./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4cb6276eff0c60579b1d5f7034948eb4f53891709ff48cdd11b3329ec3c4cc2e --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 14:56:54,613 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 14:56:54,614 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 14:56:54,627 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 14:56:54,627 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 14:56:54,628 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 14:56:54,629 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 14:56:54,630 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 14:56:54,631 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 14:56:54,632 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 14:56:54,632 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 14:56:54,633 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 14:56:54,633 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 14:56:54,634 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 14:56:54,635 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 14:56:54,635 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 14:56:54,636 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 14:56:54,637 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 14:56:54,638 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 14:56:54,639 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 14:56:54,640 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 14:56:54,641 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 14:56:54,642 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 14:56:54,642 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 14:56:54,645 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 14:56:54,645 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 14:56:54,645 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 14:56:54,646 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 14:56:54,646 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 14:56:54,647 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 14:56:54,647 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 14:56:54,647 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 14:56:54,648 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 14:56:54,648 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 14:56:54,649 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 14:56:54,649 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 14:56:54,650 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 14:56:54,650 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 14:56:54,650 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 14:56:54,651 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 14:56:54,651 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 14:56:54,652 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-12-14 14:56:54,668 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 14:56:54,668 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 14:56:54,669 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 14:56:54,669 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 14:56:54,669 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 14:56:54,669 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 14:56:54,670 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 14:56:54,670 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 14:56:54,670 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 14:56:54,670 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 14:56:54,670 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 14:56:54,670 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 14:56:54,670 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 14:56:54,670 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 14:56:54,670 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 14:56:54,671 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 14:56:54,671 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 14:56:54,671 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 14:56:54,671 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-14 14:56:54,671 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-14 14:56:54,672 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 14:56:54,672 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 14:56:54,672 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-14 14:56:54,672 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 14:56:54,672 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 14:56:54,672 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 14:56:54,672 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-12-14 14:56:54,672 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-12-14 14:56:54,672 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-12-14 14:56:54,673 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 14:56:54,673 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-12-14 14:56:54,673 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 14:56:54,673 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 14:56:54,673 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 14:56:54,673 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 14:56:54,673 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 14:56:54,673 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 14:56:54,674 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 14:56:54,674 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 14:56:54,674 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 14:56:54,674 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 14:56:54,674 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 14:56:54,674 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4cb6276eff0c60579b1d5f7034948eb4f53891709ff48cdd11b3329ec3c4cc2e [2022-12-14 14:56:54,835 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 14:56:54,855 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 14:56:54,858 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 14:56:54,859 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 14:56:54,859 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 14:56:54,860 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/array-memsafety/substring-alloca-2.i [2022-12-14 14:56:57,396 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 14:56:57,581 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 14:56:57,581 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/sv-benchmarks/c/array-memsafety/substring-alloca-2.i [2022-12-14 14:56:57,589 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/data/fb6290821/ad58437918324cbc91b1f954fd58a3bd/FLAGd739b8dd0 [2022-12-14 14:56:57,986 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/data/fb6290821/ad58437918324cbc91b1f954fd58a3bd [2022-12-14 14:56:57,990 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 14:56:57,992 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 14:56:57,994 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 14:56:57,994 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 14:56:57,998 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 14:56:57,999 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 02:56:57" (1/1) ... [2022-12-14 14:56:58,000 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3fca4812 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58, skipping insertion in model container [2022-12-14 14:56:58,000 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 02:56:57" (1/1) ... [2022-12-14 14:56:58,007 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 14:56:58,033 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 14:56:58,243 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 14:56:58,254 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 14:56:58,288 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 14:56:58,306 INFO L208 MainTranslator]: Completed translation [2022-12-14 14:56:58,306 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58 WrapperNode [2022-12-14 14:56:58,306 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 14:56:58,307 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 14:56:58,307 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 14:56:58,307 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 14:56:58,312 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58" (1/1) ... [2022-12-14 14:56:58,323 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58" (1/1) ... [2022-12-14 14:56:58,340 INFO L138 Inliner]: procedures = 117, calls = 18, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 103 [2022-12-14 14:56:58,340 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 14:56:58,341 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 14:56:58,341 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 14:56:58,341 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 14:56:58,348 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58" (1/1) ... [2022-12-14 14:56:58,348 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58" (1/1) ... [2022-12-14 14:56:58,351 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58" (1/1) ... [2022-12-14 14:56:58,351 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58" (1/1) ... [2022-12-14 14:56:58,357 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58" (1/1) ... [2022-12-14 14:56:58,360 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58" (1/1) ... [2022-12-14 14:56:58,361 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58" (1/1) ... [2022-12-14 14:56:58,363 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58" (1/1) ... [2022-12-14 14:56:58,365 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 14:56:58,366 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 14:56:58,366 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 14:56:58,366 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 14:56:58,367 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58" (1/1) ... [2022-12-14 14:56:58,373 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 14:56:58,381 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:56:58,392 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 14:56:58,394 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 14:56:58,427 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-12-14 14:56:58,427 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-12-14 14:56:58,428 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-12-14 14:56:58,428 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-12-14 14:56:58,428 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 14:56:58,428 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 14:56:58,514 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 14:56:58,515 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 14:56:58,707 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 14:56:58,756 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 14:56:58,756 INFO L300 CfgBuilder]: Removed 4 assume(true) statements. [2022-12-14 14:56:58,758 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 02:56:58 BoogieIcfgContainer [2022-12-14 14:56:58,758 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 14:56:58,760 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 14:56:58,760 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 14:56:58,762 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 14:56:58,763 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 02:56:57" (1/3) ... [2022-12-14 14:56:58,763 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4fccf6d6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 02:56:58, skipping insertion in model container [2022-12-14 14:56:58,763 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 02:56:58" (2/3) ... [2022-12-14 14:56:58,763 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4fccf6d6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 02:56:58, skipping insertion in model container [2022-12-14 14:56:58,763 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 02:56:58" (3/3) ... [2022-12-14 14:56:58,764 INFO L112 eAbstractionObserver]: Analyzing ICFG substring-alloca-2.i [2022-12-14 14:56:58,779 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 14:56:58,779 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 19 error locations. [2022-12-14 14:56:58,811 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 14:56:58,815 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1bd418e2, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 14:56:58,816 INFO L358 AbstractCegarLoop]: Starting to check reachability of 19 error locations. [2022-12-14 14:56:58,818 INFO L276 IsEmpty]: Start isEmpty. Operand has 39 states, 19 states have (on average 2.4210526315789473) internal successors, (46), 38 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:56:58,822 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-12-14 14:56:58,823 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:56:58,823 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-12-14 14:56:58,823 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:56:58,827 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:56:58,827 INFO L85 PathProgramCache]: Analyzing trace with hash 158342, now seen corresponding path program 1 times [2022-12-14 14:56:58,834 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:56:58,834 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1890431666] [2022-12-14 14:56:58,834 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:56:58,835 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:56:58,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:56:59,095 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:56:59,095 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:56:59,096 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1890431666] [2022-12-14 14:56:59,096 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1890431666] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:56:59,096 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:56:59,097 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-12-14 14:56:59,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [303211216] [2022-12-14 14:56:59,099 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:56:59,102 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 14:56:59,103 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:56:59,126 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 14:56:59,127 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 14:56:59,128 INFO L87 Difference]: Start difference. First operand has 39 states, 19 states have (on average 2.4210526315789473) internal successors, (46), 38 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:56:59,183 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:56:59,183 INFO L93 Difference]: Finished difference Result 37 states and 42 transitions. [2022-12-14 14:56:59,185 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 14:56:59,186 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-12-14 14:56:59,186 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:56:59,191 INFO L225 Difference]: With dead ends: 37 [2022-12-14 14:56:59,191 INFO L226 Difference]: Without dead ends: 36 [2022-12-14 14:56:59,193 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 14:56:59,195 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 26 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 27 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 26 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:56:59,196 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 19 Invalid, 27 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 26 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:56:59,209 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-12-14 14:56:59,217 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-12-14 14:56:59,218 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 19 states have (on average 2.1578947368421053) internal successors, (41), 35 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:56:59,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 41 transitions. [2022-12-14 14:56:59,219 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 41 transitions. Word has length 3 [2022-12-14 14:56:59,219 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:56:59,219 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 41 transitions. [2022-12-14 14:56:59,220 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:56:59,220 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 41 transitions. [2022-12-14 14:56:59,220 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-12-14 14:56:59,220 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:56:59,220 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-12-14 14:56:59,220 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 14:56:59,221 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:56:59,221 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:56:59,221 INFO L85 PathProgramCache]: Analyzing trace with hash 158343, now seen corresponding path program 1 times [2022-12-14 14:56:59,221 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:56:59,221 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [662495670] [2022-12-14 14:56:59,222 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:56:59,222 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:56:59,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:56:59,407 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:56:59,407 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:56:59,407 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [662495670] [2022-12-14 14:56:59,408 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [662495670] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:56:59,408 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:56:59,408 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 14:56:59,408 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1595847986] [2022-12-14 14:56:59,408 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:56:59,409 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 14:56:59,409 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:56:59,410 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 14:56:59,410 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 14:56:59,410 INFO L87 Difference]: Start difference. First operand 36 states and 41 transitions. Second operand has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:56:59,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:56:59,514 INFO L93 Difference]: Finished difference Result 70 states and 80 transitions. [2022-12-14 14:56:59,514 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 14:56:59,515 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-12-14 14:56:59,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:56:59,515 INFO L225 Difference]: With dead ends: 70 [2022-12-14 14:56:59,515 INFO L226 Difference]: Without dead ends: 70 [2022-12-14 14:56:59,515 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 