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 25 [2022-12-14 09:58:53,893 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 09:58:53,893 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 36 treesize of output 32 [2022-12-14 09:58:53,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 09:58:54,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 09:58:54,074 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:54,074 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [434792541] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 09:58:54,074 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [879455174] [2022-12-14 09:58:54,076 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 09:58:54,076 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 09:58:54,076 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 09:58:54,076 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 09:58:54,076 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 09:58:54,106 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:58:54,110 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:58:54,111 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 09:58:54,159 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 09:58:54,203 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:54,224 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:54,280 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 09:58:54,333 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 09:58:54,334 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 09:58:54,488 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 09:58:56,046 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1802#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-12-14 09:58:56,046 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 09:58:56,047 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 09:58:56,047 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 10, 10] total 26 [2022-12-14 09:58:56,047 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1273558867] [2022-12-14 09:58:56,047 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 09:58:56,047 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-12-14 09:58:56,047 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:56,048 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-12-14 09:58:56,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=124, Invalid=1066, Unknown=0, NotChecked=0, Total=1190 [2022-12-14 09:58:56,048 INFO L87 Difference]: Start difference. First operand 41 states and 50 transitions. Second operand has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:57,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:57,475 INFO L93 Difference]: Finished difference Result 108 states and 121 transitions. [2022-12-14 09:58:57,475 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2022-12-14 09:58:57,476 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2022-12-14 09:58:57,476 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:57,476 INFO L225 Difference]: With dead ends: 108 [2022-12-14 09:58:57,476 INFO L226 Difference]: Without dead ends: 108 [2022-12-14 09:58:57,477 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 9 SyntacticMatches, 1 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 693 ImplicationChecksByTransitivity, 3.1s TimeCoverageRelationStatistics Valid=523, Invalid=2783, Unknown=0, NotChecked=0, Total=3306 [2022-12-14 09:58:57,477 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 442 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 500 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 442 SdHoareTripleChecker+Valid, 198 SdHoareTripleChecker+Invalid, 523 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 500 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:57,477 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [442 Valid, 198 Invalid, 523 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 500 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 09:58:57,478 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-12-14 09:58:57,480 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 59. [2022-12-14 09:58:57,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 52 states have (on average 1.4807692307692308) internal successors, (77), 58 states have internal predecessors, (77), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:57,481 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 77 transitions. [2022-12-14 09:58:57,481 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 77 transitions. Word has length 12 [2022-12-14 09:58:57,481 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:57,481 INFO L495 AbstractCegarLoop]: Abstraction has 59 states and 77 transitions. [2022-12-14 09:58:57,481 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 1.2692307692307692) internal successors, (33), 26 states have internal predecessors, (33), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:57,481 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 77 transitions. [2022-12-14 09:58:57,481 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-12-14 09:58:57,481 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:57,482 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 1, 1, 1, 1, 1] [2022-12-14 09:58:57,486 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2022-12-14 09:58:57,682 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:57,683 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:57,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:57,684 INFO L85 PathProgramCache]: Analyzing trace with hash 851331544, now seen corresponding path program 2 times [2022-12-14 09:58:57,685 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:57,685 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [695727473] [2022-12-14 09:58:57,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:57,686 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:57,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:57,894 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 09:58:57,894 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:57,894 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [695727473] [2022-12-14 09:58:57,894 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [695727473] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:58:57,894 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1938136257] [2022-12-14 09:58:57,894 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 09:58:57,895 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:57,895 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:58:57,896 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:58:57,896 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-12-14 09:58:57,960 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-12-14 09:58:57,960 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 09:58:57,961 INFO L263 TraceCheckSpWp]: Trace formula consists of 88 conjuncts, 18 conjunts are in the unsatisfiable core [2022-12-14 09:58:57,962 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:58:57,998 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 09:58:57,999 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 09:58:58,149 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 09:58:58,149 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 09:58:58,308 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 09:58:58,308 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1938136257] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 09:58:58,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1246070471] [2022-12-14 09:58:58,309 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-12-14 09:58:58,310 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 09:58:58,310 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 09:58:58,310 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 09:58:58,310 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 09:58:58,350 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:58:58,353 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:58:58,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 09:58:58,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:58,437 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:58,454 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:58,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 09:58:58,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:58,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:58,586 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:58:58,593 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 09:58:59,030 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2113#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 09:58:59,030 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 09:58:59,030 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 09:58:59,030 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 15 [2022-12-14 09:58:59,030 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1890929565] [2022-12-14 09:58:59,030 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 09:58:59,030 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-12-14 09:58:59,030 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:59,031 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-12-14 09:58:59,031 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=107, Invalid=399, Unknown=0, NotChecked=0, Total=506 [2022-12-14 09:58:59,031 INFO L87 Difference]: Start difference. First operand 59 states and 77 transitions. Second operand has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:59,292 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:59,292 INFO L93 Difference]: Finished difference Result 122 states and 164 transitions. [2022-12-14 09:58:59,292 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-14 09:58:59,292 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-12-14 09:58:59,292 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:59,293 INFO L225 Difference]: With dead ends: 122 [2022-12-14 09:58:59,293 INFO L226 Difference]: Without dead ends: 122 [2022-12-14 09:58:59,293 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 165 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=194, Invalid=618, Unknown=0, NotChecked=0, Total=812 [2022-12-14 09:58:59,293 INFO L413 NwaCegarLoop]: 29 mSDtfsCounter, 324 mSDsluCounter, 67 mSDsCounter, 0 mSdLazyCounter, 169 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 324 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 171 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 169 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:59,294 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [324 Valid, 96 Invalid, 171 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 169 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 09:58:59,294 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 122 states. [2022-12-14 09:58:59,295 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 122 to 57. [2022-12-14 09:58:59,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 51 states have (on average 1.4705882352941178) internal successors, (75), 56 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:59,296 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 75 transitions. [2022-12-14 09:58:59,296 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 75 transitions. Word has length 13 [2022-12-14 09:58:59,296 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:59,296 INFO L495 AbstractCegarLoop]: Abstraction has 57 states and 75 transitions. [2022-12-14 09:58:59,296 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.6875) internal successors, (27), 16 states have internal predecessors, (27), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:59,296 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 75 transitions. [2022-12-14 09:58:59,296 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-12-14 09:58:59,296 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:59,296 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:58:59,300 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2022-12-14 09:58:59,497 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:59,498 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:59,499 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:59,499 INFO L85 PathProgramCache]: Analyzing trace with hash 829765127, now seen corresponding path program 1 times [2022-12-14 09:58:59,500 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:59,500 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [484028826] [2022-12-14 09:58:59,500 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:59,500 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:59,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:59,542 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 09:58:59,543 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:59,543 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [484028826] [2022-12-14 09:58:59,543 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [484028826] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:58:59,543 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 09:58:59,543 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 09:58:59,543 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1466479076] [2022-12-14 09:58:59,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:58:59,544 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 09:58:59,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:59,544 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 09:58:59,544 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 09:58:59,544 INFO L87 Difference]: Start difference. First operand 57 states and 75 transitions. Second operand has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:59,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:59,587 INFO L93 Difference]: Finished difference Result 57 states and 73 transitions. [2022-12-14 09:58:59,587 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 09:58:59,587 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-12-14 09:58:59,587 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:59,587 INFO L225 Difference]: With dead ends: 57 [2022-12-14 09:58:59,587 INFO L226 Difference]: Without dead ends: 57 [2022-12-14 09:58:59,588 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-14 09:58:59,588 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 33 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 53 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 54 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 53 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:59,588 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 28 Invalid, 54 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 53 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 09:58:59,589 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-12-14 09:58:59,590 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 56. [2022-12-14 09:58:59,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 56 states, 51 states have (on average 1.411764705882353) internal successors, (72), 55 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:59,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 56 states to 56 states and 72 transitions. [2022-12-14 09:58:59,591 INFO L78 Accepts]: Start accepts. Automaton has 56 states and 72 transitions. Word has length 13 [2022-12-14 09:58:59,591 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:59,591 INFO L495 AbstractCegarLoop]: Abstraction has 56 states and 72 transitions. [2022-12-14 09:58:59,591 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:59,591 INFO L276 IsEmpty]: Start isEmpty. Operand 56 states and 72 transitions. [2022-12-14 09:58:59,592 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-12-14 09:58:59,592 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:59,592 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:58:59,592 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-12-14 09:58:59,592 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:59,592 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:59,592 INFO L85 PathProgramCache]: Analyzing trace with hash 829765128, now seen corresponding path program 1 times [2022-12-14 09:58:59,592 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:59,593 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1560924656] [2022-12-14 09:58:59,593 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:59,593 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:59,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:59,706 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 09:58:59,706 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:59,706 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1560924656] [2022-12-14 09:58:59,706 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1560924656] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:58:59,707 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 09:58:59,707 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-14 09:58:59,707 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1265640916] [2022-12-14 09:58:59,707 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:58:59,707 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 09:58:59,707 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:58:59,707 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 09:58:59,708 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 09:58:59,708 INFO L87 Difference]: Start difference. First operand 56 states and 72 transitions. Second operand has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:59,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:58:59,792 INFO L93 Difference]: Finished difference Result 65 states and 82 transitions. [2022-12-14 09:58:59,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 09:58:59,792 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-12-14 09:58:59,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:58:59,794 INFO L225 Difference]: With dead ends: 65 [2022-12-14 09:58:59,794 INFO L226 Difference]: Without dead ends: 65 [2022-12-14 09:58:59,794 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=25, Invalid=47, Unknown=0, NotChecked=0, Total=72 [2022-12-14 09:58:59,794 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 58 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 23 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 09:58:59,795 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 23 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 09:58:59,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65 states. [2022-12-14 09:58:59,797 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65 to 60. [2022-12-14 09:58:59,797 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 55 states have (on average 1.3636363636363635) internal successors, (75), 59 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:59,798 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 75 transitions. [2022-12-14 09:58:59,798 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 75 transitions. Word has length 13 [2022-12-14 09:58:59,798 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:58:59,798 INFO L495 AbstractCegarLoop]: Abstraction has 60 states and 75 transitions. [2022-12-14 09:58:59,798 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.6) internal successors, (13), 6 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:58:59,798 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 75 transitions. [2022-12-14 09:58:59,799 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-12-14 09:58:59,799 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:58:59,799 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:58:59,799 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-12-14 09:58:59,799 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:58:59,799 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:58:59,799 INFO L85 PathProgramCache]: Analyzing trace with hash 2070683350, now seen corresponding path program 1 times [2022-12-14 09:58:59,800 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:58:59,800 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [506745144] [2022-12-14 09:58:59,800 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:59,800 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:58:59,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:58:59,967 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 1 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:58:59,967 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:58:59,967 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [506745144] [2022-12-14 09:58:59,967 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [506745144] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:58:59,967 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [951160084] [2022-12-14 09:58:59,969 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:58:59,969 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:58:59,969 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:58:59,970 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:58:59,971 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-12-14 09:59:00,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:59:00,028 INFO L263 TraceCheckSpWp]: Trace formula consists of 148 conjuncts, 20 conjunts are in the unsatisfiable core [2022-12-14 09:59:00,029 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:59:00,099 WARN L859 $PredicateComparison]: unable to prove that (exists ((v_ArrVal_279 Int) (|v_ULTIMATE.start_main_#t~malloc11#1.base_21| Int) (|v_ULTIMATE.start_main_#t~malloc12#1.base_21| Int)) (let ((.cse0 (store |c_ULTIMATE.start_main_old_#valid#1| |v_ULTIMATE.start_main_#t~malloc11#1.base_21| 1))) (and (= |c_#valid| (store (store (store .cse0 |v_ULTIMATE.start_main_#t~malloc12#1.base_21| v_ArrVal_279) |v_ULTIMATE.start_main_#t~malloc11#1.base_21| 0) |v_ULTIMATE.start_main_#t~malloc12#1.base_21| 0)) (= (select |c_ULTIMATE.start_main_old_#valid#1| |v_ULTIMATE.start_main_#t~malloc11#1.base_21|) 0) (= (select .cse0 |v_ULTIMATE.start_main_#t~malloc12#1.base_21|) 0)))) is different from true [2022-12-14 09:59:00,099 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-12-14 09:59:00,100 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 09:59:00,100 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [951160084] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:59:00,100 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 09:59:00,100 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [8] total 11 [2022-12-14 09:59:00,100 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1711935115] [2022-12-14 09:59:00,100 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:59:00,100 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 09:59:00,101 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:59:00,101 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 09:59:00,101 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=80, Unknown=1, NotChecked=18, Total=132 [2022-12-14 09:59:00,101 INFO L87 Difference]: Start difference. First operand 60 states and 75 transitions. Second operand has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:00,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:59:00,138 INFO L93 Difference]: Finished difference Result 59 states and 74 transitions. [2022-12-14 09:59:00,138 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 09:59:00,138 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-12-14 09:59:00,138 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:59:00,138 INFO L225 Difference]: With dead ends: 59 [2022-12-14 09:59:00,139 INFO L226 Difference]: Without dead ends: 56 [2022-12-14 09:59:00,139 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=36, Invalid=99, Unknown=1, NotChecked=20, Total=156 [2022-12-14 09:59:00,139 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 16 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 27 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 09:59:00,139 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [16 Valid, 28 Invalid, 56 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 28 Invalid, 0 Unknown, 27 Unchecked, 0.0s Time] [2022-12-14 09:59:00,139 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56 states. [2022-12-14 09:59:00,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56 to 52. [2022-12-14 09:59:00,140 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 48 states have (on average 1.2916666666666667) internal successors, (62), 51 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:00,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 62 transitions. [2022-12-14 09:59:00,141 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 62 transitions. Word has length 15 [2022-12-14 09:59:00,141 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:59:00,141 INFO L495 AbstractCegarLoop]: Abstraction has 52 states and 62 transitions. [2022-12-14 09:59:00,141 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 4 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:00,141 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 62 transitions. [2022-12-14 09:59:00,141 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2022-12-14 09:59:00,141 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:59:00,141 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:59:00,145 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2022-12-14 09:59:00,342 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:59:00,342 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:59:00,343 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:59:00,343 INFO L85 PathProgramCache]: Analyzing trace with hash -632911717, now seen corresponding path program 2 times [2022-12-14 09:59:00,344 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:59:00,344 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [148649900] [2022-12-14 09:59:00,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:59:00,345 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:59:00,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:59:00,730 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:59:00,730 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:59:00,730 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [148649900] [2022-12-14 09:59:00,730 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [148649900] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:59:00,730 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [963400552] [2022-12-14 09:59:00,730 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 09:59:00,730 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:59:00,730 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:59:00,731 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:59:00,732 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-12-14 09:59:00,789 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 09:59:00,789 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 09:59:00,791 INFO L263 TraceCheckSpWp]: Trace formula consists of 153 conjuncts, 43 conjunts are in the unsatisfiable core [2022-12-14 09:59:00,792 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:59:00,807 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 09:59:00,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 09:59:00,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 09:59:01,137 INFO L321 Elim1Store]: treesize reduction 11, result has 47.6 percent of original size [2022-12-14 09:59:01,138 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 31 treesize of output 20 [2022-12-14 09:59:01,156 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:59:01,156 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 09:59:01,240 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_313 (Array Int Int))) (let ((.cse0 (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_313) |c_ULTIMATE.start_main_~nondetString1~0#1.base|))) (or (= (select .cse0 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|) 0) (= (select .cse0 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0)))) is different from false [2022-12-14 09:59:01,247 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 09:59:01,247 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 51 treesize of output 37 [2022-12-14 09:59:01,257 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 09:59:01,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 61 treesize of output 61 [2022-12-14 09:59:01,269 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 15 [2022-12-14 09:59:01,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 09:59:01,490 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:59:01,490 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [963400552] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 09:59:01,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1283557987] [2022-12-14 09:59:01,492 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 09:59:01,492 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 09:59:01,492 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 09:59:01,492 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 09:59:01,492 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 09:59:01,521 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:01,526 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:01,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 09:59:01,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 09:59:01,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:01,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:01,665 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 09:59:01,715 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 09:59:01,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 09:59:01,854 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 09:59:03,477 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2858#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-12-14 09:59:03,477 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 09:59:03,477 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 09:59:03,477 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 12] total 32 [2022-12-14 09:59:03,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [217134778] [2022-12-14 09:59:03,477 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 09:59:03,478 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-12-14 09:59:03,478 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:59:03,478 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-12-14 09:59:03,479 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=131, Invalid=1432, Unknown=1, NotChecked=76, Total=1640 [2022-12-14 09:59:03,479 INFO L87 Difference]: Start difference. First operand 52 states and 62 transitions. Second operand has 32 states, 32 states have (on average 1.40625) internal successors, (45), 32 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:14,400 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:59:14,400 INFO L93 Difference]: Finished difference Result 119 states and 135 transitions. [2022-12-14 09:59:14,401 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2022-12-14 09:59:14,401 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.40625) internal successors, (45), 32 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 16 [2022-12-14 09:59:14,401 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:59:14,401 INFO L225 Difference]: With dead ends: 119 [2022-12-14 09:59:14,401 INFO L226 Difference]: Without dead ends: 117 [2022-12-14 09:59:14,402 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 85 GetRequests, 17 SyntacticMatches, 1 SemanticMatches, 67 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 852 ImplicationChecksByTransitivity, 12.4s TimeCoverageRelationStatistics Valid=626, Invalid=3933, Unknown=1, NotChecked=132, Total=4692 [2022-12-14 09:59:14,402 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 752 mSDsluCounter, 236 mSDsCounter, 0 mSdLazyCounter, 862 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 752 SdHoareTripleChecker+Valid, 251 SdHoareTripleChecker+Invalid, 952 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 862 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 76 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 09:59:14,402 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [752 Valid, 251 Invalid, 952 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 862 Invalid, 0 Unknown, 76 Unchecked, 0.6s Time] [2022-12-14 09:59:14,403 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2022-12-14 09:59:14,404 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 66. [2022-12-14 09:59:14,404 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 62 states have (on average 1.2741935483870968) internal successors, (79), 65 states have internal predecessors, (79), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:14,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 79 transitions. [2022-12-14 09:59:14,404 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 79 transitions. Word has length 16 [2022-12-14 09:59:14,404 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:59:14,404 INFO L495 AbstractCegarLoop]: Abstraction has 66 states and 79 transitions. [2022-12-14 09:59:14,404 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.40625) internal successors, (45), 32 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:14,404 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 79 transitions. [2022-12-14 09:59:14,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-12-14 09:59:14,405 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:59:14,405 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:59:14,410 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2022-12-14 09:59:14,605 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:59:14,606 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:59:14,607 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:59:14,607 INFO L85 PathProgramCache]: Analyzing trace with hash -1528381119, now seen corresponding path program 1 times [2022-12-14 09:59:14,607 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:59:14,608 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [751499394] [2022-12-14 09:59:14,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:59:14,608 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:59:14,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:59:14,760 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:59:14,760 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:59:14,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [751499394] [2022-12-14 09:59:14,760 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [751499394] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:59:14,760 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [915877092] [2022-12-14 09:59:14,761 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:59:14,761 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:59:14,761 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:59:14,762 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:59:14,762 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-12-14 09:59:14,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:59:14,831 INFO L263 TraceCheckSpWp]: Trace formula consists of 166 conjuncts, 35 conjunts are in the unsatisfiable core [2022-12-14 09:59:14,833 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:59:14,855 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:14,989 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 09:59:14,989 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 17 [2022-12-14 09:59:15,093 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 09:59:15,093 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 09:59:15,309 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-12-14 09:59:15,314 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-12-14 09:59:15,319 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 23 [2022-12-14 09:59:15,338 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 09:59:15,338 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [915877092] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 09:59:15,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1919950440] [2022-12-14 09:59:15,339 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 09:59:15,340 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 09:59:15,340 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 09:59:15,340 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 09:59:15,340 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 09:59:15,380 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:15,383 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:15,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 09:59:15,412 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 09:59:15,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:15,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:15,512 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 09:59:15,568 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 09:59:15,568 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 09:59:15,675 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:15,677 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:15,678 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:15,679 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:15,703 INFO L321 Elim1Store]: treesize reduction 89, result has 21.2 percent of original size [2022-12-14 09:59:15,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 8 case distinctions, treesize of input 49 treesize of output 43 [2022-12-14 09:59:15,773 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:15,774 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:15,775 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:15,776 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:15,795 INFO L321 Elim1Store]: treesize reduction 89, result has 21.2 percent of original size [2022-12-14 09:59:15,795 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 3 new quantified variables, introduced 8 case distinctions, treesize of input 49 treesize of output 43 [2022-12-14 09:59:15,833 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 09:59:18,919 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [1919950440] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 09:59:18,919 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 09:59:18,919 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [8, 8, 8] total 34 [2022-12-14 09:59:18,919 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2146196875] [2022-12-14 09:59:18,919 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 09:59:18,919 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 09:59:18,920 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:59:18,920 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 09:59:18,920 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=181, Invalid=941, Unknown=0, NotChecked=0, Total=1122 [2022-12-14 09:59:18,920 INFO L87 Difference]: Start difference. First operand 66 states and 79 transitions. Second operand has 14 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 13 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:19,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:59:19,107 INFO L93 Difference]: Finished difference Result 122 states and 141 transitions. [2022-12-14 09:59:19,108 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-14 09:59:19,108 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 13 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-12-14 09:59:19,108 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:59:19,108 INFO L225 Difference]: With dead ends: 122 [2022-12-14 09:59:19,108 INFO L226 Difference]: Without dead ends: 108 [2022-12-14 09:59:19,108 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 60 GetRequests, 25 SyntacticMatches, 3 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 249 ImplicationChecksByTransitivity, 3.4s TimeCoverageRelationStatistics Valid=181, Invalid=941, Unknown=0, NotChecked=0, Total=1122 [2022-12-14 09:59:19,109 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 56 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 150 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 60 SdHoareTripleChecker+Invalid, 150 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 150 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 09:59:19,109 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 60 Invalid, 150 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 150 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 09:59:19,109 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-12-14 09:59:19,110 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 73. [2022-12-14 09:59:19,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 69 states have (on average 1.2463768115942029) internal successors, (86), 72 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:19,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 86 transitions. [2022-12-14 09:59:19,111 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 86 transitions. Word has length 18 [2022-12-14 09:59:19,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:59:19,111 INFO L495 AbstractCegarLoop]: Abstraction has 73 states and 86 transitions. [2022-12-14 09:59:19,111 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 14 states have (on average 1.2142857142857142) internal successors, (17), 13 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:19,111 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 86 transitions. [2022-12-14 09:59:19,111 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-12-14 09:59:19,111 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:59:19,111 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:59:19,115 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2022-12-14 09:59:19,312 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:59:19,312 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:59:19,313 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:59:19,313 INFO L85 PathProgramCache]: Analyzing trace with hash 1998289168, now seen corresponding path program 3 times [2022-12-14 09:59:19,314 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:59:19,314 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [834881113] [2022-12-14 09:59:19,314 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:59:19,314 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:59:19,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:59:19,665 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 1 proven. 17 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:59:19,665 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:59:19,665 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [834881113] [2022-12-14 09:59:19,665 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [834881113] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:59:19,665 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2060310755] [2022-12-14 09:59:19,665 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 09:59:19,666 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:59:19,666 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:59:19,666 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:59:19,667 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-12-14 09:59:19,741 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 09:59:19,741 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 09:59:19,743 INFO L263 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 49 conjunts are in the unsatisfiable core [2022-12-14 09:59:19,745 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:59:19,751 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 09:59:19,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 09:59:19,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 09:59:20,275 INFO L321 Elim1Store]: treesize reduction 8, result has 79.5 percent of original size [2022-12-14 09:59:20,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 41 treesize of output 45 [2022-12-14 09:59:20,373 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 09:59:20,373 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 09:59:21,445 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 09:59:21,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 77 treesize of output 49 [2022-12-14 09:59:21,467 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 09:59:21,468 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 86 treesize of output 99 [2022-12-14 09:59:21,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 32 treesize of output 22 [2022-12-14 09:59:21,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-12-14 09:59:21,627 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 09:59:21,627 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2060310755] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 09:59:21,627 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [870402155] [2022-12-14 09:59:21,629 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 09:59:21,629 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 09:59:21,629 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 09:59:21,629 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 09:59:21,629 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 09:59:21,657 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:21,663 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:21,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 09:59:21,689 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:21,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:21,746 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:21,785 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 09:59:21,821 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 09:59:21,822 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 09:59:21,950 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 09:59:23,667 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3587#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-12-14 09:59:23,668 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 09:59:23,668 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 09:59:23,668 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 11, 11] total 33 [2022-12-14 09:59:23,668 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1434026291] [2022-12-14 09:59:23,668 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 09:59:23,668 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 34 states [2022-12-14 09:59:23,668 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:59:23,669 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 34 interpolants. [2022-12-14 09:59:23,669 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=157, Invalid=1647, Unknown=2, NotChecked=0, Total=1806 [2022-12-14 09:59:23,669 INFO L87 Difference]: Start difference. First operand 73 states and 86 transitions. Second operand has 34 states, 33 states have (on average 1.5151515151515151) internal successors, (50), 34 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:28,598 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:59:28,599 INFO L93 Difference]: Finished difference Result 137 states and 154 transitions. [2022-12-14 09:59:28,599 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-12-14 09:59:28,599 INFO L78 Accepts]: Start accepts. Automaton has has 34 states, 33 states have (on average 1.5151515151515151) internal successors, (50), 34 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-12-14 09:59:28,599 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:59:28,600 INFO L225 Difference]: With dead ends: 137 [2022-12-14 09:59:28,600 INFO L226 Difference]: Without dead ends: 133 [2022-12-14 09:59:28,601 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 107 GetRequests, 30 SyntacticMatches, 0 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1154 ImplicationChecksByTransitivity, 7.2s TimeCoverageRelationStatistics Valid=1033, Invalid=5127, Unknown=2, NotChecked=0, Total=6162 [2022-12-14 09:59:28,602 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 613 mSDsluCounter, 232 mSDsCounter, 0 mSdLazyCounter, 1016 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 613 SdHoareTripleChecker+Valid, 247 SdHoareTripleChecker+Invalid, 1048 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 1016 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2022-12-14 09:59:28,602 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [613 Valid, 247 Invalid, 1048 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 1016 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2022-12-14 09:59:28,603 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 133 states. [2022-12-14 09:59:28,604 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 133 to 82. [2022-12-14 09:59:28,604 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 78 states have (on average 1.2435897435897436) internal successors, (97), 81 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:28,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 97 transitions. [2022-12-14 09:59:28,605 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 97 transitions. Word has length 20 [2022-12-14 09:59:28,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:59:28,605 INFO L495 AbstractCegarLoop]: Abstraction has 82 states and 97 transitions. [2022-12-14 09:59:28,605 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 34 states, 33 states have (on average 1.5151515151515151) internal successors, (50), 34 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:28,605 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 97 transitions. [2022-12-14 09:59:28,606 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-12-14 09:59:28,606 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:59:28,606 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:59:28,610 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-12-14 09:59:28,807 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2022-12-14 09:59:28,808 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:59:28,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:59:28,809 INFO L85 PathProgramCache]: Analyzing trace with hash -1020431056, now seen corresponding path program 1 times [2022-12-14 09:59:28,809 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:59:28,809 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [988803540] [2022-12-14 09:59:28,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:59:28,810 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:59:28,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:59:28,991 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 09:59:28,991 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:59:28,991 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [988803540] [2022-12-14 09:59:28,991 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [988803540] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:59:28,991 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1651362026] [2022-12-14 09:59:28,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:59:28,992 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:59:28,992 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:59:28,993 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:59:28,993 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-12-14 09:59:29,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:59:29,052 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 27 conjunts are in the unsatisfiable core [2022-12-14 09:59:29,054 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:59:29,124 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 09:59:29,124 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 09:59:29,230 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 09:59:29,249 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 09:59:29,249 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1651362026] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 09:59:29,249 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [975644650] [2022-12-14 09:59:29,251 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 09:59:29,251 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 09:59:29,251 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 09:59:29,251 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 09:59:29,251 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 09:59:29,281 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:29,284 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:29,284 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 09:59:29,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 09:59:29,342 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:29,358 