14:56:59,516 INFO L413 NwaCegarLoop]: 20 mSDtfsCounter, 38 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 58 SdHoareTripleChecker+Invalid, 64 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:56:59,517 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 58 Invalid, 64 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 14:56:59,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2022-12-14 14:56:59,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 38. [2022-12-14 14:56:59,520 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 21 states have (on average 2.0952380952380953) internal successors, (44), 37 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:56:59,520 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 44 transitions. [2022-12-14 14:56:59,520 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 44 transitions. Word has length 3 [2022-12-14 14:56:59,520 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:56:59,520 INFO L495 AbstractCegarLoop]: Abstraction has 38 states and 44 transitions. [2022-12-14 14:56:59,520 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:56:59,521 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 44 transitions. [2022-12-14 14:56:59,521 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 14:56:59,521 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:56:59,521 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 14:56:59,521 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 14:56:59,521 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr5REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:56:59,522 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:56:59,522 INFO L85 PathProgramCache]: Analyzing trace with hash 5013776, now seen corresponding path program 1 times [2022-12-14 14:56:59,522 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:56:59,522 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1523247669] [2022-12-14 14:56:59,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:56:59,522 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:56:59,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:56:59,685 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:56:59,685 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:56:59,685 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1523247669] [2022-12-14 14:56:59,685 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1523247669] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:56:59,685 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:56:59,685 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 14:56:59,686 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1857899856] [2022-12-14 14:56:59,686 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:56:59,686 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 14:56:59,686 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:56:59,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 14:56:59,687 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-12-14 14:56:59,687 INFO L87 Difference]: Start difference. First operand 38 states and 44 transitions. Second operand has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:56:59,727 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:56:59,728 INFO L93 Difference]: Finished difference Result 37 states and 43 transitions. [2022-12-14 14:56:59,728 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 14:56:59,728 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 14:56:59,728 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:56:59,729 INFO L225 Difference]: With dead ends: 37 [2022-12-14 14:56:59,729 INFO L226 Difference]: Without dead ends: 37 [2022-12-14 14:56:59,729 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-12-14 14:56:59,730 INFO L413 NwaCegarLoop]: 19 mSDtfsCounter, 37 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 19 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:56:59,731 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 19 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:56:59,731 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-12-14 14:56:59,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 37. [2022-12-14 14:56:59,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 21 states have (on average 2.0476190476190474) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:56:59,733 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-12-14 14:56:59,733 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 4 [2022-12-14 14:56:59,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:56:59,733 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-12-14 14:56:59,734 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.3333333333333333) internal successors, (4), 3 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:56:59,734 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-12-14 14:56:59,734 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 14:56:59,734 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:56:59,734 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 14:56:59,734 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-12-14 14:56:59,734 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:56:59,735 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:56:59,735 INFO L85 PathProgramCache]: Analyzing trace with hash 5011007, now seen corresponding path program 1 times [2022-12-14 14:56:59,735 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:56:59,735 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [286251602] [2022-12-14 14:56:59,735 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:56:59,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:56:59,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:56:59,767 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:56:59,767 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:56:59,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [286251602] [2022-12-14 14:56:59,767 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [286251602] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:56:59,768 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:56:59,768 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-12-14 14:56:59,768 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1740178792] [2022-12-14 14:56:59,768 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:56:59,768 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 14:56:59,768 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:56:59,769 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 14:56:59,769 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 14:56:59,769 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:56:59,800 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:56:59,800 INFO L93 Difference]: Finished difference Result 35 states and 41 transitions. [2022-12-14 14:56:59,800 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 14:56:59,800 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 14:56:59,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:56:59,801 INFO L225 Difference]: With dead ends: 35 [2022-12-14 14:56:59,801 INFO L226 Difference]: Without dead ends: 35 [2022-12-14 14:56:59,801 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 14:56:59,802 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 33 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 22 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 22 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:56:59,803 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 18 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 22 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:56:59,804 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2022-12-14 14:56:59,806 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 35. [2022-12-14 14:56:59,806 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 21 states have (on average 1.9523809523809523) internal successors, (41), 34 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:56:59,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 41 transitions. [2022-12-14 14:56:59,807 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 41 transitions. Word has length 4 [2022-12-14 14:56:59,807 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:56:59,807 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 41 transitions. [2022-12-14 14:56:59,807 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 2.0) internal successors, (4), 2 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:56:59,807 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 41 transitions. [2022-12-14 14:56:59,807 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2022-12-14 14:56:59,807 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:56:59,807 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2022-12-14 14:56:59,807 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-14 14:56:59,808 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:56:59,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:56:59,808 INFO L85 PathProgramCache]: Analyzing trace with hash 5011008, now seen corresponding path program 1 times [2022-12-14 14:56:59,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:56:59,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [760609704] [2022-12-14 14:56:59,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:56:59,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:56:59,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:56:59,923 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:56:59,923 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:56:59,923 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [760609704] [2022-12-14 14:56:59,923 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [760609704] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:56:59,923 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:56:59,924 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 14:56:59,924 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [341634662] [2022-12-14 14:56:59,924 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:56:59,924 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 14:56:59,924 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:56:59,925 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 14:56:59,925 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-12-14 14:56:59,925 INFO L87 Difference]: Start difference. First operand 35 states and 41 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:00,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:00,012 INFO L93 Difference]: Finished difference Result 63 states and 73 transitions. [2022-12-14 14:57:00,012 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 14:57:00,012 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2022-12-14 14:57:00,012 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:00,012 INFO L225 Difference]: With dead ends: 63 [2022-12-14 14:57:00,013 INFO L226 Difference]: Without dead ends: 63 [2022-12-14 14:57:00,013 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-12-14 14:57:00,013 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 99 mSDsluCounter, 34 mSDsCounter, 0 mSdLazyCounter, 62 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 99 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 62 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 62 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:00,014 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [99 Valid, 51 Invalid, 62 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 62 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 14:57:00,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-12-14 14:57:00,015 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 37. [2022-12-14 14:57:00,016 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 23 states have (on average 1.9130434782608696) internal successors, (44), 36 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:00,016 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 44 transitions. [2022-12-14 14:57:00,016 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 44 transitions. Word has length 4 [2022-12-14 14:57:00,016 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:00,016 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 44 transitions. [2022-12-14 14:57:00,016 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:00,016 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 44 transitions. [2022-12-14 14:57:00,017 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 14:57:00,017 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:00,017 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2022-12-14 14:57:00,017 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-12-14 14:57:00,017 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr7REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:00,017 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:00,017 INFO L85 PathProgramCache]: Analyzing trace with hash 155427050, now seen corresponding path program 1 times [2022-12-14 14:57:00,017 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:00,018 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1291384654] [2022-12-14 14:57:00,018 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:00,018 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:00,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:00,153 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:00,153 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:00,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1291384654] [2022-12-14 14:57:00,153 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1291384654] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:00,153 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:57:00,154 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 14:57:00,154 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1602330151] [2022-12-14 14:57:00,154 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:00,154 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 14:57:00,154 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:00,155 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 14:57:00,155 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-12-14 14:57:00,155 INFO L87 Difference]: Start difference. First operand 37 states and 44 transitions. Second operand has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:00,187 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:00,188 INFO L93 Difference]: Finished difference Result 36 states and 43 transitions. [2022-12-14 14:57:00,188 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 14:57:00,188 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 14:57:00,188 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:00,189 INFO L225 Difference]: With dead ends: 36 [2022-12-14 14:57:00,189 INFO L226 Difference]: Without dead ends: 36 [2022-12-14 14:57:00,189 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2022-12-14 14:57:00,190 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 67 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 67 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:00,190 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [67 Valid, 17 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:57:00,190 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2022-12-14 14:57:00,192 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 36. [2022-12-14 14:57:00,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 23 states have (on average 1.8695652173913044) internal successors, (43), 35 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:00,192 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 43 transitions. [2022-12-14 14:57:00,192 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 43 transitions. Word has length 5 [2022-12-14 14:57:00,192 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:00,192 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 43 transitions. [2022-12-14 14:57:00,192 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.25) internal successors, (5), 4 states have internal predecessors, (5), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:00,193 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 43 transitions. [2022-12-14 14:57:00,193 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 14:57:00,193 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:00,193 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1] [2022-12-14 14:57:00,193 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-14 14:57:00,193 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:00,193 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:00,193 INFO L85 PathProgramCache]: Analyzing trace with hash 152263501, now seen corresponding path program 1 times [2022-12-14 14:57:00,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:00,194 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1330763892] [2022-12-14 14:57:00,194 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:00,194 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:00,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:00,352 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:00,353 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:00,353 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1330763892] [2022-12-14 14:57:00,353 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1330763892] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:00,353 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1967031769] [2022-12-14 14:57:00,353 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:00,353 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:00,354 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:00,354 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:00,356 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 14:57:00,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:00,407 INFO L263 TraceCheckSpWp]: Trace formula consists of 67 conjuncts, 22 conjunts are in the unsatisfiable core [2022-12-14 14:57:00,411 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:00,463 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:00,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 13 [2022-12-14 14:57:00,479 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 14:57:00,614 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:00,614 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:00,719 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:00,719 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1967031769] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:00,719 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [11905050] [2022-12-14 14:57:00,735 INFO L159 IcfgInterpreter]: Started Sifa with 4 locations of interest [2022-12-14 14:57:00,735 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:00,739 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:00,743 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:00,744 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:00,789 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:00,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:00,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:00,918 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:00,978 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:01,022 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:01,284 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '602#(and (not (<= (+ |ULTIMATE.start_main_~nondetString1~0#1.offset| |ULTIMATE.start_main_~i~0#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString1~0#1.base|))) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet16#1|)) (<= |ULTIMATE.start_main_#t~nondet16#1| 127) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |#NULL.