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:29,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 09:59:29,424 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:29,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:29,476 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:29,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 09:59:29,572 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 09:59:29,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 09:59:29,705 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:29,707 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:29,708 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:29,745 INFO L321 Elim1Store]: treesize reduction 149, result has 24.4 percent of original size [2022-12-14 09:59:29,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 9 case distinctions, treesize of input 49 treesize of output 67 [2022-12-14 09:59:29,882 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 09:59:29,883 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 09:59:29,994 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 09:59:29,994 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 09:59:30,059 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 09:59:33,131 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4034#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 09:59:33,131 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 09:59:33,131 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 09:59:33,131 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 8, 8] total 20 [2022-12-14 09:59:33,131 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1930300403] [2022-12-14 09:59:33,131 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 09:59:33,132 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2022-12-14 09:59:33,132 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:59:33,132 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2022-12-14 09:59:33,132 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=177, Invalid=1155, Unknown=0, NotChecked=0, Total=1332 [2022-12-14 09:59:33,133 INFO L87 Difference]: Start difference. First operand 82 states and 97 transitions. Second operand has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:33,415 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:59:33,415 INFO L93 Difference]: Finished difference Result 146 states and 167 transitions. [2022-12-14 09:59:33,415 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 09:59:33,415 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-12-14 09:59:33,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:59:33,416 INFO L225 Difference]: With dead ends: 146 [2022-12-14 09:59:33,416 INFO L226 Difference]: Without dead ends: 146 [2022-12-14 09:59:33,416 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 37 SyntacticMatches, 2 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 505 ImplicationChecksByTransitivity, 3.4s TimeCoverageRelationStatistics Valid=275, Invalid=1705, Unknown=0, NotChecked=0, Total=1980 [2022-12-14 09:59:33,417 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 152 mSDsluCounter, 117 mSDsCounter, 0 mSdLazyCounter, 391 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 152 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 391 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 09:59:33,417 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [152 Valid, 137 Invalid, 395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 391 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 09:59:33,417 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2022-12-14 09:59:33,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 110. [2022-12-14 09:59:33,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 106 states have (on average 1.2358490566037736) internal successors, (131), 109 states have internal predecessors, (131), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:33,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 131 transitions. [2022-12-14 09:59:33,420 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 131 transitions. Word has length 22 [2022-12-14 09:59:33,420 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:59:33,420 INFO L495 AbstractCegarLoop]: Abstraction has 110 states and 131 transitions. [2022-12-14 09:59:33,420 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 20 states have (on average 2.25) internal successors, (45), 21 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:33,420 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 131 transitions. [2022-12-14 09:59:33,420 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-12-14 09:59:33,420 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:59:33,420 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:59:33,424 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2022-12-14 09:59:33,621 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-12-14 09:59:33,623 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:59:33,623 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:59:33,623 INFO L85 PathProgramCache]: Analyzing trace with hash -134935242, now seen corresponding path program 1 times [2022-12-14 09:59:33,623 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:59:33,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1733781372] [2022-12-14 09:59:33,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:59:33,624 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:59:33,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:59:34,039 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 4 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:59:34,039 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:59:34,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1733781372] [2022-12-14 09:59:34,040 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1733781372] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:59:34,040 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [65072765] [2022-12-14 09:59:34,040 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:59:34,040 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:59:34,040 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:59:34,041 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:59:34,044 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-12-14 09:59:34,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:59:34,097 INFO L263 TraceCheckSpWp]: Trace formula consists of 190 conjuncts, 35 conjunts are in the unsatisfiable core [2022-12-14 09:59:34,098 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:59:34,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:34,255 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 09:59:34,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 20 treesize of output 17 [2022-12-14 09:59:34,347 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-12-14 09:59:34,347 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 09:59:34,583 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 09:59:34,588 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 16 [2022-12-14 09:59:34,591 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 23 [2022-12-14 09:59:34,613 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-12-14 09:59:34,613 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [65072765] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 09:59:34,613 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [287907632] [2022-12-14 09:59:34,614 INFO L159 IcfgInterpreter]: Started Sifa with 16 locations of interest [2022-12-14 09:59:34,614 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 09:59:34,614 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 09:59:34,615 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 09:59:34,615 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 09:59:34,639 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:34,642 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:34,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 09:59:34,671 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:34,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:34,720 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:34,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 09:59:34,800 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 09:59:34,800 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 09:59:34,925 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 09:59:34,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 09:59:35,054 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-12-14 09:59:35,054 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 120 treesize of output 119 [2022-12-14 09:59:35,208 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 09:59:35,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 09:59:35,326 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 09:59:35,326 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 09:59:35,419 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 09:59:38,140 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4474#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (= |ULTIMATE.start_main_~i~1#1| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 09:59:38,140 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 09:59:38,140 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 09:59:38,140 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 8, 8] total 26 [2022-12-14 09:59:38,140 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1017687525] [2022-12-14 09:59:38,140 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 09:59:38,140 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-12-14 09:59:38,140 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:59:38,141 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-12-14 09:59:38,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=1410, Unknown=0, NotChecked=0, Total=1560 [2022-12-14 09:59:38,141 INFO L87 Difference]: Start difference. First operand 110 states and 131 transitions. Second operand has 26 states, 26 states have (on average 2.0384615384615383) internal successors, (53), 26 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:40,566 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:59:40,566 INFO L93 Difference]: Finished difference Result 172 states and 192 transitions. [2022-12-14 09:59:40,566 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-12-14 09:59:40,566 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 26 states have (on average 2.0384615384615383) internal successors, (53), 26 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-12-14 09:59:40,566 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:59:40,567 INFO L225 Difference]: With dead ends: 172 [2022-12-14 09:59:40,567 INFO L226 Difference]: Without dead ends: 153 [2022-12-14 09:59:40,567 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 105 GetRequests, 37 SyntacticMatches, 1 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1037 ImplicationChecksByTransitivity, 5.3s TimeCoverageRelationStatistics Valid=660, Invalid=4032, Unknown=0, NotChecked=0, Total=4692 [2022-12-14 09:59:40,568 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 242 mSDsluCounter, 89 mSDsCounter, 0 mSdLazyCounter, 448 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 96 SdHoareTripleChecker+Invalid, 456 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 448 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 09:59:40,568 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [242 Valid, 96 Invalid, 456 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 448 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 09:59:40,568 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 153 states. [2022-12-14 09:59:40,569 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 153 to 90. [2022-12-14 09:59:40,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 86 states have (on average 1.197674418604651) internal successors, (103), 89 states have internal predecessors, (103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:40,570 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 103 transitions. [2022-12-14 09:59:40,570 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 103 transitions. Word has length 22 [2022-12-14 09:59:40,570 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:59:40,570 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 103 transitions. [2022-12-14 09:59:40,570 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 26 states have (on average 2.0384615384615383) internal successors, (53), 26 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:40,570 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 103 transitions. [2022-12-14 09:59:40,570 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-14 09:59:40,570 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:59:40,570 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:59:40,574 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-12-14 09:59:40,771 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23,16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:59:40,771 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:59:40,772 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:59:40,772 INFO L85 PathProgramCache]: Analyzing trace with hash -1113020805, now seen corresponding path program 4 times [2022-12-14 09:59:40,773 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:59:40,773 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [123219978] [2022-12-14 09:59:40,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:59:40,774 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:59:40,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:59:41,222 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 45 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 09:59:41,222 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:59:41,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [123219978] [2022-12-14 09:59:41,222 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [123219978] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:59:41,222 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [14778423] [2022-12-14 09:59:41,222 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 09:59:41,223 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:59:41,223 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:59:41,223 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:59:41,226 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-12-14 09:59:41,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:59:41,301 INFO L263 TraceCheckSpWp]: Trace formula consists of 210 conjuncts, 67 conjunts are in the unsatisfiable core [2022-12-14 09:59:41,303 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:59:41,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 09:59:41,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 09:59:41,604 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 09:59:41,935 INFO L321 Elim1Store]: treesize reduction 15, result has 51.6 percent of original size [2022-12-14 09:59:41,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 36 treesize of output 30 [2022-12-14 09:59:41,966 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 21 proven. 15 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 09:59:41,966 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 09:59:42,277 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 09:59:42,277 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 77 treesize of output 49 [2022-12-14 09:59:42,289 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 09:59:42,289 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 86 treesize of output 90 [2022-12-14 09:59:42,311 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 3 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 0 case distinctions, treesize of input 32 treesize of output 22 [2022-12-14 09:59:42,855 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 09:59:42,872 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 27 proven. 9 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 09:59:42,872 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [14778423] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 09:59:42,873 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1169369205] [2022-12-14 09:59:42,874 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 09:59:42,874 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 09:59:42,874 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 09:59:42,874 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 09:59:42,874 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 09:59:42,900 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:42,906 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:42,906 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 09:59:42,935 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 09:59:42,962 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:42,984 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 09:59:43,014 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 09:59:43,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 09:59:43,283 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 09:59:45,668 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5004#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-12-14 09:59:45,668 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 09:59:45,668 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 09:59:45,668 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 16, 16] total 46 [2022-12-14 09:59:45,668 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [112070747] [2022-12-14 09:59:45,668 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 09:59:45,668 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 46 states [2022-12-14 09:59:45,669 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 09:59:45,669 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 46 interpolants. [2022-12-14 09:59:45,669 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=212, Invalid=2868, Unknown=0, NotChecked=0, Total=3080 [2022-12-14 09:59:45,669 INFO L87 Difference]: Start difference. First operand 90 states and 103 transitions. Second operand has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:53,690 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 09:59:53,691 INFO L93 Difference]: Finished difference Result 237 states and 255 transitions. [2022-12-14 09:59:53,691 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2022-12-14 09:59:53,691 INFO L78 Accepts]: Start accepts. Automaton has has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-12-14 09:59:53,691 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 09:59:53,691 INFO L225 Difference]: With dead ends: 237 [2022-12-14 09:59:53,691 INFO L226 Difference]: Without dead ends: 235 [2022-12-14 09:59:53,693 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 38 SyntacticMatches, 1 SemanticMatches, 101 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2050 ImplicationChecksByTransitivity, 9.5s TimeCoverageRelationStatistics Valid=1317, Invalid=9189, Unknown=0, NotChecked=0, Total=10506 [2022-12-14 09:59:53,693 INFO L413 NwaCegarLoop]: 37 mSDtfsCounter, 1189 mSDsluCounter, 768 mSDsCounter, 0 mSdLazyCounter, 2186 mSolverCounterSat, 68 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1189 SdHoareTripleChecker+Valid, 805 SdHoareTripleChecker+Invalid, 2255 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 68 IncrementalHoareTripleChecker+Valid, 2186 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2022-12-14 09:59:53,693 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1189 Valid, 805 Invalid, 2255 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [68 Valid, 2186 Invalid, 1 Unknown, 0 Unchecked, 2.1s Time] [2022-12-14 09:59:53,694 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2022-12-14 09:59:53,695 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 169. [2022-12-14 09:59:53,696 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 165 states have (on average 1.206060606060606) internal successors, (199), 168 states have internal predecessors, (199), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:53,696 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 199 transitions. [2022-12-14 09:59:53,696 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 199 transitions. Word has length 26 [2022-12-14 09:59:53,696 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 09:59:53,696 INFO L495 AbstractCegarLoop]: Abstraction has 169 states and 199 transitions. [2022-12-14 09:59:53,696 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 46 states, 46 states have (on average 1.4130434782608696) internal successors, (65), 46 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 09:59:53,696 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 199 transitions. [2022-12-14 09:59:53,697 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-12-14 09:59:53,697 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 09:59:53,697 INFO L195 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 09:59:53,701 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Ended with exit code 0 [2022-12-14 09:59:53,897 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:59:53,898 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 09:59:53,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 09:59:53,899 INFO L85 PathProgramCache]: Analyzing trace with hash 733985561, now seen corresponding path program 2 times [2022-12-14 09:59:53,899 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 09:59:53,900 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [512993703] [2022-12-14 09:59:53,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 09:59:53,900 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 09:59:53,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 09:59:54,084 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 7 proven. 5 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 09:59:54,084 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 09:59:54,084 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [512993703] [2022-12-14 09:59:54,084 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [512993703] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 09:59:54,084 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [53740064] [2022-12-14 09:59:54,085 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 09:59:54,085 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 09:59:54,085 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 09:59:54,085 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 09:59:54,086 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-12-14 09:59:54,255 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 09:59:54,255 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 09:59:54,256 INFO L263 TraceCheckSpWp]: Trace formula consists of 224 conjuncts, 51 conjunts are in the unsatisfiable core [2022-12-14 09:59:54,259 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 09:59:54,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 09:59:54,324 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:54,406 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 09:59:54,460 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 09:59:54,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 09:59:54,477 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 5 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 09:59:54,477 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 09:59:54,509 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_518 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_518) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) |c_ULTIMATE.start_cstrncat_~s~0#1.offset|) 0)) is different from false [2022-12-14 09:59:54,543 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_518 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~dst#1.base| v_ArrVal_518) |c_ULTIMATE.start_cstrncat_~src#1.base|) (+ |c_ULTIMATE.start_cstrncat_~src#1.offset| 1)) 0)) is different from false [2022-12-14 09:59:54,548 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 09:59:54,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 09:59:54,552 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 09:59:54,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 09:59:54,624 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 4 trivial. 