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:57:01,284 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:57:01,284 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:01,284 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [3, 3, 3] total 9 [2022-12-14 14:57:01,284 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1731273593] [2022-12-14 14:57:01,284 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:57:01,285 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-12-14 14:57:01,285 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:01,285 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-12-14 14:57:01,285 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2022-12-14 14:57:01,286 INFO L87 Difference]: Start difference. First operand 36 states and 43 transitions. Second operand has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:01,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:01,572 INFO L93 Difference]: Finished difference Result 96 states and 114 transitions. [2022-12-14 14:57:01,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 14:57:01,573 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 14:57:01,573 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:01,574 INFO L225 Difference]: With dead ends: 96 [2022-12-14 14:57:01,574 INFO L226 Difference]: Without dead ends: 96 [2022-12-14 14:57:01,574 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=70, Invalid=202, Unknown=0, NotChecked=0, Total=272 [2022-12-14 14:57:01,574 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 200 mSDsluCounter, 170 mSDsCounter, 0 mSdLazyCounter, 229 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 200 SdHoareTripleChecker+Valid, 221 SdHoareTripleChecker+Invalid, 231 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 229 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:01,575 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [200 Valid, 221 Invalid, 231 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 229 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 14:57:01,575 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2022-12-14 14:57:01,576 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 33. [2022-12-14 14:57:01,576 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 21 states have (on average 1.8571428571428572) internal successors, (39), 32 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:01,577 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2022-12-14 14:57:01,577 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 5 [2022-12-14 14:57:01,577 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:01,577 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2022-12-14 14:57:01,577 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:01,577 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2022-12-14 14:57:01,577 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 14:57:01,577 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:01,577 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-12-14 14:57:01,585 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 14:57:01,778 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:01,778 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:01,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:01,779 INFO L85 PathProgramCache]: Analyzing trace with hash 523273240, now seen corresponding path program 1 times [2022-12-14 14:57:01,779 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:01,779 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1937757460] [2022-12-14 14:57:01,779 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:01,779 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:01,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:01,837 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:01,837 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:01,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1937757460] [2022-12-14 14:57:01,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1937757460] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:01,837 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:57:01,837 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 14:57:01,838 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [558940209] [2022-12-14 14:57:01,838 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:01,838 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 14:57:01,838 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:01,838 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 14:57:01,839 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-12-14 14:57:01,839 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:01,885 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:01,885 INFO L93 Difference]: Finished difference Result 55 states and 64 transitions. [2022-12-14 14:57:01,885 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 14:57:01,885 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 14:57:01,885 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:01,886 INFO L225 Difference]: With dead ends: 55 [2022-12-14 14:57:01,886 INFO L226 Difference]: Without dead ends: 55 [2022-12-14 14:57:01,886 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-12-14 14:57:01,886 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 83 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 83 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:01,887 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [83 Valid, 30 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:57:01,887 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2022-12-14 14:57:01,889 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 34. [2022-12-14 14:57:01,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 22 states have (on average 1.8636363636363635) internal successors, (41), 33 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:01,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 41 transitions. [2022-12-14 14:57:01,889 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 41 transitions. Word has length 6 [2022-12-14 14:57:01,889 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:01,889 INFO L495 AbstractCegarLoop]: Abstraction has 34 states and 41 transitions. [2022-12-14 14:57:01,889 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.5) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:01,890 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 41 transitions. [2022-12-14 14:57:01,890 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 14:57:01,890 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:01,890 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2022-12-14 14:57:01,890 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-12-14 14:57:01,890 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:01,890 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:01,890 INFO L85 PathProgramCache]: Analyzing trace with hash 523273239, now seen corresponding path program 1 times [2022-12-14 14:57:01,890 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:01,890 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [395607144] [2022-12-14 14:57:01,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:01,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:01,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:01,918 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:01,918 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:01,918 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [395607144] [2022-12-14 14:57:01,918 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [395607144] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:01,918 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:57:01,919 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 14:57:01,919 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [542683420] [2022-12-14 14:57:01,919 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:01,919 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 14:57:01,919 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:01,920 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 14:57:01,920 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 14:57:01,920 INFO L87 Difference]: Start difference. First operand 34 states and 41 transitions. Second operand has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:01,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:01,951 INFO L93 Difference]: Finished difference Result 33 states and 39 transitions. [2022-12-14 14:57:01,951 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 14:57:01,952 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 14:57:01,952 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:01,952 INFO L225 Difference]: With dead ends: 33 [2022-12-14 14:57:01,952 INFO L226 Difference]: Without dead ends: 33 [2022-12-14 14:57:01,952 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 14:57:01,953 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 53 mSDsluCounter, 3 mSDsCounter, 0 mSdLazyCounter, 30 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 30 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:01,953 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 18 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 30 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:57:01,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-12-14 14:57:01,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 33. [2022-12-14 14:57:01,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 22 states have (on average 1.7727272727272727) internal successors, (39), 32 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:01,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 39 transitions. [2022-12-14 14:57:01,956 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 39 transitions. Word has length 6 [2022-12-14 14:57:01,956 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:01,957 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 39 transitions. [2022-12-14 14:57:01,957 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:01,957 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 39 transitions. [2022-12-14 14:57:01,957 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2022-12-14 14:57:01,957 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:01,957 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1] [2022-12-14 14:57:01,957 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-12-14 14:57:01,957 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:01,958 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:01,958 INFO L85 PathProgramCache]: Analyzing trace with hash 520684782, now seen corresponding path program 1 times [2022-12-14 14:57:01,958 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:01,958 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2046967426] [2022-12-14 14:57:01,958 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:01,958 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:01,967 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:02,109 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:02,109 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:02,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2046967426] [2022-12-14 14:57:02,110 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2046967426] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:02,110 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1993144165] [2022-12-14 14:57:02,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:02,110 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:02,110 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:02,111 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:02,112 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 14:57:02,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:02,155 INFO L263 TraceCheckSpWp]: Trace formula consists of 70 conjuncts, 17 conjunts are in the unsatisfiable core [2022-12-14 14:57:02,156 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:02,180 INFO L321 Elim1Store]: treesize reduction 13, result has 40.9 percent of original size [2022-12-14 14:57:02,180 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 11 treesize of output 17 [2022-12-14 14:57:02,315 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:02,315 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:02,435 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:02,435 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1993144165] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:02,435 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [836628937] [2022-12-14 14:57:02,437 INFO L159 IcfgInterpreter]: Started Sifa with 5 locations of interest [2022-12-14 14:57:02,437 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:02,437 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:02,437 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:02,437 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:02,459 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:02,460 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:02,506 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:02,543 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:02,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:02,584 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:02,990 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '952#(and (not (<= (+ |ULTIMATE.start_main_~nondetString2~0#1.offset| |ULTIMATE.start_main_~i~1#1| 1) (select |#length| |ULTIMATE.start_main_~nondetString2~0#1.base|))) (= |ULTIMATE.start_main_~i~0#1| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= |ULTIMATE.start_main_~length1~0#1| 1) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet18#1|)) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (= |#NULL.offset| 0) (<= |ULTIMATE.start_main_#t~nondet18#1| 127) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:57:02,990 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:57:02,990 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:02,990 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 12 [2022-12-14 14:57:02,990 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2000411612] [2022-12-14 14:57:02,990 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:57:02,991 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2022-12-14 14:57:02,991 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:02,991 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2022-12-14 14:57:02,991 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=68, Invalid=238, Unknown=0, NotChecked=0, Total=306 [2022-12-14 14:57:02,992 INFO L87 Difference]: Start difference. First operand 33 states and 39 transitions. Second operand has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,233 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:03,234 INFO L93 Difference]: Finished difference Result 83 states and 96 transitions. [2022-12-14 14:57:03,234 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-14 14:57:03,234 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2022-12-14 14:57:03,234 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:03,235 INFO L225 Difference]: With dead ends: 83 [2022-12-14 14:57:03,235 INFO L226 Difference]: Without dead ends: 83 [2022-12-14 14:57:03,235 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 87 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=103, Invalid=317, Unknown=0, NotChecked=0, Total=420 [2022-12-14 14:57:03,236 INFO L413 NwaCegarLoop]: 46 mSDtfsCounter, 257 mSDsluCounter, 126 mSDsCounter, 0 mSdLazyCounter, 176 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 257 SdHoareTripleChecker+Valid, 172 SdHoareTripleChecker+Invalid, 178 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 176 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:03,236 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [257 Valid, 172 Invalid, 178 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 176 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 14:57:03,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2022-12-14 14:57:03,239 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 30. [2022-12-14 14:57:03,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 20 states have (on average 1.75) internal successors, (35), 29 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 35 transitions. [2022-12-14 14:57:03,240 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 35 transitions. Word has length 6 [2022-12-14 14:57:03,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:03,240 INFO L495 AbstractCegarLoop]: Abstraction has 30 states and 35 transitions. [2022-12-14 14:57:03,240 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 1.3846153846153846) internal successors, (18), 13 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,240 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 35 transitions. [2022-12-14 14:57:03,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-12-14 14:57:03,240 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:03,241 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:03,246 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2022-12-14 14:57:03,441 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-14 14:57:03,442 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr10REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:03,443 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:03,443 INFO L85 PathProgramCache]: Analyzing trace with hash 354410300, now seen corresponding path program 1 times [2022-12-14 14:57:03,443 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:03,443 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [190735197] [2022-12-14 14:57:03,444 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:03,444 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:03,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:03,581 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:03,582 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:03,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [190735197] [2022-12-14 14:57:03,583 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [190735197] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:03,583 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:57:03,583 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 