2 not checked. [2022-12-14 09:59:54,624 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [53740064] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 09:59:54,624 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [326077316] [2022-12-14 09:59:54,625 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 09:59:54,625 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 09:59:54,625 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 09:59:54,625 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 09:59:54,625 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 09:59:54,646 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:54,649 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 09:59:54,650 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 09:59:54,690 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 09:59:54,714 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:54,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:54,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-12-14 09:59:54,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:54,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 09:59:54,907 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-12-14 09:59:54,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-12-14 09:59:55,042 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-12-14 09:59:55,043 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-12-14 09:59:55,904 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:55,905 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:55,908 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 09:59:55,973 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-12-14 09:59:55,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1022 treesize of output 1029 [2022-12-14 09:59:56,575 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-12-14 09:59:56,592 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-12-14 09:59:56,594 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-12-14 09:59:56,643 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 09:59:56,643 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 09:59:56,741 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 09:59:56,741 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 09:59:56,816 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-12-14 09:59:56,829 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:00:00,959 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5699#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 10:00:00,960 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:00:00,960 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:00:00,960 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 13, 13] total 29 [2022-12-14 10:00:00,960 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1296459591] [2022-12-14 10:00:00,960 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:00:00,960 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-12-14 10:00:00,960 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:00:00,960 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-12-14 10:00:00,961 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=172, Invalid=1633, Unknown=9, NotChecked=166, Total=1980 [2022-12-14 10:00:00,961 INFO L87 Difference]: Start difference. First operand 169 states and 199 transitions. Second operand has 29 states, 29 states have (on average 2.1379310344827585) internal successors, (62), 29 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:01,923 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:00:01,923 INFO L93 Difference]: Finished difference Result 335 states and 379 transitions. [2022-12-14 10:00:01,923 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-12-14 10:00:01,923 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 2.1379310344827585) internal successors, (62), 29 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-12-14 10:00:01,923 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:00:01,924 INFO L225 Difference]: With dead ends: 335 [2022-12-14 10:00:01,924 INFO L226 Difference]: Without dead ends: 259 [2022-12-14 10:00:01,925 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 114 GetRequests, 44 SyntacticMatches, 5 SemanticMatches, 65 ConstructedPredicates, 2 IntricatePredicates, 3 DeprecatedPredicates, 1340 ImplicationChecksByTransitivity, 5.1s TimeCoverageRelationStatistics Valid=432, Invalid=3727, Unknown=9, NotChecked=254, Total=4422 [2022-12-14 10:00:01,925 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 166 mSDsluCounter, 252 mSDsCounter, 0 mSdLazyCounter, 436 mSolverCounterSat, 8 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 166 SdHoareTripleChecker+Valid, 270 SdHoareTripleChecker+Invalid, 581 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 436 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 135 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 10:00:01,925 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [166 Valid, 270 Invalid, 581 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 436 Invalid, 2 Unknown, 135 Unchecked, 0.2s Time] [2022-12-14 10:00:01,926 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259 states. [2022-12-14 10:00:01,928 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259 to 171. [2022-12-14 10:00:01,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 171 states, 167 states have (on average 1.2095808383233533) internal successors, (202), 170 states have internal predecessors, (202), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:01,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 171 states to 171 states and 202 transitions. [2022-12-14 10:00:01,929 INFO L78 Accepts]: Start accepts. Automaton has 171 states and 202 transitions. Word has length 27 [2022-12-14 10:00:01,929 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:00:01,929 INFO L495 AbstractCegarLoop]: Abstraction has 171 states and 202 transitions. [2022-12-14 10:00:01,929 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 2.1379310344827585) internal successors, (62), 29 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:01,929 INFO L276 IsEmpty]: Start isEmpty. Operand 171 states and 202 transitions. [2022-12-14 10:00:01,929 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-12-14 10:00:01,929 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:00:01,930 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:00:01,934 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2022-12-14 10:00:02,130 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-12-14 10:00:02,131 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:00:02,131 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:00:02,132 INFO L85 PathProgramCache]: Analyzing trace with hash -134540553, now seen corresponding path program 5 times [2022-12-14 10:00:02,132 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:00:02,132 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1896951031] [2022-12-14 10:00:02,132 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:00:02,133 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:00:02,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:00:02,611 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 0 proven. 52 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:00:02,611 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:00:02,611 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1896951031] [2022-12-14 10:00:02,611 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1896951031] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:00:02,611 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [235592305] [2022-12-14 10:00:02,611 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 10:00:02,611 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:00:02,612 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:00:02,612 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:00:02,613 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-12-14 10:00:02,774 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2022-12-14 10:00:02,774 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 10:00:02,776 INFO L263 TraceCheckSpWp]: Trace formula consists of 223 conjuncts, 65 conjunts are in the unsatisfiable core [2022-12-14 10:00:02,778 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:00:02,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:00:03,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 10:00:03,091 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 10:00:03,683 INFO L321 Elim1Store]: treesize reduction 19, result has 53.7 percent of original size [2022-12-14 10:00:03,683 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 44 treesize of output 40 [2022-12-14 10:00:03,723 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 20 proven. 28 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 10:00:03,723 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:00:04,166 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:00:04,166 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 103 treesize of output 61 [2022-12-14 10:00:04,187 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:00:04,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 6 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 111 treesize of output 119 [2022-12-14 10:00:04,192 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 6 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 0 case distinctions, treesize of input 43 treesize of output 29 [2022-12-14 10:00:04,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:00:04,824 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 32 proven. 16 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 10:00:04,824 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [235592305] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:00:04,825 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [899113207] [2022-12-14 10:00:04,826 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 10:00:04,826 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:00:04,826 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:00:04,826 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:00:04,826 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:00:04,856 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:00:04,859 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:00:04,860 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 10:00:04,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:00:04,919 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:00:04,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 10:00:04,974 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 10:00:04,975 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 10:00:05,232 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:00:08,172 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6481#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-12-14 10:00:08,172 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:00:08,172 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:00:08,173 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 18] total 51 [2022-12-14 10:00:08,173 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1891747099] [2022-12-14 10:00:08,173 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:00:08,173 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2022-12-14 10:00:08,173 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:00:08,174 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2022-12-14 10:00:08,175 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=226, Invalid=3422, Unknown=12, NotChecked=0, Total=3660 [2022-12-14 10:00:08,175 INFO L87 Difference]: Start difference. First operand 171 states and 202 transitions. Second operand has 51 states, 51 states have (on average 1.4705882352941178) internal successors, (75), 51 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:18,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:00:18,023 INFO L93 Difference]: Finished difference Result 316 states and 348 transitions. [2022-12-14 10:00:18,023 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2022-12-14 10:00:18,024 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 51 states have (on average 1.4705882352941178) internal successors, (75), 51 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-12-14 10:00:18,024 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:00:18,025 INFO L225 Difference]: With dead ends: 316 [2022-12-14 10:00:18,025 INFO L226 Difference]: Without dead ends: 315 [2022-12-14 10:00:18,026 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 40 SyntacticMatches, 1 SemanticMatches, 112 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2808 ImplicationChecksByTransitivity, 13.3s TimeCoverageRelationStatistics Valid=1515, Invalid=11354, Unknown=13, NotChecked=0, Total=12882 [2022-12-14 10:00:18,026 INFO L413 NwaCegarLoop]: 27 mSDtfsCounter, 1338 mSDsluCounter, 641 mSDsCounter, 0 mSdLazyCounter, 1809 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1338 SdHoareTripleChecker+Valid, 668 SdHoareTripleChecker+Invalid, 1849 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 1809 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-12-14 10:00:18,027 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1338 Valid, 668 Invalid, 1849 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 1809 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-12-14 10:00:18,027 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 315 states. [2022-12-14 10:00:18,030 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 315 to 212. [2022-12-14 10:00:18,030 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 212 states, 208 states have (on average 1.2067307692307692) internal successors, (251), 211 states have internal predecessors, (251), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:18,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 212 states to 212 states and 251 transitions. [2022-12-14 10:00:18,030 INFO L78 Accepts]: Start accepts. Automaton has 212 states and 251 transitions. Word has length 28 [2022-12-14 10:00:18,030 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:00:18,031 INFO L495 AbstractCegarLoop]: Abstraction has 212 states and 251 transitions. [2022-12-14 10:00:18,031 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 51 states have (on average 1.4705882352941178) internal successors, (75), 51 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:18,031 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 251 transitions. [2022-12-14 10:00:18,031 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-12-14 10:00:18,031 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:00:18,031 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:00:18,036 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2022-12-14 10:00:18,232 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable26,19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:00:18,233 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:00:18,233 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:00:18,234 INFO L85 PathProgramCache]: Analyzing trace with hash -1271600075, now seen corresponding path program 1 times [2022-12-14 10:00:18,234 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:00:18,234 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [167489610] [2022-12-14 10:00:18,235 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:00:18,235 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:00:18,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:00:18,653 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 4 proven. 24 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:00:18,654 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:00:18,654 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [167489610] [2022-12-14 10:00:18,654 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [167489610] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:00:18,654 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1071282597] [2022-12-14 10:00:18,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:00:18,654 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:00:18,654 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:00:18,655 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:00:18,656 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-12-14 10:00:18,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:00:18,724 INFO L263 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 27 conjunts are in the unsatisfiable core [2022-12-14 10:00:18,725 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:00:18,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:00:18,986 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 10:00:18,987 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:00:18,988 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 10:00:19,011 INFO L134 CoverageAnalysis]: Checked inductivity of 28 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2022-12-14 10:00:19,012 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 10:00:19,012 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1071282597] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 10:00:19,012 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 10:00:19,012 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [15] total 23 [2022-12-14 10:00:19,012 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [436021169] [2022-12-14 10:00:19,012 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 10:00:19,012 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-12-14 10:00:19,012 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:00:19,013 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-12-14 10:00:19,013 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=52, Invalid=454, Unknown=0, NotChecked=0, Total=506 [2022-12-14 10:00:19,013 INFO L87 Difference]: Start difference. First operand 212 states and 251 transitions. Second operand has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:19,204 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:00:19,204 INFO L93 Difference]: Finished difference Result 258 states and 299 transitions. [2022-12-14 10:00:19,204 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 10:00:19,205 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-12-14 10:00:19,205 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:00:19,205 INFO L225 Difference]: With dead ends: 258 [2022-12-14 10:00:19,205 INFO L226 Difference]: Without dead ends: 214 [2022-12-14 10:00:19,206 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 48 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 105 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=93, Invalid=663, Unknown=0, NotChecked=0, Total=756 [2022-12-14 10:00:19,206 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 50 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 86 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 50 SdHoareTripleChecker+Valid, 82 SdHoareTripleChecker+Invalid, 88 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 86 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 10:00:19,206 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [50 Valid, 82 Invalid, 88 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 86 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 10:00:19,207 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 214 states. [2022-12-14 10:00:19,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 214 to 213. [2022-12-14 10:00:19,210 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 213 states, 209 states have (on average 1.200956937799043) internal successors, (251), 212 states have internal predecessors, (251), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:19,211 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 213 states to 213 states and 251 transitions. [2022-12-14 10:00:19,211 INFO L78 Accepts]: Start accepts. Automaton has 213 states and 251 transitions. Word has length 29 [2022-12-14 10:00:19,211 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:00:19,211 INFO L495 AbstractCegarLoop]: Abstraction has 213 states and 251 transitions. [2022-12-14 10:00:19,211 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 2.0) internal successors, (18), 9 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:19,211 INFO L276 IsEmpty]: Start isEmpty. Operand 213 states and 251 transitions. [2022-12-14 10:00:19,212 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-12-14 10:00:19,212 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:00:19,212 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:00:19,216 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2022-12-14 10:00:19,412 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2022-12-14 10:00:19,413 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:00:19,413 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:00:19,414 INFO L85 PathProgramCache]: Analyzing trace with hash -412856205, now seen corresponding path program 6 times [2022-12-14 10:00:19,414 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:00:19,414 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [858406220] [2022-12-14 10:00:19,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:00:19,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:00:19,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:00:20,712 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 27 proven. 33 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 10:00:20,712 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:00:20,712 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [858406220] [2022-12-14 10:00:20,712 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [858406220] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:00:20,712 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1663252787] [2022-12-14 10:00:20,712 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 10:00:20,713 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:00:20,713 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:00:20,713 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:00:20,714 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-12-14 10:00:20,821 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 10:00:20,821 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 10:00:20,823 INFO L263 TraceCheckSpWp]: Trace formula consists of 236 conjuncts, 84 conjunts are in the unsatisfiable core [2022-12-14 10:00:20,825 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:00:20,834 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:00:21,236 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 10:00:21,321 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 10:00:21,757 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:00:21,757 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 10 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 47 treesize of output 23 [2022-12-14 10:00:21,760 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 15 proven. 45 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 10:00:21,760 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:00:22,008 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:00:22,009 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 129 treesize of output 73 [2022-12-14 10:00:22,029 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:00:22,029 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 136 treesize of output 148 [2022-12-14 10:00:22,033 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 10 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 0 case distinctions, treesize of input 54 treesize of output 36 [2022-12-14 10:00:22,892 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:00:22,896 INFO L134 CoverageAnalysis]: Checked inductivity of 61 backedges. 35 proven. 25 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 10:00:22,896 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1663252787] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:00:22,896 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1894711971] [2022-12-14 10:00:22,897 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 10:00:22,897 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:00:22,897 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:00:22,897 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:00:22,898 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:00:22,929 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:00:22,935 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:00:22,936 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 10:00:22,959 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:00:22,991 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:00:23,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 10:00:23,053 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 10:00:23,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 10:00:23,310 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:00:25,855 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7941#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-12-14 10:00:25,855 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:00:25,855 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:00:25,855 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 23, 23] total 53 [2022-12-14 10:00:25,855 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [720368879] [2022-12-14 10:00:25,855 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:00:25,856 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 54 states [2022-12-14 10:00:25,856 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:00:25,856 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 54 interpolants. [2022-12-14 10:00:25,856 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=326, Invalid=3706, Unknown=0, NotChecked=0, Total=4032 [2022-12-14 10:00:25,856 INFO L87 Difference]: Start difference. First operand 213 states and 251 transitions. Second operand has 54 states, 54 states have (on average 1.3333333333333333) internal successors, (72), 53 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:32,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:00:32,422 INFO L93 Difference]: Finished difference Result 400 states and 461 transitions. [2022-12-14 10:00:32,422 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 69 states. [2022-12-14 10:00:32,422 INFO L78 Accepts]: Start accepts. Automaton has has 54 states, 54 states have (on average 1.3333333333333333) internal successors, (72), 53 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-12-14 10:00:32,422 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:00:32,423 INFO L225 Difference]: With dead ends: 400 [2022-12-14 10:00:32,423 INFO L226 Difference]: Without dead ends: 387 [2022-12-14 10:00:32,424 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 169 GetRequests, 46 SyntacticMatches, 2 SemanticMatches, 121 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4178 ImplicationChecksByTransitivity, 9.8s TimeCoverageRelationStatistics Valid=1854, Invalid=13152, Unknown=0, NotChecked=0, Total=15006 [2022-12-14 10:00:32,424 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 1216 mSDsluCounter, 659 mSDsCounter, 0 mSdLazyCounter, 1989 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1216 SdHoareTripleChecker+Valid, 689 SdHoareTripleChecker+Invalid, 2021 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 1989 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2022-12-14 10:00:32,424 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1216 Valid, 689 Invalid, 2021 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 1989 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2022-12-14 10:00:32,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 387 states. [2022-12-14 10:00:32,427 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 387 to 244. [2022-12-14 10:00:32,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 244 states, 240 states have (on average 1.2083333333333333) internal successors, (290), 243 states have internal predecessors, (290), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:32,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 290 transitions. [2022-12-14 10:00:32,428 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 290 transitions. Word has length 30 [2022-12-14 10:00:32,428 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:00:32,428 INFO L495 AbstractCegarLoop]: Abstraction has 244 states and 290 transitions. [2022-12-14 10:00:32,428 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 54 states, 54 states have (on average 1.3333333333333333) internal successors, (72), 53 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:32,428 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 290 transitions. [2022-12-14 10:00:32,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-12-14 10:00:32,428 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:00:32,429 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:00:32,433 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Ended with exit code 0 [2022-12-14 10:00:32,629 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-12-14 10:00:32,630 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:00:32,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:00:32,631 INFO L85 PathProgramCache]: Analyzing trace with hash 1562209954, now seen corresponding path program 1 times [2022-12-14 10:00:32,631 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:00:32,631 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [960532073] [2022-12-14 10:00:32,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:00:32,632 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:00:32,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:00:33,065 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 4 proven. 