14:57:03,583 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [655949957] [2022-12-14 14:57:03,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:03,584 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 14:57:03,584 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:03,585 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 14:57:03,585 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 14:57:03,585 INFO L87 Difference]: Start difference. First operand 30 states and 35 transitions. Second operand has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:03,632 INFO L93 Difference]: Finished difference Result 30 states and 36 transitions. [2022-12-14 14:57:03,632 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 14:57:03,633 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-12-14 14:57:03,633 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:03,633 INFO L225 Difference]: With dead ends: 30 [2022-12-14 14:57:03,633 INFO L226 Difference]: Without dead ends: 30 [2022-12-14 14:57:03,633 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 14:57:03,634 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 37 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 21 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:03,634 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 21 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:57:03,635 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30 states. [2022-12-14 14:57:03,636 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30 to 27. [2022-12-14 14:57:03,636 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27 states, 20 states have (on average 1.6) internal successors, (32), 26 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27 states to 27 states and 32 transitions. [2022-12-14 14:57:03,637 INFO L78 Accepts]: Start accepts. Automaton has 27 states and 32 transitions. Word has length 8 [2022-12-14 14:57:03,637 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:03,637 INFO L495 AbstractCegarLoop]: Abstraction has 27 states and 32 transitions. [2022-12-14 14:57:03,637 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,637 INFO L276 IsEmpty]: Start isEmpty. Operand 27 states and 32 transitions. [2022-12-14 14:57:03,637 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-12-14 14:57:03,637 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:03,637 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:03,638 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-12-14 14:57:03,638 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:03,638 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:03,638 INFO L85 PathProgramCache]: Analyzing trace with hash 354410301, now seen corresponding path program 1 times [2022-12-14 14:57:03,638 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:03,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [125473615] [2022-12-14 14:57:03,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:03,638 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:03,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:03,728 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:03,728 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:03,728 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [125473615] [2022-12-14 14:57:03,728 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [125473615] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:03,728 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:57:03,729 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 14:57:03,729 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [500846822] [2022-12-14 14:57:03,729 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:03,729 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 14:57:03,729 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:03,729 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 14:57:03,729 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-14 14:57:03,730 INFO L87 Difference]: Start difference. First operand 27 states and 32 transitions. Second operand has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,778 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:03,778 INFO L93 Difference]: Finished difference Result 43 states and 51 transitions. [2022-12-14 14:57:03,779 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 14:57:03,779 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-12-14 14:57:03,779 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:03,779 INFO L225 Difference]: With dead ends: 43 [2022-12-14 14:57:03,779 INFO L226 Difference]: Without dead ends: 43 [2022-12-14 14:57:03,779 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-12-14 14:57:03,780 INFO L413 NwaCegarLoop]: 17 mSDtfsCounter, 91 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 44 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 91 SdHoareTripleChecker+Valid, 31 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 44 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:03,780 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [91 Valid, 31 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 44 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:57:03,781 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2022-12-14 14:57:03,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 33. [2022-12-14 14:57:03,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 26 states have (on average 1.6153846153846154) internal successors, (42), 32 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,783 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 42 transitions. [2022-12-14 14:57:03,783 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 42 transitions. Word has length 8 [2022-12-14 14:57:03,783 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:03,783 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 42 transitions. [2022-12-14 14:57:03,783 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.0) internal successors, (8), 4 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,784 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 42 transitions. [2022-12-14 14:57:03,784 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-12-14 14:57:03,784 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:03,784 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:03,784 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-12-14 14:57:03,784 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr18ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:03,784 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:03,785 INFO L85 PathProgramCache]: Analyzing trace with hash 1285859555, now seen corresponding path program 1 times [2022-12-14 14:57:03,785 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:03,785 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [562310418] [2022-12-14 14:57:03,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:03,785 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:03,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:03,857 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:03,857 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:03,857 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [562310418] [2022-12-14 14:57:03,857 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [562310418] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:03,858 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:57:03,858 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 14:57:03,858 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [348210571] [2022-12-14 14:57:03,858 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:03,858 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 14:57:03,858 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:03,858 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 14:57:03,859 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 14:57:03,859 INFO L87 Difference]: Start difference. First operand 33 states and 42 transitions. Second operand has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:03,880 INFO L93 Difference]: Finished difference Result 32 states and 41 transitions. [2022-12-14 14:57:03,880 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 14:57:03,880 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-12-14 14:57:03,880 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:03,880 INFO L225 Difference]: With dead ends: 32 [2022-12-14 14:57:03,880 INFO L226 Difference]: Without dead ends: 29 [2022-12-14 14:57:03,880 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 14:57:03,881 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 21 mSDsluCounter, 16 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:03,881 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 32 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:57:03,881 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-12-14 14:57:03,882 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2022-12-14 14:57:03,882 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 23 states have (on average 1.608695652173913) internal successors, (37), 28 states have internal predecessors, (37), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,882 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 37 transitions. [2022-12-14 14:57:03,882 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 37 transitions. Word has length 10 [2022-12-14 14:57:03,882 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:03,882 INFO L495 AbstractCegarLoop]: Abstraction has 29 states and 37 transitions. [2022-12-14 14:57:03,882 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,882 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 37 transitions. [2022-12-14 14:57:03,883 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 14:57:03,883 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:03,883 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:03,883 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-12-14 14:57:03,883 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr14REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:03,883 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:03,883 INFO L85 PathProgramCache]: Analyzing trace with hash 1209053803, now seen corresponding path program 1 times [2022-12-14 14:57:03,883 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:03,883 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1716426308] [2022-12-14 14:57:03,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:03,883 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:03,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:03,910 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:03,910 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:03,910 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1716426308] [2022-12-14 14:57:03,910 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1716426308] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:03,910 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:57:03,910 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 14:57:03,910 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2049364318] [2022-12-14 14:57:03,910 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:03,911 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 14:57:03,911 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:03,911 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 14:57:03,911 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 14:57:03,911 INFO L87 Difference]: Start difference. First operand 29 states and 37 transitions. Second operand has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:03,937 INFO L93 Difference]: Finished difference Result 29 states and 36 transitions. [2022-12-14 14:57:03,938 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 14:57:03,938 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 14:57:03,938 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:03,938 INFO L225 Difference]: With dead ends: 29 [2022-12-14 14:57:03,938 INFO L226 Difference]: Without dead ends: 29 [2022-12-14 14:57:03,938 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 14:57:03,939 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 25 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 14 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:03,939 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 14 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:57:03,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2022-12-14 14:57:03,941 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 28. [2022-12-14 14:57:03,941 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 23 states have (on average 1.5217391304347827) internal successors, (35), 27 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,941 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 35 transitions. [2022-12-14 14:57:03,941 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 35 transitions. Word has length 11 [2022-12-14 14:57:03,941 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:03,942 INFO L495 AbstractCegarLoop]: Abstraction has 28 states and 35 transitions. [2022-12-14 14:57:03,942 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 4 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:03,942 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 35 transitions. [2022-12-14 14:57:03,942 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 14:57:03,942 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:03,942 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:03,942 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-12-14 14:57:03,942 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:03,942 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:03,943 INFO L85 PathProgramCache]: Analyzing trace with hash 1209053804, now seen corresponding path program 1 times [2022-12-14 14:57:03,943 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:03,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [50439919] [2022-12-14 14:57:03,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:03,943 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:03,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:04,015 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:04,015 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:04,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [50439919] [2022-12-14 14:57:04,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [50439919] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:04,015 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:57:04,015 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-14 14:57:04,015 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1858590103] [2022-12-14 14:57:04,016 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:04,016 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 14:57:04,016 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:04,016 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 14:57:04,016 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-12-14 14:57:04,017 INFO L87 Difference]: Start difference. First operand 28 states and 35 transitions. Second operand has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:04,087 INFO L93 Difference]: Finished difference Result 50 states and 61 transitions. [2022-12-14 14:57:04,088 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 14:57:04,088 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 14:57:04,088 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:04,088 INFO L225 Difference]: With dead ends: 50 [2022-12-14 14:57:04,088 INFO L226 Difference]: Without dead ends: 50 [2022-12-14 14:57:04,089 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=28, Invalid=44, Unknown=0, NotChecked=0, Total=72 [2022-12-14 14:57:04,089 INFO L413 NwaCegarLoop]: 6 mSDtfsCounter, 78 mSDsluCounter, 11 mSDsCounter, 0 mSdLazyCounter, 59 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 60 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 59 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:04,089 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 17 Invalid, 60 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 59 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:57:04,090 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-12-14 14:57:04,090 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 33. [2022-12-14 14:57:04,091 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 28 states have (on average 1.4642857142857142) internal successors, (41), 32 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,091 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 41 transitions. [2022-12-14 14:57:04,091 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 41 transitions. Word has length 11 [2022-12-14 14:57:04,091 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:04,091 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 41 transitions. [2022-12-14 14:57:04,091 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 2.2) internal successors, (11), 5 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,091 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 41 transitions. [2022-12-14 14:57:04,091 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 14:57:04,091 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:04,091 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:04,092 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-12-14 14:57:04,092 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:04,092 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:04,092 INFO L85 PathProgramCache]: Analyzing trace with hash 1209062877, now seen corresponding path program 1 times [2022-12-14 14:57:04,092 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:04,092 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1708148276] [2022-12-14 14:57:04,092 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:04,092 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:04,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:04,109 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:04,109 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:04,109 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1708148276] [2022-12-14 14:57:04,110 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1708148276] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:04,110 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:57:04,110 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-14 14:57:04,110 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [677595084] [2022-12-14 14:57:04,110 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:04,110 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 14:57:04,110 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:04,111 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 14:57:04,111 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 14:57:04,111 INFO L87 Difference]: Start difference. First operand 33 states and 41 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,126 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:04,126 INFO L93 Difference]: Finished difference Result 35 states and 43 transitions. [2022-12-14 14:57:04,126 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 14:57:04,127 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 14:57:04,127 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:04,127 INFO L225 Difference]: With dead ends: 35 [2022-12-14 14:57:04,127 INFO L226 Difference]: Without dead ends: 35 [2022-12-14 14:57:04,127 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 14:57:04,128 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 0 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:04,128 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 29 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:57:04,129 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2022-12-14 14:57:04,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 35. [2022-12-14 14:57:04,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 35 states, 30 states have (on average 1.4333333333333333) internal successors, (43), 34 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 35 states to 35 states and 43 transitions. [2022-12-14 14:57:04,130 INFO L78 Accepts]: Start accepts. Automaton has 35 states and 43 transitions. Word has length 11 [2022-12-14 14:57:04,130 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:04,131 INFO L495 AbstractCegarLoop]: Abstraction has 35 states and 43 transitions. [2022-12-14 14:57:04,131 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,131 INFO L276 IsEmpty]: Start isEmpty. Operand 35 states and 43 transitions. [2022-12-14 14:57:04,131 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-12-14 14:57:04,131 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:04,131 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:04,131 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-12-14 14:57:04,132 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:04,132 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:04,132 INFO L85 PathProgramCache]: Analyzing trace with hash -2035392994, now seen corresponding path program 1 times [2022-12-14 14:57:04,132 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:04,132 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [260336462] [2022-12-14 14:57:04,132 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:04,132 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:04,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:04,328 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:04,328 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:04,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [260336462] [2022-12-14 14:57:04,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [260336462] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:04,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:57:04,328 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-12-14 14:57:04,328 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1655373118] [2022-12-14 14:57:04,328 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:04,328 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-12-14 14:57:04,328 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:04,329 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-12-14 14:57:04,329 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=88, Unknown=0, NotChecked=0, Total=110 [2022-12-14 14:57:04,329 INFO L87 Difference]: Start difference. First operand 35 states and 43 transitions. Second operand has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:04,592 INFO L93 Difference]: Finished difference Result 81 states and 97 transitions. [2022-12-14 14:57:04,592 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-12-14 14:57:04,592 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-12-14 14:57:04,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:04,592 INFO L225 Difference]: With dead ends: 81 [2022-12-14 14:57:04,593 INFO L226 Difference]: Without dead ends: 81 [2022-12-14 14:57:04,593 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 49 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=149, Invalid=313, Unknown=0, NotChecked=0, Total=462 [2022-12-14 14:57:04,594 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 126 mSDsluCounter, 70 mSDsCounter, 0 mSdLazyCounter, 203 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 126 SdHoareTripleChecker+Valid, 84 SdHoareTripleChecker+Invalid, 207 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 203 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:04,594 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [126 Valid, 84 Invalid, 207 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 203 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 14:57:04,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2022-12-14 14:57:04,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 46. [2022-12-14 14:57:04,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 41 states have (on average 1.3902439024390243) internal successors, (57), 45 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 57 transitions. [2022-12-14 14:57:04,596 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 57 transitions. Word has length 13 [2022-12-14 14:57:04,596 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:04,596 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 57 transitions. [2022-12-14 14:57:04,597 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 1.1818181818181819) internal successors, (13), 10 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,597 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 57 transitions. [2022-12-14 14:57:04,597 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-12-14 14:57:04,597 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:04,597 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:04,597 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-12-14 14:57:04,597 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:04,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:04,598 INFO L85 PathProgramCache]: Analyzing trace with hash -2026746548, now seen corresponding path program 1 times [2022-12-14 14:57:04,598 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:04,598 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1574901423] [2022-12-14 14:57:04,598 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:04,598 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:04,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:04,644 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:04,644 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:04,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1574901423] [2022-12-14 14:57:04,645 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1574901423] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:04,645 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:57:04,645 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-14 14:57:04,645 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1991324380] [2022-12-14 14:57:04,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:04,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-12-14 14:57:04,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:04,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-14 14:57:04,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-12-14 14:57:04,646 INFO L87 Difference]: Start difference. First operand 46 states and 57 transitions. Second operand has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:04,681 INFO L93 Difference]: Finished difference Result 51 states and 61 transitions. [2022-12-14 14:57:04,681 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 14:57:04,681 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-12-14 14:57:04,681 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:04,681 INFO L225 Difference]: With dead ends: 51 [2022-12-14 14:57:04,682 INFO L226 Difference]: Without dead ends: 48 [2022-12-14 14:57:04,682 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2022-12-14 14:57:04,682 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 8 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 48 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:04,682 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 26 Invalid, 48 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:57:04,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2022-12-14 14:57:04,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 47. [2022-12-14 14:57:04,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47 states, 42 states have (on average 1.3095238095238095) internal successors, (55), 46 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,684 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 55 transitions. [2022-12-14 14:57:04,685 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 55 transitions. Word has length 13 [2022-12-14 14:57:04,685 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:04,685 INFO L495 AbstractCegarLoop]: Abstraction has 47 states and 55 transitions. [2022-12-14 14:57:04,685 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,685 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 55 transitions. [2022-12-14 14:57:04,685 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-12-14 14:57:04,685 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:04,685 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:04,686 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-12-14 14:57:04,686 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:04,686 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:04,686 INFO L85 PathProgramCache]: Analyzing trace with hash -1802581683, now seen corresponding path program 1 times [2022-12-14 14:57:04,686 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:04,686 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1512453716] [2022-12-14 14:57:04,686 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:04,687 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:04,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:04,835 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:57:04,836 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:04,836 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1512453716] [2022-12-14 14:57:04,836 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1512453716] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:04,836 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:57:04,836 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-14 14:57:04,836 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1904988727] [2022-12-14 14:57:04,836 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:04,836 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-12-14 14:57:04,837 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:04,837 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-14 14:57:04,837 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-12-14 14:57:04,837 INFO L87 Difference]: Start difference. First operand 47 states and 55 transitions. Second operand has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:04,912 INFO L93 Difference]: Finished difference Result 43 states and 50 transitions. [2022-12-14 14:57:04,912 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-14 14:57:04,912 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-12-14 14:57:04,913 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:04,913 INFO L225 Difference]: With dead ends: 43 [2022-12-14 14:57:04,913 INFO L226 Difference]: Without dead ends: 37 [2022-12-14 14:57:04,913 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2022-12-14 14:57:04,914 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 8 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 78 SdHoareTripleChecker+Invalid, 72 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:04,914 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 78 Invalid, 72 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:57:04,914 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2022-12-14 14:57:04,915 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 36. [2022-12-14 14:57:04,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36 states, 31 states have (on average 1.3548387096774193) internal successors, (42), 35 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36 states to 36 states and 42 transitions. [2022-12-14 14:57:04,915 INFO L78 Accepts]: Start accepts. Automaton has 36 states and 42 transitions. Word has length 15 [2022-12-14 14:57:04,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:04,916 INFO L495 AbstractCegarLoop]: Abstraction has 36 states and 42 transitions. [2022-12-14 14:57:04,916 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 2.142857142857143) internal successors, (15), 6 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:04,916 INFO L276 IsEmpty]: Start isEmpty. Operand 36 states and 42 transitions. [2022-12-14 14:57:04,916 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 16 [2022-12-14 14:57:04,916 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:04,916 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:04,916 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-12-14 14:57:04,917 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:04,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:04,917 INFO L85 PathProgramCache]: Analyzing trace with hash 204836708, now seen corresponding path program 1 times [2022-12-14 14:57:04,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:04,917 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1647363637] [2022-12-14 14:57:04,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:04,918 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:04,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:05,067 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:05,067 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:05,068 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1647363637] [2022-12-14 14:57:05,068 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1647363637] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:05,068 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 14:57:05,068 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-14 14:57:05,068 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [103528640] [2022-12-14 14:57:05,068 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:05,068 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-12-14 14:57:05,068 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:05,068 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-14 14:57:05,068 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2022-12-14 14:57:05,069 INFO L87 Difference]: Start difference. First operand 36 states and 42 transitions. Second operand has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:05,154 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:05,154 INFO L93 Difference]: Finished difference Result 44 states and 50 transitions. [2022-12-14 14:57:05,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 14:57:05,155 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 15 [2022-12-14 14:57:05,155 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:05,155 INFO L225 Difference]: With dead ends: 44 [2022-12-14 14:57:05,155 INFO L226 Difference]: Without dead ends: 38 [2022-12-14 14:57:05,155 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2022-12-14 14:57:05,156 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 35 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 80 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 81 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 80 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:05,156 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 74 Invalid, 81 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 80 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 14:57:05,157 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38 states. [2022-12-14 14:57:05,157 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38 to 37. [2022-12-14 14:57:05,157 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 32 states have (on average 1.34375) internal successors, (43), 36 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:05,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 43 transitions. [2022-12-14 14:57:05,158 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 43 transitions. Word has length 15 [2022-12-14 14:57:05,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:05,158 INFO L495 AbstractCegarLoop]: Abstraction has 37 states and 43 transitions. [2022-12-14 14:57:05,158 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 1.875) internal successors, (15), 7 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:05,158 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 43 transitions. [2022-12-14 14:57:05,158 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2022-12-14 14:57:05,158 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:05,159 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:05,159 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-12-14 14:57:05,159 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:05,159 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:05,159 INFO L85 PathProgramCache]: Analyzing trace with hash 1117547254, now seen corresponding path program 1 times [2022-12-14 14:57:05,159 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:05,159 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1162603006] [2022-12-14 14:57:05,159 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:05,160 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:05,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:05,364 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:05,364 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:05,364 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1162603006] [2022-12-14 14:57:05,365 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1162603006] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:05,365 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1679408428] [2022-12-14 14:57:05,365 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:05,365 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:05,365 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:05,366 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:05,366 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 14:57:05,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:05,425 INFO L263 TraceCheckSpWp]: Trace formula consists of 162 conjuncts, 20 conjunts are in the unsatisfiable core [2022-12-14 14:57:05,426 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:05,489 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:05,490 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:05,569 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 14:57:05,587 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:05,587 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1679408428] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:05,587 