24 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 10:00:33,065 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:00:33,065 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [960532073] [2022-12-14 10:00:33,065 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [960532073] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:00:33,065 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1988205163] [2022-12-14 10:00:33,065 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:00:33,066 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:00:33,066 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:00:33,066 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:00:33,067 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-12-14 10:00:33,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:00:33,222 INFO L263 TraceCheckSpWp]: Trace formula consists of 244 conjuncts, 48 conjunts are in the unsatisfiable core [2022-12-14 10:00:33,223 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:00:33,230 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:00:33,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 9 treesize of output 11 [2022-12-14 10:00:33,236 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:00:33,614 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 10:00:33,615 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:00:34,151 INFO L134 CoverageAnalysis]: Checked inductivity of 29 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 10:00:34,151 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1988205163] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:00:34,151 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1084586651] [2022-12-14 10:00:34,152 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-12-14 10:00:34,152 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:00:34,153 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:00:34,153 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:00:34,153 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:00:34,178 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:00:34,182 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:00:34,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 10:00:34,209 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:00:34,233 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:00:34,252 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:00:34,299 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 10:00:34,299 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-12-14 10:00:34,340 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:00:34,356 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:00:34,430 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-12-14 10:00:34,431 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-12-14 10:00:34,565 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-12-14 10:00:34,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-12-14 10:00:35,210 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-12-14 10:00:35,227 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-12-14 10:00:35,291 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:00:35,291 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:00:35,347 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-12-14 10:00:35,358 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:00:38,921 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8936#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 10:00:38,921 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:00:38,921 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:00:38,921 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 15, 15] total 42 [2022-12-14 10:00:38,921 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1696734586] [2022-12-14 10:00:38,921 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:00:38,922 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-12-14 10:00:38,922 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:00:38,922 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-12-14 10:00:38,922 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=242, Invalid=3064, Unknown=0, NotChecked=0, Total=3306 [2022-12-14 10:00:38,923 INFO L87 Difference]: Start difference. First operand 244 states and 290 transitions. Second operand has 43 states, 42 states have (on average 2.1666666666666665) internal successors, (91), 43 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:40,452 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:00:40,453 INFO L93 Difference]: Finished difference Result 361 states and 411 transitions. [2022-12-14 10:00:40,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-12-14 10:00:40,453 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 42 states have (on average 2.1666666666666665) internal successors, (91), 43 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-12-14 10:00:40,453 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:00:40,453 INFO L225 Difference]: With dead ends: 361 [2022-12-14 10:00:40,454 INFO L226 Difference]: Without dead ends: 332 [2022-12-14 10:00:40,454 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 49 SyntacticMatches, 1 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1672 ImplicationChecksByTransitivity, 5.5s TimeCoverageRelationStatistics Valid=814, Invalid=6326, Unknown=0, NotChecked=0, Total=7140 [2022-12-14 10:00:40,455 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 861 mSDsluCounter, 271 mSDsCounter, 0 mSdLazyCounter, 918 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 861 SdHoareTripleChecker+Valid, 295 SdHoareTripleChecker+Invalid, 945 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 918 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 10:00:40,455 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [861 Valid, 295 Invalid, 945 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 918 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 10:00:40,455 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 332 states. [2022-12-14 10:00:40,458 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 332 to 284. [2022-12-14 10:00:40,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 284 states, 280 states have (on average 1.1785714285714286) internal successors, (330), 283 states have internal predecessors, (330), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:40,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 284 states to 284 states and 330 transitions. [2022-12-14 10:00:40,458 INFO L78 Accepts]: Start accepts. Automaton has 284 states and 330 transitions. Word has length 31 [2022-12-14 10:00:40,458 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:00:40,459 INFO L495 AbstractCegarLoop]: Abstraction has 284 states and 330 transitions. [2022-12-14 10:00:40,459 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 43 states, 42 states have (on average 2.1666666666666665) internal successors, (91), 43 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:40,459 INFO L276 IsEmpty]: Start isEmpty. Operand 284 states and 330 transitions. [2022-12-14 10:00:40,459 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-12-14 10:00:40,459 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:00:40,459 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:00:40,463 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Ended with exit code 0 [2022-12-14 10:00:40,660 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:00:40,660 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:00:40,661 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:00:40,661 INFO L85 PathProgramCache]: Analyzing trace with hash -1033835958, now seen corresponding path program 3 times [2022-12-14 10:00:40,662 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:00:40,662 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1011472282] [2022-12-14 10:00:40,662 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:00:40,662 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:00:40,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:00:40,883 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 10:00:40,883 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:00:40,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1011472282] [2022-12-14 10:00:40,883 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1011472282] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:00:40,883 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2047034525] [2022-12-14 10:00:40,883 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 10:00:40,883 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:00:40,883 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:00:40,884 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:00:40,885 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-12-14 10:00:40,984 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 10:00:40,984 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 10:00:40,985 INFO L263 TraceCheckSpWp]: Trace formula consists of 250 conjuncts, 37 conjunts are in the unsatisfiable core [2022-12-14 10:00:40,987 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:00:40,995 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 10:00:40,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 10:00:41,080 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 1 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 10:00:41,081 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:00:41,270 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 1 proven. 12 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 10:00:41,270 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2047034525] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:00:41,270 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1674433042] [2022-12-14 10:00:41,271 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 10:00:41,271 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:00:41,271 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:00:41,271 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:00:41,271 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:00:41,305 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:00:41,307 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:00:41,307 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 10:00:41,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:00:41,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:00:41,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:00:41,436 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 10:00:41,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-12-14 10:00:41,483 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:00:41,507 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:00:41,589 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-12-14 10:00:41,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-12-14 10:00:41,725 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-12-14 10:00:41,726 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-12-14 10:00:42,569 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 10:00:42,571 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 10:00:42,573 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 10:00:42,644 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-12-14 10:00:42,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1022 treesize of output 1029 [2022-12-14 10:00:43,191 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-12-14 10:00:43,203 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-12-14 10:00:43,218 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-12-14 10:00:43,253 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:00:43,253 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:00:43,370 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:00:43,370 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:00:43,431 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-12-14 10:00:43,445 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:00:47,129 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '9857#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 10:00:47,129 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:00:47,129 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:00:47,129 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 10] total 26 [2022-12-14 10:00:47,129 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1812743485] [2022-12-14 10:00:47,129 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:00:47,130 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2022-12-14 10:00:47,130 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:00:47,130 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2022-12-14 10:00:47,130 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=1616, Unknown=0, NotChecked=0, Total=1806 [2022-12-14 10:00:47,130 INFO L87 Difference]: Start difference. First operand 284 states and 330 transitions. Second operand has 27 states, 26 states have (on average 2.5384615384615383) internal successors, (66), 27 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:47,581 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:00:47,581 INFO L93 Difference]: Finished difference Result 349 states and 391 transitions. [2022-12-14 10:00:47,582 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 10:00:47,582 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 26 states have (on average 2.5384615384615383) internal successors, (66), 27 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-12-14 10:00:47,582 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:00:47,582 INFO L225 Difference]: With dead ends: 349 [2022-12-14 10:00:47,582 INFO L226 Difference]: Without dead ends: 349 [2022-12-14 10:00:47,583 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 688 ImplicationChecksByTransitivity, 4.2s TimeCoverageRelationStatistics Valid=371, Invalid=2385, Unknown=0, NotChecked=0, Total=2756 [2022-12-14 10:00:47,583 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 276 mSDsluCounter, 111 mSDsCounter, 0 mSdLazyCounter, 471 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 276 SdHoareTripleChecker+Valid, 121 SdHoareTripleChecker+Invalid, 473 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 471 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 10:00:47,583 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [276 Valid, 121 Invalid, 473 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 471 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 10:00:47,583 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 349 states. [2022-12-14 10:00:47,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 349 to 325. [2022-12-14 10:00:47,586 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 325 states, 321 states have (on average 1.158878504672897) internal successors, (372), 324 states have internal predecessors, (372), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:47,587 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 325 states to 325 states and 372 transitions. [2022-12-14 10:00:47,587 INFO L78 Accepts]: Start accepts. Automaton has 325 states and 372 transitions. Word has length 31 [2022-12-14 10:00:47,587 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:00:47,587 INFO L495 AbstractCegarLoop]: Abstraction has 325 states and 372 transitions. [2022-12-14 10:00:47,587 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 26 states have (on average 2.5384615384615383) internal successors, (66), 27 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:00:47,587 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 372 transitions. [2022-12-14 10:00:47,588 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-12-14 10:00:47,588 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:00:47,588 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:00:47,592 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2022-12-14 10:00:47,788 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:00:47,788 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:00:47,788 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:00:47,788 INFO L85 PathProgramCache]: Analyzing trace with hash -1586225425, now seen corresponding path program 7 times [2022-12-14 10:00:47,789 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:00:47,789 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [483070765] [2022-12-14 10:00:47,789 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:00:47,789 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:00:47,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:00:48,335 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 56 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:00:48,335 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:00:48,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [483070765] [2022-12-14 10:00:48,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [483070765] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:00:48,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1941178403] [2022-12-14 10:00:48,335 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 10:00:48,335 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:00:48,335 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:00:48,336 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:00:48,337 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-12-14 10:00:48,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:00:48,419 INFO L263 TraceCheckSpWp]: Trace formula consists of 249 conjuncts, 85 conjunts are in the unsatisfiable core [2022-12-14 10:00:48,422 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:00:48,446 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:00:48,767 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 10:00:48,831 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 10:01:14,089 INFO L321 Elim1Store]: treesize reduction 27, result has 55.7 percent of original size [2022-12-14 10:01:14,089 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 0 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 71 treesize of output 60 [2022-12-14 10:01:14,127 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 8 proven. 41 refuted. 23 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:01:14,128 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:01:20,502 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:01:20,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 155 treesize of output 85 [2022-12-14 10:01:20,524 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:01:20,525 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 0 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 161 treesize of output 177 [2022-12-14 10:01:20,566 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:01:20,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 0 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 65 treesize of output 43 [2022-12-14 10:01:22,007 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:01:22,009 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-12-14 10:01:22,033 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 36 proven. 36 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:01:22,033 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1941178403] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:01:22,033 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [898964030] [2022-12-14 10:01:22,034 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 10:01:22,034 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:01:22,034 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:01:22,034 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:01:22,035 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:01:22,063 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:01:22,066 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:01:22,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 10:01:22,094 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:01:22,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:01:22,149 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 10:01:22,183 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 10:01:22,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 10:01:22,444 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:01:25,390 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10819#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-12-14 10:01:25,390 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:01:25,390 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:01:25,390 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 25, 25] total 66 [2022-12-14 10:01:25,390 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1481166248] [2022-12-14 10:01:25,390 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:01:25,390 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 66 states [2022-12-14 10:01:25,391 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:01:25,391 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 66 interpolants. [2022-12-14 10:01:25,391 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=376, Invalid=5285, Unknown=39, NotChecked=0, Total=5700 [2022-12-14 10:01:25,391 INFO L87 Difference]: Start difference. First operand 325 states and 372 transitions. Second operand has 66 states, 66 states have (on average 1.4090909090909092) internal successors, (93), 66 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:02:27,152 WARN L233 SmtUtils]: Spent 6.69s on a formula simplification. DAG size of input: 138 DAG size of output: 99 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 10:02:39,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:02:39,363 INFO L93 Difference]: Finished difference Result 695 states and 773 transitions. [2022-12-14 10:02:39,363 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 95 states. [2022-12-14 10:02:39,363 INFO L78 Accepts]: Start accepts. Automaton has has 66 states, 66 states have (on average 1.4090909090909092) internal successors, (93), 66 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2022-12-14 10:02:39,363 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:02:39,364 INFO L225 Difference]: With dead ends: 695 [2022-12-14 10:02:39,364 INFO L226 Difference]: Without dead ends: 629 [2022-12-14 10:02:39,365 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 205 GetRequests, 38 SyntacticMatches, 1 SemanticMatches, 166 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 6792 ImplicationChecksByTransitivity, 102.5s TimeCoverageRelationStatistics Valid=3375, Invalid=24639, Unknown=42, NotChecked=0, Total=28056 [2022-12-14 10:02:39,366 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 2367 mSDsluCounter, 1072 mSDsCounter, 0 mSdLazyCounter, 4897 mSolverCounterSat, 45 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2367 SdHoareTripleChecker+Valid, 1107 SdHoareTripleChecker+Invalid, 4945 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 4897 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.1s IncrementalHoareTripleChecker+Time [2022-12-14 10:02:39,366 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2367 Valid, 1107 Invalid, 4945 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 4897 Invalid, 3 Unknown, 0 Unchecked, 7.1s Time] [2022-12-14 10:02:39,366 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 629 states. [2022-12-14 10:02:39,370 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 629 to 387. [2022-12-14 10:02:39,370 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 387 states, 383 states have (on average 1.156657963446475) internal successors, (443), 386 states have internal predecessors, (443), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:02:39,370 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 387 states to 387 states and 443 transitions. [2022-12-14 10:02:39,371 INFO L78 Accepts]: Start accepts. Automaton has 387 states and 443 transitions. Word has length 32 [2022-12-14 10:02:39,371 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:02:39,371 INFO L495 AbstractCegarLoop]: Abstraction has 387 states and 443 transitions. [2022-12-14 10:02:39,371 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 66 states, 66 states have (on average 1.4090909090909092) internal successors, (93), 66 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:02:39,371 INFO L276 IsEmpty]: Start isEmpty. Operand 387 states and 443 transitions. [2022-12-14 10:02:39,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-12-14 10:02:39,371 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:02:39,371 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:02:39,376 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Ended with exit code 0 [2022-12-14 10:02:39,572 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable31,24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:02:39,573 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:02:39,573 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:02:39,574 INFO L85 PathProgramCache]: Analyzing trace with hash 1255939773, now seen corresponding path program 1 times [2022-12-14 10:02:39,574 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:02:39,574 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1003133022] [2022-12-14 10:02:39,574 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:02:39,575 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:02:39,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:02:39,974 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 24 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:02:39,974 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:02:39,974 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1003133022] [2022-12-14 10:02:39,974 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1003133022] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:02:39,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2026543144] [2022-12-14 10:02:39,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:02:39,975 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:02:39,975 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:02:39,975 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:02:39,976 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-12-14 10:02:40,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:02:40,056 INFO L263 TraceCheckSpWp]: Trace formula consists of 265 conjuncts, 55 conjunts are in the unsatisfiable core [2022-12-14 10:02:40,057 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:02:40,395 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 1 proven. 