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [587430619] [2022-12-14 14:57:05,589 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 14:57:05,589 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:05,590 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:05,590 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:05,590 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:05,622 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:05,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:05,668 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:05,716 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:05,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:05,793 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:05,835 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:05,858 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:05,901 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:05,941 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:57:05,941 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:57:06,240 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:08,386 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2087#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:57:08,386 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:57:08,386 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:08,387 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 17 [2022-12-14 14:57:08,387 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1530370750] [2022-12-14 14:57:08,387 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:57:08,387 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2022-12-14 14:57:08,387 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:08,388 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2022-12-14 14:57:08,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=140, Invalid=852, Unknown=0, NotChecked=0, Total=992 [2022-12-14 14:57:08,388 INFO L87 Difference]: Start difference. First operand 37 states and 43 transitions. Second operand has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:08,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:08,555 INFO L93 Difference]: Finished difference Result 54 states and 59 transitions. [2022-12-14 14:57:08,555 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-12-14 14:57:08,555 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2022-12-14 14:57:08,555 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:08,556 INFO L225 Difference]: With dead ends: 54 [2022-12-14 14:57:08,556 INFO L226 Difference]: Without dead ends: 50 [2022-12-14 14:57:08,556 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 24 SyntacticMatches, 2 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 433 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=201, Invalid=1131, Unknown=0, NotChecked=0, Total=1332 [2022-12-14 14:57:08,557 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 226 mSDsluCounter, 27 mSDsCounter, 0 mSdLazyCounter, 145 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 35 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 145 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:08,557 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [226 Valid, 35 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 145 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 14:57:08,557 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2022-12-14 14:57:08,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 33. [2022-12-14 14:57:08,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 30 states have (on average 1.2666666666666666) internal successors, (38), 32 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:08,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 38 transitions. [2022-12-14 14:57:08,559 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 38 transitions. Word has length 17 [2022-12-14 14:57:08,559 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:08,559 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 38 transitions. [2022-12-14 14:57:08,559 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 17 states have (on average 2.4705882352941178) internal successors, (42), 18 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:08,559 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 38 transitions. [2022-12-14 14:57:08,559 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-12-14 14:57:08,560 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:08,560 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:08,564 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 14:57:08,760 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:08,761 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:08,762 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:08,762 INFO L85 PathProgramCache]: Analyzing trace with hash 221052965, now seen corresponding path program 1 times [2022-12-14 14:57:08,763 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:08,763 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1566273684] [2022-12-14 14:57:08,763 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:08,764 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:08,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:08,885 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:08,885 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:08,885 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1566273684] [2022-12-14 14:57:08,885 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1566273684] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:08,885 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [921751272] [2022-12-14 14:57:08,885 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:08,885 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:08,885 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:08,886 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:08,887 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-12-14 14:57:08,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:08,947 INFO L263 TraceCheckSpWp]: Trace formula consists of 165 conjuncts, 22 conjunts are in the unsatisfiable core [2022-12-14 14:57:08,948 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:09,016 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:09,016 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:09,087 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 14:57:09,103 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:09,103 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [921751272] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:09,104 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1905403754] [2022-12-14 14:57:09,106 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:57:09,106 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:09,106 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:09,106 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:09,106 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:09,132 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:09,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:09,188 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:09,243 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:09,281 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:09,334 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:09,391 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:57:09,391 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-12-14 14:57:09,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:09,456 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:09,526 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-12-14 14:57:09,526 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 177 treesize of output 181 [2022-12-14 14:57:09,659 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-12-14 14:57:09,660 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 328 treesize of output 343 [2022-12-14 14:57:10,897 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:13,414 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2323#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:57:13,414 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:57:13,414 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:13,414 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 15 [2022-12-14 14:57:13,415 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1792780041] [2022-12-14 14:57:13,415 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:57:13,415 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-12-14 14:57:13,415 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:13,416 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-12-14 14:57:13,416 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=146, Invalid=910, Unknown=0, NotChecked=0, Total=1056 [2022-12-14 14:57:13,416 INFO L87 Difference]: Start difference. First operand 33 states and 38 transitions. Second operand has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:13,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:13,540 INFO L93 Difference]: Finished difference Result 62 states and 72 transitions. [2022-12-14 14:57:13,541 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-14 14:57:13,541 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-12-14 14:57:13,541 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:13,541 INFO L225 Difference]: With dead ends: 62 [2022-12-14 14:57:13,541 INFO L226 Difference]: Without dead ends: 62 [2022-12-14 14:57:13,542 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 28 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 416 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=202, Invalid=1204, Unknown=0, NotChecked=0, Total=1406 [2022-12-14 14:57:13,542 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 279 mSDsluCounter, 31 mSDsCounter, 0 mSdLazyCounter, 165 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 279 SdHoareTripleChecker+Valid, 38 SdHoareTripleChecker+Invalid, 168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 165 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:13,543 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [279 Valid, 38 Invalid, 168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 165 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 14:57:13,543 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-12-14 14:57:13,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 43. [2022-12-14 14:57:13,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 40 states have (on average 1.3) internal successors, (52), 42 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:13,544 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 52 transitions. [2022-12-14 14:57:13,544 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 52 transitions. Word has length 19 [2022-12-14 14:57:13,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:13,545 INFO L495 AbstractCegarLoop]: Abstraction has 43 states and 52 transitions. [2022-12-14 14:57:13,545 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 3.0625) internal successors, (49), 16 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:13,545 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 52 transitions. [2022-12-14 14:57:13,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2022-12-14 14:57:13,545 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:13,545 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:13,550 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-12-14 14:57:13,746 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2022-12-14 14:57:13,746 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:13,746 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:13,746 INFO L85 PathProgramCache]: Analyzing trace with hash -1734844397, now seen corresponding path program 1 times [2022-12-14 14:57:13,747 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:13,747 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [726115241] [2022-12-14 14:57:13,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:13,747 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:13,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:13,898 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:13,898 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:13,899 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [726115241] [2022-12-14 14:57:13,899 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [726115241] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:13,899 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2070421811] [2022-12-14 14:57:13,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:13,899 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:13,899 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:13,900 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:13,901 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-12-14 14:57:13,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:13,965 INFO L263 TraceCheckSpWp]: Trace formula consists of 176 conjuncts, 23 conjunts are in the unsatisfiable core [2022-12-14 14:57:13,966 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:14,043 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:14,043 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:14,131 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 14:57:14,145 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:14,145 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2070421811] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:14,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1495998685] [2022-12-14 14:57:14,147 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 14:57:14,147 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:14,147 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:14,147 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:14,147 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:14,163 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:14,164 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:14,189 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:14,221 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:14,249 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:14,278 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:14,324 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:57:14,324 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 90 treesize of output 89 [2022-12-14 14:57:14,368 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:14,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:14,452 INFO L321 Elim1Store]: treesize reduction 24, result has 47.8 percent of original size [2022-12-14 14:57:14,452 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 177 treesize of output 181 [2022-12-14 14:57:14,576 INFO L321 Elim1Store]: treesize reduction 50, result has 45.1 percent of original size [2022-12-14 14:57:14,577 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 3 case distinctions, treesize of input 328 treesize of output 343 [2022-12-14 14:57:15,490 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:17,659 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2588#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:57:17,659 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:57:17,659 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:17,659 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 18 [2022-12-14 14:57:17,659 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1872091358] [2022-12-14 14:57:17,659 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:57:17,660 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-12-14 14:57:17,660 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:17,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-12-14 14:57:17,661 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=139, Invalid=983, Unknown=0, NotChecked=0, Total=1122 [2022-12-14 14:57:17,661 INFO L87 Difference]: Start difference. First operand 43 states and 52 transitions. Second operand has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:17,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:17,863 INFO L93 Difference]: Finished difference Result 58 states and 66 transitions. [2022-12-14 14:57:17,864 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 14:57:17,864 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 20 [2022-12-14 14:57:17,864 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:17,864 INFO L225 Difference]: With dead ends: 58 [2022-12-14 14:57:17,864 INFO L226 Difference]: Without dead ends: 58 [2022-12-14 14:57:17,865 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 31 SyntacticMatches, 2 SemanticMatches, 41 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 499 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=266, Invalid=1540, Unknown=0, NotChecked=0, Total=1806 [2022-12-14 14:57:17,866 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 212 mSDsluCounter, 39 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 212 SdHoareTripleChecker+Valid, 46 SdHoareTripleChecker+Invalid, 268 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:17,866 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [212 Valid, 46 Invalid, 268 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 14:57:17,866 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2022-12-14 14:57:17,867 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 46. [2022-12-14 14:57:17,867 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 43 states have (on average 1.2790697674418605) internal successors, (55), 45 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:17,867 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 55 transitions. [2022-12-14 14:57:17,867 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 55 transitions. Word has length 20 [2022-12-14 14:57:17,867 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:17,867 INFO L495 AbstractCegarLoop]: Abstraction has 46 states and 55 transitions. [2022-12-14 14:57:17,867 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 2.5789473684210527) internal successors, (49), 19 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:17,867 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 55 transitions. [2022-12-14 14:57:17,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-12-14 14:57:17,868 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:17,868 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:17,872 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-12-14 14:57:18,068 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable22 [2022-12-14 14:57:18,070 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:18,070 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:18,071 INFO L85 PathProgramCache]: Analyzing trace with hash -738116091, now seen corresponding path program 2 times [2022-12-14 14:57:18,071 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:18,071 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [998684196] [2022-12-14 14:57:18,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:18,072 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:18,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:18,314 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 5 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:18,314 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:18,314 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [998684196] [2022-12-14 14:57:18,314 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [998684196] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:18,314 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [342069216] [2022-12-14 14:57:18,314 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 14:57:18,314 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:18,314 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:18,315 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:18,316 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-12-14 14:57:18,433 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 14:57:18,433 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:57:18,435 INFO L263 TraceCheckSpWp]: Trace formula consists of 192 conjuncts, 48 conjunts are in the unsatisfiable core [2022-12-14 14:57:18,437 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:18,442 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 14:57:18,499 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:18,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 14:57:18,792 INFO L321 Elim1Store]: treesize reduction 24, result has 35.1 percent of original size [2022-12-14 14:57:18,792 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 48 treesize of output 33 [2022-12-14 14:57:18,809 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:18,809 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:19,060 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:57:19,061 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 64 treesize of output 42 [2022-12-14 14:57:19,076 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:57:19,076 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 111 treesize of output 116 [2022-12-14 14:57:19,086 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:57:19,086 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 68 treesize of output 64 [2022-12-14 14:57:19,368 INFO L134 CoverageAnalysis]: Checked inductivity of 9 backedges. 2 proven. 6 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:19,368 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [342069216] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:19,368 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [957384082] [2022-12-14 14:57:19,370 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 14:57:19,370 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:19,371 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:19,371 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:19,371 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:19,393 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:19,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:19,431 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:19,470 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:19,488 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:19,540 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:19,571 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:19,591 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:19,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:19,657 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:57:19,657 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:57:19,812 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:21,481 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2882#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:57:21,481 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:57:21,481 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:21,481 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 13, 13] total 31 [2022-12-14 14:57:21,482 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1302319505] [2022-12-14 14:57:21,482 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:57:21,482 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-12-14 14:57:21,482 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:21,482 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-12-14 14:57:21,482 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=179, Invalid=1876, Unknown=15, NotChecked=0, Total=2070 [2022-12-14 14:57:21,483 INFO L87 Difference]: Start difference. First operand 46 states and 55 transitions. Second operand has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:23,218 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:23,218 INFO L93 Difference]: Finished difference Result 153 states and 170 transitions. [2022-12-14 14:57:23,218 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 40 states. [2022-12-14 14:57:23,218 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-12-14 14:57:23,219 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:23,219 INFO L225 Difference]: With dead ends: 153 [2022-12-14 14:57:23,219 INFO L226 Difference]: Without dead ends: 145 [2022-12-14 14:57:23,220 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 29 SyntacticMatches, 2 SemanticMatches, 77 ConstructedPredicates, 0 IntricatePredicates, 3 DeprecatedPredicates, 1641 ImplicationChecksByTransitivity, 3.7s TimeCoverageRelationStatistics Valid=805, Invalid=5342, Unknown=15, NotChecked=0, Total=6162 [2022-12-14 14:57:23,220 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 489 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 504 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 489 SdHoareTripleChecker+Valid, 106 SdHoareTripleChecker+Invalid, 509 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 504 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:23,221 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [489 Valid, 106 Invalid, 509 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 504 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 14:57:23,221 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 145 states. [2022-12-14 14:57:23,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 145 to 90. [2022-12-14 14:57:23,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 87 states have (on average 1.2183908045977012) internal successors, (106), 89 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:23,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 106 transitions. [2022-12-14 14:57:23,223 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 106 transitions. Word has length 22 [2022-12-14 14:57:23,223 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:23,223 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 106 transitions. [2022-12-14 14:57:23,223 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 1.84375) internal successors, (59), 31 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:23,223 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 106 transitions. [2022-12-14 14:57:23,224 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2022-12-14 14:57:23,224 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:23,227 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:23,232 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2022-12-14 14:57:23,428 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23,7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:23,429 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:23,429 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:23,430 INFO L85 PathProgramCache]: Analyzing trace with hash 1722857087, now seen corresponding path program 1 times [2022-12-14 14:57:23,430 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:23,430 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [655228453] [2022-12-14 14:57:23,430 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:23,430 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:23,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:23,578 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:23,578 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:23,578 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [655228453] [2022-12-14 14:57:23,578 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [655228453] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:23,578 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [433539825] [2022-12-14 14:57:23,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:23,579 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:23,579 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:23,579 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:23,580 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-12-14 14:57:23,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:23,637 INFO L263 TraceCheckSpWp]: Trace formula consists of 194 conjuncts, 18 conjunts are in the unsatisfiable core [2022-12-14 14:57:23,639 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:23,670 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 14:57:23,670 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:23,707 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 6 [2022-12-14 14:57:23,720 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 2 proven. 4 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 14:57:23,720 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [433539825] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:23,720 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [261102102] [2022-12-14 14:57:23,722 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:57:23,722 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:23,722 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:23,722 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:23,722 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:23,741 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:23,744 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:23,776 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:23,809 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:23,840 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:23,883 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:23,923 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-12-14 14:57:23,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:23,986 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:24,031 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:57:24,032 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:57:24,260 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:26,782 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSifa [261102102] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 14:57:26,782 INFO L184 FreeRefinementEngine]: Found 1 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:26,782 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [7, 5, 5] total 28 [2022-12-14 14:57:26,783 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [421402101] [2022-12-14 14:57:26,783 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 14:57:26,783 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2022-12-14 14:57:26,783 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:26,783 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-12-14 14:57:26,784 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=664, Unknown=0, NotChecked=0, Total=812 [2022-12-14 14:57:26,784 INFO L87 Difference]: Start difference. First operand 90 states and 106 transitions. Second operand has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:29,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:29,492 INFO L93 Difference]: Finished difference Result 94 states and 108 transitions. [2022-12-14 14:57:29,493 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-14 14:57:29,493 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 24 [2022-12-14 14:57:29,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:29,494 INFO L225 Difference]: With dead ends: 94 [2022-12-14 14:57:29,494 INFO L226 Difference]: Without dead ends: 94 [2022-12-14 14:57:29,494 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 86 GetRequests, 49 SyntacticMatches, 1 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 226 ImplicationChecksByTransitivity, 5.1s TimeCoverageRelationStatistics Valid=280, Invalid=1126, Unknown=0, NotChecked=0, Total=1406 [2022-12-14 14:57:29,494 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 78 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 178 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 78 SdHoareTripleChecker+Valid, 2 SdHoareTripleChecker+Invalid, 180 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 178 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:29,494 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [78 Valid, 2 Invalid, 180 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 178 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 14:57:29,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2022-12-14 14:57:29,495 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 90. [2022-12-14 14:57:29,496 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 87 states have (on average 1.1954022988505748) internal successors, (104), 89 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:29,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 104 transitions. [2022-12-14 14:57:29,496 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 104 transitions. Word has length 24 [2022-12-14 14:57:29,496 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:29,496 INFO L495 AbstractCegarLoop]: Abstraction has 90 states and 104 transitions. [2022-12-14 14:57:29,496 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 1.1875) internal successors, (19), 16 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:29,496 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 104 transitions. [2022-12-14 14:57:29,496 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2022-12-14 14:57:29,497 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:29,497 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:29,501 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2022-12-14 14:57:29,697 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24,8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:29,698 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:29,699 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:29,699 INFO L85 PathProgramCache]: Analyzing trace with hash 1241317677, now seen corresponding path program 3 times [2022-12-14 14:57:29,700 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:29,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [602082147] [2022-12-14 14:57:29,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:29,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:29,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:29,865 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:57:29,865 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:29,865 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [602082147] [2022-12-14 14:57:29,865 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [602082147] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:29,865 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1685514136] [2022-12-14 14:57:29,865 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 14:57:29,865 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:29,866 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:29,866 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:29,867 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-12-14 14:57:29,955 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 14:57:29,955 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:57:29,957 INFO L263 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 26 conjunts are in the unsatisfiable core [2022-12-14 14:57:29,958 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:29,965 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 14:57:29,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 14:57:30,036 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:57:30,036 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:30,160 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 1 proven. 