23 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:02:40,396 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:02:40,775 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 10:02:41,134 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 4 proven. 20 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:02:41,135 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2026543144] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:02:41,135 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [152534098] [2022-12-14 10:02:41,136 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-12-14 10:02:41,136 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:02:41,137 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:02:41,137 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:02:41,137 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:02:41,169 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:02:41,172 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:02:41,173 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 10:02:41,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:02:41,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:02:41,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:02:41,288 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-12-14 10:02:41,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:02:41,342 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:02:41,414 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-12-14 10:02:41,414 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-12-14 10:02:41,539 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-12-14 10:02:41,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-12-14 10:02:42,156 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-12-14 10:02:42,171 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-12-14 10:02:42,230 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:02:42,231 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:02:42,329 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-12-14 10:02:42,330 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-12-14 10:02:42,463 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:02:42,463 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:02:42,553 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:02:42,554 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:02:42,695 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-12-14 10:02:42,703 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:02:46,983 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12340#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 10:02:46,983 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:02:46,983 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:02:46,983 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 18, 18] total 46 [2022-12-14 10:02:46,983 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [186496437] [2022-12-14 10:02:46,983 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:02:46,984 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2022-12-14 10:02:46,984 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:02:46,984 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2022-12-14 10:02:46,984 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=293, Invalid=3613, Unknown=0, NotChecked=0, Total=3906 [2022-12-14 10:02:46,984 INFO L87 Difference]: Start difference. First operand 387 states and 443 transitions. Second operand has 47 states, 46 states have (on average 1.8478260869565217) internal successors, (85), 47 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:02:50,547 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:02:50,547 INFO L93 Difference]: Finished difference Result 525 states and 589 transitions. [2022-12-14 10:02:50,547 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 52 states. [2022-12-14 10:02:50,547 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 46 states have (on average 1.8478260869565217) internal successors, (85), 47 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-12-14 10:02:50,547 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:02:50,548 INFO L225 Difference]: With dead ends: 525 [2022-12-14 10:02:50,548 INFO L226 Difference]: Without dead ends: 522 [2022-12-14 10:02:50,549 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 161 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 105 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2264 ImplicationChecksByTransitivity, 8.2s TimeCoverageRelationStatistics Valid=1533, Invalid=9809, Unknown=0, NotChecked=0, Total=11342 [2022-12-14 10:02:50,549 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 875 mSDsluCounter, 257 mSDsCounter, 0 mSdLazyCounter, 1080 mSolverCounterSat, 42 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 875 SdHoareTripleChecker+Valid, 269 SdHoareTripleChecker+Invalid, 1122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 42 IncrementalHoareTripleChecker+Valid, 1080 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-12-14 10:02:50,549 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [875 Valid, 269 Invalid, 1122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [42 Valid, 1080 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-12-14 10:02:50,549 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 522 states. [2022-12-14 10:02:50,553 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 522 to 393. [2022-12-14 10:02:50,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 393 states, 389 states have (on average 1.154241645244216) internal successors, (449), 392 states have internal predecessors, (449), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:02:50,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 393 states to 393 states and 449 transitions. [2022-12-14 10:02:50,553 INFO L78 Accepts]: Start accepts. Automaton has 393 states and 449 transitions. Word has length 34 [2022-12-14 10:02:50,554 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:02:50,554 INFO L495 AbstractCegarLoop]: Abstraction has 393 states and 449 transitions. [2022-12-14 10:02:50,554 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 46 states have (on average 1.8478260869565217) internal successors, (85), 47 states have internal predecessors, (85), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:02:50,554 INFO L276 IsEmpty]: Start isEmpty. Operand 393 states and 449 transitions. [2022-12-14 10:02:50,554 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-12-14 10:02:50,554 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:02:50,554 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:02:50,559 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2022-12-14 10:02:50,755 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-12-14 10:02:50,755 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:02:50,756 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:02:50,756 INFO L85 PathProgramCache]: Analyzing trace with hash -1110354547, now seen corresponding path program 2 times [2022-12-14 10:02:50,757 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:02:50,757 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1415278052] [2022-12-14 10:02:50,757 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:02:50,757 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:02:50,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:02:51,218 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 9 proven. 36 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 10:02:51,218 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:02:51,218 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1415278052] [2022-12-14 10:02:51,218 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1415278052] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:02:51,218 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [645407470] [2022-12-14 10:02:51,218 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 10:02:51,218 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:02:51,218 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:02:51,219 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:02:51,220 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-12-14 10:02:51,370 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 10:02:51,370 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 10:02:51,372 INFO L263 TraceCheckSpWp]: Trace formula consists of 255 conjuncts, 97 conjunts are in the unsatisfiable core [2022-12-14 10:02:51,374 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:02:51,419 INFO L321 Elim1Store]: treesize reduction 11, result has 50.0 percent of original size [2022-12-14 10:02:51,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 10:02:51,427 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:02:51,663 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 18 [2022-12-14 10:02:51,739 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 32 treesize of output 31 [2022-12-14 10:02:53,138 INFO L321 Elim1Store]: treesize reduction 12, result has 85.7 percent of original size [2022-12-14 10:02:53,138 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 1 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 7 case distinctions, treesize of input 59 treesize of output 93 [2022-12-14 10:02:53,824 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 9 proven. 20 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-12-14 10:02:53,824 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:02:56,302 INFO L321 Elim1Store]: treesize reduction 105, result has 27.1 percent of original size [2022-12-14 10:02:56,302 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 4 new quantified variables, introduced 7 case distinctions, treesize of input 181 treesize of output 193 [2022-12-14 10:02:56,323 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:02:56,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 49 treesize of output 47 [2022-12-14 10:02:56,352 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:02:56,352 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 4 select indices, 4 select index equivalence classes, 3 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 3 case distinctions, treesize of input 28 treesize of output 38 [2022-12-14 10:02:56,439 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:02:56,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 3 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 7 case distinctions, treesize of input 46 treesize of output 91 [2022-12-14 10:03:00,488 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 10:03:00,499 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 10:03:00,502 WARN L207 Elim1Store]: Array PQE input equivalent to true [2022-12-14 10:03:00,504 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 0 proven. 29 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-12-14 10:03:00,504 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [645407470] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:03:00,504 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2028829000] [2022-12-14 10:03:00,506 INFO L159 IcfgInterpreter]: Started Sifa with 18 locations of interest [2022-12-14 10:03:00,506 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:03:00,506 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:03:00,506 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:03:00,506 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:03:00,534 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:03:00,538 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:03:00,539 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 10:03:00,564 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:03:00,600 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:03:00,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:03:00,654 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-12-14 10:03:00,689 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:03:00,715 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:03:00,841 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-12-14 10:03:00,841 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-12-14 10:03:00,986 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-12-14 10:03:00,987 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-12-14 10:03:01,622 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-12-14 10:03:01,631 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-12-14 10:03:01,699 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:03:01,700 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:03:01,767 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-12-14 10:03:01,779 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:03:06,267 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13621#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~n#1|) (<= |ULTIMATE.start_cstrncat_~d~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|)) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 1) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (= (mod |ULTIMATE.start_cstrncat_~n#1| 4294967296) 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483645) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (not (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|)) 0)) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| (select |#length| |ULTIMATE.start_cstrncat_~s~0#1.base|)) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (= (select |#valid| |ULTIMATE.start_cstrncat_~d~0#1.base|) 1) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (= (select |#valid| |ULTIMATE.start_cstrncat_~s~0#1.base|) 1) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (= (select (select |#memory_int| |ULTIMATE.start_cstrncat_~s~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~s~0#1.offset|)) (select (select |#memory_int| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ (- 1) |ULTIMATE.start_cstrncat_~d~0#1.offset|))) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 10:03:06,268 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:03:06,268 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:03:06,268 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 19, 19] total 54 [2022-12-14 10:03:06,268 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2035491315] [2022-12-14 10:03:06,268 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:03:06,268 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 55 states [2022-12-14 10:03:06,268 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:03:06,269 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 55 interpolants. [2022-12-14 10:03:06,269 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=375, Invalid=4455, Unknown=0, NotChecked=0, Total=4830 [2022-12-14 10:03:06,269 INFO L87 Difference]: Start difference. First operand 393 states and 449 transitions. Second operand has 55 states, 54 states have (on average 1.7037037037037037) internal successors, (92), 55 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:03:49,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:03:49,100 INFO L93 Difference]: Finished difference Result 547 states and 619 transitions. [2022-12-14 10:03:49,100 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 113 states. [2022-12-14 10:03:49,101 INFO L78 Accepts]: Start accepts. Automaton has has 55 states, 54 states have (on average 1.7037037037037037) internal successors, (92), 55 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-12-14 10:03:49,101 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:03:49,101 INFO L225 Difference]: With dead ends: 547 [2022-12-14 10:03:49,101 INFO L226 Difference]: Without dead ends: 522 [2022-12-14 10:03:49,103 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 230 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 178 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9026 ImplicationChecksByTransitivity, 47.1s TimeCoverageRelationStatistics Valid=5240, Invalid=26980, Unknown=0, NotChecked=0, Total=32220 [2022-12-14 10:03:49,103 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 918 mSDsluCounter, 66 mSDsCounter, 0 mSdLazyCounter, 2553 mSolverCounterSat, 145 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 918 SdHoareTripleChecker+Valid, 68 SdHoareTripleChecker+Invalid, 2698 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 145 IncrementalHoareTripleChecker+Valid, 2553 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.4s IncrementalHoareTripleChecker+Time [2022-12-14 10:03:49,103 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [918 Valid, 68 Invalid, 2698 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [145 Valid, 2553 Invalid, 0 Unknown, 0 Unchecked, 4.4s Time] [2022-12-14 10:03:49,104 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 522 states. [2022-12-14 10:03:49,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 522 to 400. [2022-12-14 10:03:49,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 400 states, 396 states have (on average 1.1717171717171717) internal successors, (464), 399 states have internal predecessors, (464), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:03:49,107 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 400 states to 400 states and 464 transitions. [2022-12-14 10:03:49,107 INFO L78 Accepts]: Start accepts. Automaton has 400 states and 464 transitions. Word has length 35 [2022-12-14 10:03:49,107 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:03:49,107 INFO L495 AbstractCegarLoop]: Abstraction has 400 states and 464 transitions. [2022-12-14 10:03:49,108 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 55 states, 54 states have (on average 1.7037037037037037) internal successors, (92), 55 states have internal predecessors, (92), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:03:49,108 INFO L276 IsEmpty]: Start isEmpty. Operand 400 states and 464 transitions. [2022-12-14 10:03:49,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-12-14 10:03:49,108 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:03:49,108 INFO L195 NwaCegarLoop]: trace histogram [7, 7, 7, 7, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:03:49,113 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Ended with exit code 0 [2022-12-14 10:03:49,309 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2022-12-14 10:03:49,309 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:03:49,310 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:03:49,310 INFO L85 PathProgramCache]: Analyzing trace with hash -1925950876, now seen corresponding path program 8 times [2022-12-14 10:03:49,311 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:03:49,311 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [403916974] [2022-12-14 10:03:49,311 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:03:49,311 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:03:49,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:03:50,011 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 25 proven. 73 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:03:50,011 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:03:50,011 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [403916974] [2022-12-14 10:03:50,011 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [403916974] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:03:50,011 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [182271883] [2022-12-14 10:03:50,011 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 10:03:50,011 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:03:50,011 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:03:50,012 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:03:50,013 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-12-14 10:03:50,167 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 8 check-sat command(s) [2022-12-14 10:03:50,167 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 10:03:50,170 INFO L263 TraceCheckSpWp]: Trace formula consists of 273 conjuncts, 95 conjunts are in the unsatisfiable core [2022-12-14 10:03:50,172 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:03:50,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:03:50,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 10:03:50,594 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 10:03:51,773 INFO L321 Elim1Store]: treesize reduction 31, result has 56.3 percent of original size [2022-12-14 10:03:51,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 21 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 68 treesize of output 70 [2022-12-14 10:03:51,775 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-12-14 10:03:51,821 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 7 proven. 91 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:03:51,821 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:03:52,730 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_930 (Array Int Int))) (let ((.cse0 (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_930) |c_ULTIMATE.start_main_~nondetString1~0#1.base|))) (or (= (select .cse0 (+ 6 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ 5 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ 4 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0) (= (select .cse0 (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (= (select .cse0 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|) 0)))) is different from false [2022-12-14 10:03:52,740 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:03:52,740 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 181 treesize of output 97 [2022-12-14 10:03:52,774 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:03:52,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 8 select indices, 8 select index equivalence classes, 21 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 28 case distinctions, treesize of input 186 treesize of output 206 [2022-12-14 10:03:52,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 7 select indices, 7 select index equivalence classes, 21 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 0 case distinctions, treesize of input 76 treesize of output 50 [2022-12-14 10:03:53,336 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-12-14 10:03:53,346 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-12-14 10:03:53,999 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:03:54,018 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 49 proven. 49 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:03:54,018 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [182271883] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:03:54,018 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1494024487] [2022-12-14 10:03:54,019 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 10:03:54,019 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:03:54,019 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:03:54,019 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:03:54,019 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:03:54,042 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:03:54,045 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:03:54,046 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 10:03:54,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:03:54,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:03:54,113 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 10:03:54,144 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 10:03:54,144 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 10:03:54,404 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:03:57,420 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15087#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-12-14 10:03:57,420 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:03:57,420 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:03:57,420 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 28, 28] total 74 [2022-12-14 10:03:57,420 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1663752227] [2022-12-14 10:03:57,420 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:03:57,420 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 74 states [2022-12-14 10:03:57,420 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:03:57,421 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 74 interpolants. [2022-12-14 10:03:57,422 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=394, Invalid=6415, Unknown=1, NotChecked=162, Total=6972 [2022-12-14 10:03:57,422 INFO L87 Difference]: Start difference. First operand 400 states and 464 transitions. Second operand has 74 states, 74 states have (on average 1.4189189189189189) internal successors, (105), 74 states have internal predecessors, (105), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:04:06,871 WARN L233 SmtUtils]: Spent 6.30s on a formula simplification. DAG size of input: 85 DAG size of output: 78 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 10:04:14,606 WARN L233 SmtUtils]: Spent 6.27s on a formula simplification. DAG size of input: 85 DAG size of output: 78 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 10:04:27,964 WARN L233 SmtUtils]: Spent 6.34s on a formula simplification. DAG size of input: 85 DAG size of output: 78 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 10:04:37,188 WARN L233 SmtUtils]: Spent 6.26s on a formula simplification. DAG size of input: 85 DAG size of output: 78 (called from [L 361] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2022-12-14 10:05:03,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:05:03,101 INFO L93 Difference]: Finished difference Result 848 states and 929 transitions. [2022-12-14 10:05:03,101 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 122 states. [2022-12-14 10:05:03,102 INFO L78 Accepts]: Start accepts. Automaton has has 74 states, 74 states have (on average 1.4189189189189189) internal successors, (105), 74 states have internal predecessors, (105), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-12-14 10:05:03,102 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:05:03,103 INFO L225 Difference]: With dead ends: 848 [2022-12-14 10:05:03,103 INFO L226 Difference]: Without dead ends: 796 [2022-12-14 10:05:03,105 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 246 GetRequests, 44 SyntacticMatches, 1 SemanticMatches, 201 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 10104 ImplicationChecksByTransitivity, 63.7s TimeCoverageRelationStatistics Valid=3616, Invalid=36987, Unknown=3, NotChecked=400, Total=41006 [2022-12-14 10:05:03,106 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 2999 mSDsluCounter, 1657 mSDsCounter, 0 mSdLazyCounter, 6888 mSolverCounterSat, 65 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2999 SdHoareTripleChecker+Valid, 1706 SdHoareTripleChecker+Invalid, 7258 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 6888 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 301 IncrementalHoareTripleChecker+Unchecked, 8.1s IncrementalHoareTripleChecker+Time [2022-12-14 10:05:03,106 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2999 Valid, 1706 Invalid, 7258 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 6888 Invalid, 4 Unknown, 301 Unchecked, 8.1s Time] [2022-12-14 10:05:03,106 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 796 states. [2022-12-14 10:05:03,110 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 796 to 431. [2022-12-14 10:05:03,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 431 states, 427 states have (on average 1.161592505854801) internal successors, (496), 430 states have internal predecessors, (496), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:05:03,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 431 states to 431 states and 496 transitions. [2022-12-14 10:05:03,111 INFO L78 Accepts]: Start accepts. Automaton has 431 states and 496 transitions. Word has length 36 [2022-12-14 10:05:03,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:05:03,111 INFO L495 AbstractCegarLoop]: Abstraction has 431 states and 496 transitions. [2022-12-14 10:05:03,111 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 74 states, 74 states have (on average 1.4189189189189189) internal successors, (105), 74 states have internal predecessors, (105), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:05:03,111 INFO L276 IsEmpty]: Start isEmpty. Operand 431 states and 496 transitions. [2022-12-14 10:05:03,111 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2022-12-14 10:05:03,112 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:05:03,112 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:05:03,116 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Ended with exit code 0 [2022-12-14 10:05:03,312 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable34,27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:05:03,313 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:05:03,313 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:05:03,314 INFO L85 PathProgramCache]: Analyzing trace with hash -2016713153, now seen corresponding path program 4 times [2022-12-14 10:05:03,314 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:05:03,315 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1543989138] [2022-12-14 10:05:03,315 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:05:03,315 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:05:03,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:05:03,526 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 12 proven. 13 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 10:05:03,527 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:05:03,527 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1543989138] [2022-12-14 10:05:03,527 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1543989138] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:05:03,527 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1660934352] [2022-12-14 10:05:03,527 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 10:05:03,527 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:05:03,527 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:05:03,528 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:05:03,529 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-12-14 10:05:03,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:05:03,635 INFO L263 TraceCheckSpWp]: Trace formula consists of 282 conjuncts, 74 conjunts are in the unsatisfiable core [2022-12-14 10:05:03,638 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:05:03,641 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:05:03,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:05:03,893 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 24 [2022-12-14 10:05:04,034 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 25 [2022-12-14 10:05:04,120 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 10:05:04,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 10:05:04,143 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 8 proven. 17 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 10:05:04,143 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:05:04,351 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_987 (Array Int Int))) (= 0 (select (select (store |c_#memory_int| |c_ULTIMATE.start_cstrncat_~d~0#1.base| v_ArrVal_987) |c_ULTIMATE.start_cstrncat_~s~0#1.base|) (+ |c_ULTIMATE.start_cstrncat_~s~0#1.offset| 2)))) is different from false [2022-12-14 10:05:04,523 INFO L321 Elim1Store]: treesize reduction 19, result has 64.2 percent of original size [2022-12-14 10:05:04,523 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 58 treesize of output 76 [2022-12-14 10:05:04,546 INFO L321 Elim1Store]: treesize reduction 11, result has 70.3 percent of original size [2022-12-14 10:05:04,546 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 59 treesize of output 67 [2022-12-14 10:05:04,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:05:04,662 INFO L134 CoverageAnalysis]: Checked inductivity of 34 backedges. 9 proven. 14 refuted. 0 times theorem prover too weak. 9 trivial. 2 not checked. [2022-12-14 10:05:04,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1660934352] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:05:04,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [839795078] [2022-12-14 10:05:04,663 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 10:05:04,663 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:05:04,664 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:05:04,664 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:05:04,664 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:05:04,694 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:05:04,698 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:05:04,698 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 10:05:04,732 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:05:04,754 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:05:04,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:05:04,805 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-12-14 10:05:04,837 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:05:04,855 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:05:04,944 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-12-14 10:05:04,945 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-12-14 10:05:05,082 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-12-14 10:05:05,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-12-14 10:05:05,924 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 10:05:05,926 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 10:05:05,930 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 10:05:06,001 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-12-14 10:05:06,002 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1036 treesize of output 1019 [2022-12-14 10:05:06,241 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-12-14 10:05:06,243 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-12-14 10:05:06,249 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-12-14 10:05:06,254 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 34 iterations. Over-approximation may be very coarse. [2022-12-14 10:05:06,496 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-12-14 10:05:06,536 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:05:06,537 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:05:06,673 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:05:06,674 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:05:06,761 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-12-14 10:05:06,778 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:05:11,789 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '16864#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|))' at error location [2022-12-14 10:05:11,789 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:05:11,789 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:05:11,789 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 19, 18] total 40 [2022-12-14 10:05:11,789 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1566904274] [2022-12-14 10:05:11,789 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:05:11,790 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 40 states [2022-12-14 10:05:11,790 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:05:11,790 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 40 interpolants. [2022-12-14 10:05:11,790 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=215, Invalid=2730, Unknown=29, NotChecked=106, Total=3080 [2022-12-14 10:05:11,790 INFO L87 Difference]: Start difference. First operand 431 states and 496 transitions. Second operand has 40 states, 40 states have (on average 1.95) internal successors, (78), 40 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:05:15,139 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 10:05:17,302 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 10:05:19,485 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 10:05:19,750 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:05:19,750 INFO L93 Difference]: Finished difference Result 652 states and 726 transitions. [2022-12-14 10:05:19,750 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2022-12-14 10:05:19,750 INFO L78 Accepts]: Start accepts. Automaton has has 40 states, 40 states have (on average 1.95) internal successors, (78), 40 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 36 [2022-12-14 10:05:19,750 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:05:19,751 INFO L225 Difference]: With dead ends: 652 [2022-12-14 10:05:19,751 INFO L226 Difference]: Without dead ends: 484 [2022-12-14 10:05:19,752 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 152 GetRequests, 61 SyntacticMatches, 2 SemanticMatches, 89 ConstructedPredicates, 1 IntricatePredicates, 2 DeprecatedPredicates, 2137 ImplicationChecksByTransitivity, 7.1s TimeCoverageRelationStatistics Valid=743, Invalid=7242, Unknown=29, NotChecked=176, Total=8190 [2022-12-14 10:05:19,752 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 264 mSDsluCounter, 366 mSDsCounter, 0 mSdLazyCounter, 945 mSolverCounterSat, 13 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 264 SdHoareTripleChecker+Valid, 391 SdHoareTripleChecker+Invalid, 1037 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 945 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 75 IncrementalHoareTripleChecker+Unchecked, 6.6s IncrementalHoareTripleChecker+Time [2022-12-14 10:05:19,752 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [264 Valid, 391 Invalid, 1037 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 945 Invalid, 4 Unknown, 75 Unchecked, 6.6s Time] [2022-12-14 10:05:19,753 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 484 states. [2022-12-14 10:05:19,755 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 484 to 451. [2022-12-14 10:05:19,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 451 states, 447 states have (on average 1.1610738255033557) internal successors, (519), 450 states have internal predecessors, (519), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:05:19,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 451 states to 451 states and 519 transitions. [2022-12-14 10:05:19,756 INFO L78 Accepts]: Start accepts. Automaton has 451 states and 519 transitions. Word has length 36 [2022-12-14 10:05:19,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:05:19,756 INFO L495 AbstractCegarLoop]: Abstraction has 451 states and 519 transitions. [2022-12-14 10:05:19,757 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 40 states, 40 states have (on average 1.95) internal successors, (78), 40 states have internal predecessors, (78), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:05:19,757 INFO L276 IsEmpty]: Start isEmpty. Operand 451 states and 519 transitions. [2022-12-14 10:05:19,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-12-14 10:05:19,757 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:05:19,757 INFO L195 NwaCegarLoop]: trace histogram [8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:05:19,762 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Ended with exit code 0 [2022-12-14 10:05:19,959 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable35,28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:05:19,960 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:05:19,961 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:05:19,961 INFO L85 PathProgramCache]: Analyzing trace with hash 787537561, now seen corresponding path program 9 times [2022-12-14 10:05:19,961 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:05:19,962 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [537757095] [2022-12-14 10:05:19,962 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:05:19,963 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:05:19,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:05:20,645 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 36 proven. 92 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:05:20,645 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:05:20,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [537757095] [2022-12-14 10:05:20,645 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [537757095] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:05:20,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [810701393] [2022-12-14 10:05:20,645 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 10:05:20,645 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:05:20,645 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:05:20,646 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:05:20,647 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-12-14 10:05:20,766 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 10:05:20,766 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 10:05:20,769 INFO L263 TraceCheckSpWp]: Trace formula consists of 297 conjuncts, 110 conjunts are in the unsatisfiable core [2022-12-14 10:05:20,771 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:05:20,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:05:21,120 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 10:05:21,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 10:05:22,978 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:05:22,980 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:05:22,981 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:05:22,983 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:05:22,984 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:05:22,985 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:05:22,986 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:05:23,031 INFO L321 Elim1Store]: treesize reduction 28, result has 65.9 percent of original size [2022-12-14 10:05:23,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 8 case distinctions, treesize of input 78 treesize of output 88 [2022-12-14 10:05:23,038 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-12-14 10:05:23,050 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-12-14 10:05:23,199 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 0 proven. 128 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:05:23,199 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:05:25,114 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:05:25,115 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 207 treesize of output 109 [2022-12-14 10:05:25,157 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:05:25,157 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 9 select indices, 9 select index equivalence classes, 28 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 8 case distinctions, treesize of input 211 treesize of output 235 [2022-12-14 10:05:25,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 8 select indices, 8 select index equivalence classes, 28 disjoint index pairs (out of 28 index pairs), introduced 8 new quantified variables, introduced 0 case distinctions, treesize of input 87 treesize of output 57 [2022-12-14 10:05:25,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-12-14 10:05:25,272 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-12-14 10:05:25,278 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-12-14 10:05:25,636 INFO L134 CoverageAnalysis]: Checked inductivity of 128 backedges. 0 proven. 79 refuted. 0 times theorem prover too weak. 49 trivial. 0 not checked. [2022-12-14 10:05:25,637 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [810701393] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:05:25,637 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1237958970] [2022-12-14 10:05:25,638 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 10:05:25,638 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:05:25,638 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:05:25,638 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:05:25,638 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:05:25,664 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:05:25,666 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:05:25,667 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 10:05:25,693 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:05:25,725 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:05:25,743 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 10:05:25,776 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 10:05:25,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 10:05:26,037 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:05:30,318 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18363#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-12-14 10:05:30,318 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:05:30,318 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:05:30,318 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 31, 23] total 75 [2022-12-14 10:05:30,318 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1236574156] [2022-12-14 10:05:30,318 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:05:30,318 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 76 states [2022-12-14 10:05:30,318 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:05:30,319 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 76 interpolants. [2022-12-14 10:05:30,320 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=541, Invalid=6768, Unknown=1, NotChecked=0, Total=7310 [2022-12-14 10:05:30,320 INFO L87 Difference]: Start difference. First operand 451 states and 519 transitions. Second operand has 76 states, 75 states have (on average 1.4133333333333333) internal successors, (106), 76 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:06:19,892 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:06:19,892 INFO L93 Difference]: Finished difference Result 1310 states and 1445 transitions. [2022-12-14 10:06:19,892 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 147 states. [2022-12-14 10:06:19,893 INFO L78 Accepts]: Start accepts. Automaton has has 76 states, 75 states have (on average 1.4133333333333333) internal successors, (106), 76 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-12-14 10:06:19,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:06:19,894 INFO L225 Difference]: With dead ends: 1310 [2022-12-14 10:06:19,894 INFO L226 Difference]: Without dead ends: 1269 [2022-12-14 10:06:19,896 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 286 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 229 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14003 ImplicationChecksByTransitivity, 42.3s TimeCoverageRelationStatistics Valid=4816, Invalid=48313, Unknown=1, NotChecked=0, Total=53130 [2022-12-14 10:06:19,897 INFO L413 NwaCegarLoop]: 55 mSDtfsCounter, 3164 mSDsluCounter, 2222 mSDsCounter, 0 mSdLazyCounter, 9509 mSolverCounterSat, 198 mSolverCounterUnsat, 7 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3164 SdHoareTripleChecker+Valid, 2277 SdHoareTripleChecker+Invalid, 9714 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 198 IncrementalHoareTripleChecker+Valid, 9509 IncrementalHoareTripleChecker+Invalid, 7 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.5s IncrementalHoareTripleChecker+Time [2022-12-14 10:06:19,897 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [3164 Valid, 2277 Invalid, 9714 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [198 Valid, 9509 Invalid, 7 Unknown, 0 Unchecked, 15.5s Time] [2022-12-14 10:06:19,897 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1269 states. [2022-12-14 10:06:19,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1269 to 598. [2022-12-14 10:06:19,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 598 states, 594 states have (on average 1.1734006734006734) internal successors, (697), 597 states have internal predecessors, (697), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:06:19,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 598 states to 598 states and 697 transitions. [2022-12-14 10:06:19,904 INFO L78 Accepts]: Start accepts. Automaton has 598 states and 697 transitions. Word has length 40 [2022-12-14 10:06:19,904 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:06:19,904 INFO L495 AbstractCegarLoop]: Abstraction has 598 states and 697 transitions. [2022-12-14 10:06:19,905 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 76 states, 75 states have (on average 1.4133333333333333) internal successors, (106), 76 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:06:19,905 INFO L276 IsEmpty]: Start isEmpty. Operand 598 states and 697 transitions. [2022-12-14 10:06:19,905 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-12-14 10:06:19,905 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:06:19,905 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:06:19,910 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Ended with exit code 0 [2022-12-14 10:06:20,106 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-12-14 10:06:20,106 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:06:20,107 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:06:20,107 INFO L85 PathProgramCache]: Analyzing trace with hash 1218203630, now seen corresponding path program 5 times [2022-12-14 10:06:20,108 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:06:20,108 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [700571044] [2022-12-14 10:06:20,108 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:06:20,108 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:06:20,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:06:20,423 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 1 proven. 29 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 10:06:20,423 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:06:20,423 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [700571044] [2022-12-14 10:06:20,423 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [700571044] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:06:20,423 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [742702596] [2022-12-14 10:06:20,423 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 10:06:20,424 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:06:20,424 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:06:20,424 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:06:20,425 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-12-14 10:06:20,551 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-12-14 10:06:20,551 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 10:06:20,553 INFO L263 TraceCheckSpWp]: Trace formula consists of 295 conjuncts, 41 conjunts are in the unsatisfiable core [2022-12-14 10:06:20,554 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:06:20,714 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 4 proven. 26 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 10:06:20,715 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:06:20,872 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 10:06:20,921 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 4 proven. 26 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 10:06:20,921 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [742702596] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:06:20,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [279284853] [2022-12-14 10:06:20,922 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 10:06:20,922 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:06:20,923 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:06:20,923 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:06:20,923 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:06:20,950 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:06:20,954 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:06:20,955 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 10:06:20,992 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:06:21,025 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:06:21,044 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:06:21,077 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 91 treesize of output 83 [2022-12-14 10:06:21,109 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:06:21,126 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:06:21,200 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-12-14 10:06:21,200 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-12-14 10:06:21,349 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-12-14 10:06:21,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-12-14 10:06:22,203 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 10:06:22,205 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 10:06:22,207 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 10:06:22,263 INFO L321 Elim1Store]: treesize reduction 237, result has 19.7 percent of original size [2022-12-14 10:06:22,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 14 case distinctions, treesize of input 1032 treesize of output 1029 [2022-12-14 10:06:22,794 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-12-14 10:06:22,822 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-12-14 10:06:22,830 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 33 iterations. Over-approximation may be very coarse. [2022-12-14 10:06:22,869 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:06:22,870 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:06:22,983 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:06:22,984 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:06:23,066 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-12-14 10:06:23,096 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:06:28,027 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '20837#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (< (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|) (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1)) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 10:06:28,028 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:06:28,028 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:06:28,028 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12, 12] total 31 [2022-12-14 10:06:28,028 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [631961647] [2022-12-14 10:06:28,028 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:06:28,028 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-12-14 10:06:28,028 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:06:28,029 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-12-14 10:06:28,029 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=235, Invalid=2021, Unknown=0, NotChecked=0, Total=2256 [2022-12-14 10:06:28,029 INFO L87 Difference]: Start difference. First operand 598 states and 697 transitions. Second operand has 32 states, 31 states have (on average 2.838709677419355) internal successors, (88), 32 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:06:28,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:06:28,612 INFO L93 Difference]: Finished difference Result 685 states and 776 transitions. [2022-12-14 10:06:28,612 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2022-12-14 10:06:28,612 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 31 states have (on average 2.838709677419355) internal successors, (88), 32 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-12-14 10:06:28,613 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:06:28,614 INFO L225 Difference]: With dead ends: 685 [2022-12-14 10:06:28,614 INFO L226 Difference]: Without dead ends: 685 [2022-12-14 10:06:28,614 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 144 GetRequests, 81 SyntacticMatches, 4 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1019 ImplicationChecksByTransitivity, 5.6s TimeCoverageRelationStatistics Valid=486, Invalid=3174, Unknown=0, NotChecked=0, Total=3660 [2022-12-14 10:06:28,614 INFO L413 NwaCegarLoop]: 22 mSDtfsCounter, 385 mSDsluCounter, 150 mSDsCounter, 0 mSdLazyCounter, 479 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 385 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 481 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 479 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 10:06:28,614 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [385 Valid, 172 Invalid, 481 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 479 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 10:06:28,615 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 685 states. [2022-12-14 10:06:28,619 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 685 to 640. [2022-12-14 10:06:28,619 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 640 states, 636 states have (on average 1.1650943396226414) internal successors, (741), 639 states have internal predecessors, (741), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:06:28,620 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 640 states to 640 states and 741 transitions. [2022-12-14 10:06:28,620 INFO L78 Accepts]: Start accepts. Automaton has 640 states and 741 transitions. Word has length 40 [2022-12-14 10:06:28,620 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:06:28,620 INFO L495 AbstractCegarLoop]: Abstraction has 640 states and 741 transitions. [2022-12-14 10:06:28,620 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 31 states have (on average 2.838709677419355) internal successors, (88), 32 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:06:28,620 INFO L276 IsEmpty]: Start isEmpty. Operand 640 states and 741 transitions. [2022-12-14 10:06:28,621 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-12-14 10:06:28,621 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:06:28,621 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:06:28,626 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Ended with exit code 0 [2022-12-14 10:06:28,821 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-12-14 10:06:28,821 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr13REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:06:28,822 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:06:28,822 INFO L85 PathProgramCache]: Analyzing trace with hash 883339133, now seen corresponding path program 1 times [2022-12-14 10:06:28,822 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:06:28,822 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1773691682] [2022-12-14 10:06:28,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:06:28,822 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:06:28,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:06:29,149 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 11 proven. 20 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-12-14 10:06:29,149 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:06:29,150 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1773691682] [2022-12-14 10:06:29,150 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1773691682] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:06:29,150 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1904340462] [2022-12-14 10:06:29,150 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:06:29,150 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:06:29,150 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:06:29,151 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:06:29,151 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-12-14 10:06:29,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:06:29,241 INFO L263 TraceCheckSpWp]: Trace formula consists of 302 conjuncts, 90 conjunts are in the unsatisfiable core [2022-12-14 10:06:29,243 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:06:29,251 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:06:29,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 10:06:29,566 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 10:06:29,747 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:06:29,748 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 21 treesize of output 17 [2022-12-14 10:06:29,853 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 10 proven. 30 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-14 10:06:29,853 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:06:30,046 WARN L837 $PredicateComparison]: unable to prove that (or (forall ((v_ArrVal_1154 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1154) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) (= (mod (+ |c_ULTIMATE.start_main_~n~0#1| 4294967295) 4294967296) 0)) is different from false [2022-12-14 10:06:30,053 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:06:30,053 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 27 [2022-12-14 10:06:30,059 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:06:30,059 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 40 treesize of output 34 [2022-12-14 10:06:30,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:06:30,525 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 18 proven. 22 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2022-12-14 10:06:30,526 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1904340462] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:06:30,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [584150089] [2022-12-14 10:06:30,527 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 10:06:30,527 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:06:30,527 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:06:30,527 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:06:30,527 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:06:30,555 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:06:30,558 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:06:30,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 10:06:30,585 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:06:30,617 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:06:30,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:06:30,683 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 10:06:30,683 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-12-14 10:06:30,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:06:30,745 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:06:30,828 INFO L321 Elim1Store]: treesize reduction 25, result has 47.9 percent of original size [2022-12-14 10:06:30,829 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 192 treesize of output 197 [2022-12-14 10:06:30,977 INFO L321 Elim1Store]: treesize reduction 55, result has 45.0 percent of original size [2022-12-14 10:06:30,978 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 356 treesize of output 372 [2022-12-14 10:06:31,597 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-12-14 10:06:31,619 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 32 iterations. Over-approximation may be very coarse. [2022-12-14 10:06:31,683 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:06:31,684 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:06:31,796 INFO L321 Elim1Store]: treesize reduction 80, result has 17.5 percent of original size [2022-12-14 10:06:31,796 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 2 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 4 case distinctions, treesize of input 114 treesize of output 113 [2022-12-14 10:06:31,937 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:06:31,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:06:32,035 INFO L321 Elim1Store]: treesize reduction 25, result has 21.9 percent of original size [2022-12-14 10:06:32,035 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 19 treesize of output 18 [2022-12-14 10:06:32,143 WARN L221 IntervalDomain]: Interval conversion did not stabilize in 31 iterations. Over-approximation may be very coarse. [2022-12-14 10:06:32,151 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:06:36,251 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '22486#(and (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.offset|) (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 1 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#t~post5#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (= (select |#valid| |ULTIMATE.start_cstrncat_#t~post5#1.base|) 1) (<= |ULTIMATE.start_main_~length2~0#1| 2147483646) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (= |ULTIMATE.start_cstrncat_#t~mem6#1| (select (select |#memory_int| |ULTIMATE.start_cstrncat_#t~post5#1.base|) |ULTIMATE.start_cstrncat_#t~post5#1.offset|)) (<= (+ |ULTIMATE.start_cstrncat_#t~post5#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_#t~post5#1.base|)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (< (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|) (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1)) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 10:06:36,251 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:06:36,251 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:06:36,252 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 18, 18] total 47 [2022-12-14 10:06:36,252 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1350910983] [2022-12-14 10:06:36,252 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:06:36,252 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-12-14 10:06:36,252 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:06:36,252 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-12-14 10:06:36,252 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=359, Invalid=3426, Unknown=1, NotChecked=120, Total=3906 [2022-12-14 10:06:36,253 INFO L87 Difference]: Start difference. First operand 640 states and 741 transitions. Second operand has 48 states, 48 states have (on average 2.1041666666666665) internal successors, (101), 47 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:06:37,319 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 10:06:37,319 INFO L93 Difference]: Finished difference Result 600 states and 690 transitions. [2022-12-14 10:06:37,319 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-12-14 10:06:37,319 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 2.1041666666666665) internal successors, (101), 47 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-12-14 10:06:37,319 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 10:06:37,320 INFO L225 Difference]: With dead ends: 600 [2022-12-14 10:06:37,320 INFO L226 Difference]: Without dead ends: 531 [2022-12-14 10:06:37,320 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 152 GetRequests, 70 SyntacticMatches, 1 SemanticMatches, 81 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 2351 ImplicationChecksByTransitivity, 5.8s TimeCoverageRelationStatistics Valid=886, Invalid=5759, Unknown=1, NotChecked=160, Total=6806 [2022-12-14 10:06:37,321 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 330 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 560 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 330 SdHoareTripleChecker+Valid, 163 SdHoareTripleChecker+Invalid, 632 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 560 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 60 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 10:06:37,321 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [330 Valid, 163 Invalid, 632 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 560 Invalid, 0 Unknown, 60 Unchecked, 0.3s Time] [2022-12-14 10:06:37,321 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 531 states. [2022-12-14 10:06:37,324 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 531 to 531. [2022-12-14 10:06:37,324 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 531 states, 527 states have (on average 1.1764705882352942) internal successors, (620), 530 states have internal predecessors, (620), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:06:37,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 531 states to 531 states and 620 transitions. [2022-12-14 10:06:37,325 INFO L78 Accepts]: Start accepts. Automaton has 531 states and 620 transitions. Word has length 40 [2022-12-14 10:06:37,325 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 10:06:37,325 INFO L495 AbstractCegarLoop]: Abstraction has 531 states and 620 transitions. [2022-12-14 10:06:37,325 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 2.1041666666666665) internal successors, (101), 47 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:06:37,325 INFO L276 IsEmpty]: Start isEmpty. Operand 531 states and 620 transitions. [2022-12-14 10:06:37,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-12-14 10:06:37,326 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 10:06:37,326 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 9, 9, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 10:06:37,330 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Ended with exit code 0 [2022-12-14 10:06:37,526 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable38 [2022-12-14 10:06:37,527 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 14 more)] === [2022-12-14 10:06:37,527 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 10:06:37,527 INFO L85 PathProgramCache]: Analyzing trace with hash 1215665038, now seen corresponding path program 10 times [2022-12-14 10:06:37,528 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 10:06:37,528 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1935361258] [2022-12-14 10:06:37,528 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 10:06:37,528 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 10:06:37,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:06:38,284 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 49 proven. 113 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 10:06:38,284 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 10:06:38,284 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1935361258] [2022-12-14 10:06:38,284 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1935361258] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 10:06:38,284 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1504018896] [2022-12-14 10:06:38,284 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 10:06:38,285 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 10:06:38,285 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 10:06:38,285 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 10:06:38,286 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1ff8b510-fa20-42c9-b4ca-1ae084a5401e/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-12-14 10:06:38,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 10:06:38,388 INFO L263 TraceCheckSpWp]: Trace formula consists of 321 conjuncts, 92 conjunts are in the unsatisfiable core [2022-12-14 10:06:38,391 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 10:06:38,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 10:06:38,502 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 10:06:38,559 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 22 [2022-12-14 10:06:41,006 INFO L321 Elim1Store]: treesize reduction 32, result has 72.6 percent of original size [2022-12-14 10:06:41,006 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 10 select indices, 10 select index equivalence classes, 36 disjoint index pairs (out of 45 index pairs), introduced 10 new quantified variables, introduced 9 case distinctions, treesize of input 101 treesize of output 123 [2022-12-14 10:06:41,013 WARN L718 sPolynomialRelations]: Constructing 512(two to the power of 9 dual juncts. [2022-12-14 10:06:41,038 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-12-14 10:06:41,119 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 64 proven. 17 refuted. 0 times theorem prover too weak. 81 trivial. 0 not checked. [2022-12-14 10:06:41,119 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 10:06:43,068 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:06:43,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 233 treesize of output 121 [2022-12-14 10:06:43,123 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 10:06:43,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 10 select indices, 10 select index equivalence classes, 36 disjoint index pairs (out of 45 index pairs), introduced 10 new quantified variables, introduced 9 case distinctions, treesize of input 236 treesize of output 291 [2022-12-14 10:06:43,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 9 select indices, 9 select index equivalence classes, 36 disjoint index pairs (out of 36 index pairs), introduced 9 new quantified variables, introduced 0 case distinctions, treesize of input 98 treesize of output 64 [2022-12-14 10:06:43,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2022-12-14 10:06:43,279 WARN L718 sPolynomialRelations]: Constructing 128(two to the power of 7 dual juncts. [2022-12-14 10:06:43,288 WARN L718 sPolynomialRelations]: Constructing 256(two to the power of 8 dual juncts. [2022-12-14 10:06:43,300 WARN L718 sPolynomialRelations]: Constructing 512(two to the power of 9 dual juncts. [2022-12-14 10:06:43,321 WARN L718 sPolynomialRelations]: Constructing 64(two to the power of 6 dual juncts. [2022-12-14 10:06:43,568 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 0 proven. 81 refuted. 0 times theorem prover too weak. 81 trivial. 0 not checked. [2022-12-14 10:06:43,569 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1504018896] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 10:06:43,569 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2072817388] [2022-12-14 10:06:43,569 INFO L159 IcfgInterpreter]: Started Sifa with 11 locations of interest [2022-12-14 10:06:43,569 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 10:06:43,570 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 10:06:43,570 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 10:06:43,570 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 10:06:43,594 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:06:43,596 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 10:06:43,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 4 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 10:06:43,621 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 10:06:43,645 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 10:06:43,662 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 10:06:43,696 INFO L321 Elim1Store]: treesize reduction 41, result has 24.1 percent of original size [2022-12-14 10:06:43,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 27 [2022-12-14 10:06:43,940 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 10:06:46,726 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '23999#(and (<= |ULTIMATE.start_cstrncat_~dst#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.base|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.base|) (<= 0 |#NULL.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~n~0#1| 2147483646) (<= |ULTIMATE.start_main_#t~malloc12#1.offset| 0) (not (<= (+ |ULTIMATE.start_cstrncat_~d~0#1.offset| 1) (select |#length| |ULTIMATE.start_cstrncat_~d~0#1.base|))) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.base|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.base|) (<= |ULTIMATE.start_main_#t~malloc11#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_~dst#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~src#1.offset| 0) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= |ULTIMATE.start_main_~length2~0#1| 1) (<= 1 |ULTIMATE.start_cstrncat_~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~s~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_main_~i~1#1| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= |#NULL.base| 0) (<= 0 |ULTIMATE.start_cstrncat_~d~0#1.base|) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_cstrncat_#in~src#1.offset|) (<= |ULTIMATE.start_cstrncat_#in~dst#1.offset| 0) (<= |ULTIMATE.start_cstrncat_#in~n#1| 2147483646) (<= 0 |ULTIMATE.start_cstrncat_~src#1.offset|) (<= 1 |ULTIMATE.start_cstrncat_~d~0#1.offset|) (<= 0 |ULTIMATE.start_cstrncat_#in~dst#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.offset|) (<= |ULTIMATE.start_cstrncat_~n#1| 2147483646) (<= 0 |ULTIMATE.start_main_#t~malloc11#1.offset|) (<= 0 |#NULL.offset|) (<= 1 |ULTIMATE.start_cstrncat_#in~n#1|) (<= 0 |ULTIMATE.start_cstrncat_~src#1.base|) (<= 0 |#StackHeapBarrier|) (<= 2 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_#t~malloc12#1.base|) (<= |ULTIMATE.start_cstrncat_~src#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (<= |ULTIMATE.start_cstrncat_~s~0#1.offset| 0))' at error location [2022-12-14 10:06:46,726 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 10:06:46,726 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 10:06:46,726 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25, 23, 23] total 68 [2022-12-14 10:06:46,726 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [668726563] [2022-12-14 10:06:46,726 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 10:06:46,726 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 69 states [2022-12-14 10:06:46,726 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 10:06:46,727 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 69 interpolants. [2022-12-14 10:06:46,727 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=648, Invalid=5514, Unknown=0, NotChecked=0, Total=6162 [2022-12-14 10:06:46,727 INFO L87 Difference]: Start difference. First operand 531 states and 620 transitions. Second operand has 69 states, 68 states have (on average 1.4264705882352942) internal successors, (97), 69 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 10:06:50,308 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 10:06:52,464 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 10:07:03,022 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.37s for a HTC check with result VALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 10:10:55,029 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2022-12-14 10:12:09,186 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.05s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0]