10 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:57:30,160 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1685514136] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:30,160 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [635195771] [2022-12-14 14:57:30,162 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 14:57:30,162 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:30,162 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:30,163 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:30,163 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:30,183 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:30,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:30,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:30,244 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:30,270 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:30,296 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:30,328 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-12-14 14:57:30,361 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:30,385 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:30,427 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:57:30,428 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:57:30,595 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:32,644 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3748#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:57:32,644 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:57:32,644 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:32,644 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 23 [2022-12-14 14:57:32,644 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [390415998] [2022-12-14 14:57:32,644 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:57:32,645 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2022-12-14 14:57:32,645 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:32,645 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2022-12-14 14:57:32,645 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=1216, Unknown=0, NotChecked=0, Total=1406 [2022-12-14 14:57:32,645 INFO L87 Difference]: Start difference. First operand 90 states and 104 transitions. Second operand has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:32,946 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:32,946 INFO L93 Difference]: Finished difference Result 132 states and 150 transitions. [2022-12-14 14:57:32,947 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-14 14:57:32,947 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2022-12-14 14:57:32,947 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:32,949 INFO L225 Difference]: With dead ends: 132 [2022-12-14 14:57:32,949 INFO L226 Difference]: Without dead ends: 132 [2022-12-14 14:57:32,950 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 540 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=309, Invalid=1671, Unknown=0, NotChecked=0, Total=1980 [2022-12-14 14:57:32,950 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 190 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 410 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 190 SdHoareTripleChecker+Valid, 113 SdHoareTripleChecker+Invalid, 412 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 410 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:32,950 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [190 Valid, 113 Invalid, 412 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 410 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 14:57:32,950 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2022-12-14 14:57:32,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 97. [2022-12-14 14:57:32,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 94 states have (on average 1.2127659574468086) internal successors, (114), 96 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:32,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 114 transitions. [2022-12-14 14:57:32,953 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 114 transitions. Word has length 26 [2022-12-14 14:57:32,953 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:32,953 INFO L495 AbstractCegarLoop]: Abstraction has 97 states and 114 transitions. [2022-12-14 14:57:32,954 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 23 states have (on average 2.739130434782609) internal successors, (63), 24 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:32,954 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 114 transitions. [2022-12-14 14:57:32,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-12-14 14:57:32,954 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:32,954 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:32,958 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2022-12-14 14:57:33,155 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-12-14 14:57:33,156 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:33,157 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:33,157 INFO L85 PathProgramCache]: Analyzing trace with hash -1667724320, now seen corresponding path program 2 times [2022-12-14 14:57:33,157 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:33,157 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1624274296] [2022-12-14 14:57:33,158 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:33,158 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:33,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:33,451 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:33,451 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:33,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1624274296] [2022-12-14 14:57:33,451 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1624274296] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:33,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1869269886] [2022-12-14 14:57:33,451 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 14:57:33,452 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:33,452 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:33,452 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:33,453 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-12-14 14:57:33,516 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 14:57:33,516 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:57:33,518 INFO L263 TraceCheckSpWp]: Trace formula consists of 213 conjuncts, 32 conjunts are in the unsatisfiable core [2022-12-14 14:57:33,519 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:33,558 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:33,589 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:57:33,589 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:57:33,695 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 14:57:33,695 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 18 treesize of output 10 [2022-12-14 14:57:33,709 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:33,709 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:33,795 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-12-14 14:57:33,855 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 9 proven. 3 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:33,856 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1869269886] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:33,856 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [614815199] [2022-12-14 14:57:33,857 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:57:33,857 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:33,858 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:33,858 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:33,858 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:33,880 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:33,882 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:33,904 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:33,931 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:33,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:33,979 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:34,013 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:57:34,013 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-12-14 14:57:34,045 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:34,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:34,095 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:57:34,096 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:57:34,473 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:36,614 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4190#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:57:36,614 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:57:36,614 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:36,614 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 9] total 22 [2022-12-14 14:57:36,614 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2084838203] [2022-12-14 14:57:36,614 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:57:36,614 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-12-14 14:57:36,615 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:36,615 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-12-14 14:57:36,616 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=157, Invalid=1325, Unknown=0, NotChecked=0, Total=1482 [2022-12-14 14:57:36,616 INFO L87 Difference]: Start difference. First operand 97 states and 114 transitions. Second operand has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:36,830 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:36,830 INFO L93 Difference]: Finished difference Result 115 states and 130 transitions. [2022-12-14 14:57:36,830 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-12-14 14:57:36,830 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-12-14 14:57:36,831 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:36,831 INFO L225 Difference]: With dead ends: 115 [2022-12-14 14:57:36,831 INFO L226 Difference]: Without dead ends: 79 [2022-12-14 14:57:36,831 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 98 GetRequests, 53 SyntacticMatches, 2 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 3 DeprecatedPredicates, 658 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=239, Invalid=1741, Unknown=0, NotChecked=0, Total=1980 [2022-12-14 14:57:36,831 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 84 mSDsluCounter, 85 mSDsCounter, 0 mSdLazyCounter, 161 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 92 SdHoareTripleChecker+Invalid, 164 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 161 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:36,832 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 92 Invalid, 164 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 161 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 14:57:36,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2022-12-14 14:57:36,833 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 78. [2022-12-14 14:57:36,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 75 states have (on average 1.2133333333333334) internal successors, (91), 77 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:36,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 91 transitions. [2022-12-14 14:57:36,833 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 91 transitions. Word has length 28 [2022-12-14 14:57:36,833 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:36,833 INFO L495 AbstractCegarLoop]: Abstraction has 78 states and 91 transitions. [2022-12-14 14:57:36,833 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 2.739130434782609) internal successors, (63), 22 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:36,833 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 91 transitions. [2022-12-14 14:57:36,833 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-12-14 14:57:36,834 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:36,834 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:36,838 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2022-12-14 14:57:37,034 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2022-12-14 14:57:37,035 INFO L420 AbstractCegarLoop]: === Iteration 28 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:37,036 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:37,036 INFO L85 PathProgramCache]: Analyzing trace with hash 427887228, now seen corresponding path program 2 times [2022-12-14 14:57:37,036 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:37,036 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [594313275] [2022-12-14 14:57:37,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:37,037 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:37,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:37,216 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 17 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:57:37,217 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:37,217 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [594313275] [2022-12-14 14:57:37,217 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [594313275] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:37,217 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [646915833] [2022-12-14 14:57:37,217 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 14:57:37,217 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:37,217 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:37,218 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:37,219 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-12-14 14:57:37,399 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 14:57:37,399 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:57:37,401 INFO L263 TraceCheckSpWp]: Trace formula consists of 232 conjuncts, 27 conjunts are in the unsatisfiable core [2022-12-14 14:57:37,402 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:37,533 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 16 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:57:37,533 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:37,656 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 14:57:37,678 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 1 proven. 16 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:57:37,678 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [646915833] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:37,678 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [180009106] [2022-12-14 14:57:37,679 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 14:57:37,679 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:37,680 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:37,680 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:37,680 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:37,696 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:37,697 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:37,721 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:37,763 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:37,789 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:37,818 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:37,848 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-12-14 14:57:37,885 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:37,907 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:37,945 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:57:37,946 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:57:38,098 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:39,761 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4604#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:57:39,761 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:57:39,761 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:39,761 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 23 [2022-12-14 14:57:39,761 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [47765481] [2022-12-14 14:57:39,761 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:57:39,761 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2022-12-14 14:57:39,761 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:39,762 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2022-12-14 14:57:39,762 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=169, Invalid=1313, Unknown=0, NotChecked=0, Total=1482 [2022-12-14 14:57:39,763 INFO L87 Difference]: Start difference. First operand 78 states and 91 transitions. Second operand has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:40,032 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:40,032 INFO L93 Difference]: Finished difference Result 97 states and 109 transitions. [2022-12-14 14:57:40,033 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 14:57:40,033 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 29 [2022-12-14 14:57:40,033 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:40,033 INFO L225 Difference]: With dead ends: 97 [2022-12-14 14:57:40,033 INFO L226 Difference]: Without dead ends: 97 [2022-12-14 14:57:40,033 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 53 SyntacticMatches, 3 SemanticMatches, 48 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 629 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=365, Invalid=2085, Unknown=0, NotChecked=0, Total=2450 [2022-12-14 14:57:40,034 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 298 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 324 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 298 SdHoareTripleChecker+Valid, 57 SdHoareTripleChecker+Invalid, 326 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 324 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:40,034 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [298 Valid, 57 Invalid, 326 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 324 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 14:57:40,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2022-12-14 14:57:40,036 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 81. [2022-12-14 14:57:40,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 78 states have (on average 1.205128205128205) internal successors, (94), 80 states have internal predecessors, (94), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:40,036 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 94 transitions. [2022-12-14 14:57:40,036 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 94 transitions. Word has length 29 [2022-12-14 14:57:40,037 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:40,037 INFO L495 AbstractCegarLoop]: Abstraction has 81 states and 94 transitions. [2022-12-14 14:57:40,037 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 24 states have (on average 3.0) internal successors, (72), 24 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:40,037 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 94 transitions. [2022-12-14 14:57:40,037 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-12-14 14:57:40,037 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:40,037 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:40,043 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2022-12-14 14:57:40,238 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable27,11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:40,238 INFO L420 AbstractCegarLoop]: === Iteration 29 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:40,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:40,239 INFO L85 PathProgramCache]: Analyzing trace with hash 294381018, now seen corresponding path program 3 times [2022-12-14 14:57:40,240 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:40,240 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1075691781] [2022-12-14 14:57:40,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:40,240 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:40,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:40,390 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:40,390 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:40,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1075691781] [2022-12-14 14:57:40,390 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1075691781] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:40,390 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [605257628] [2022-12-14 14:57:40,390 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 14:57:40,390 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:40,391 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:40,391 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:40,392 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-12-14 14:57:40,466 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 14:57:40,467 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:57:40,468 INFO L263 TraceCheckSpWp]: Trace formula consists of 226 conjuncts, 25 conjunts are in the unsatisfiable core [2022-12-14 14:57:40,469 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:40,545 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:40,545 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:40,637 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 14:57:40,659 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 1 proven. 14 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:57:40,659 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [605257628] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:40,659 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1159198921] [2022-12-14 14:57:40,660 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:57:40,661 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:40,661 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:40,661 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:40,661 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:40,681 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:40,683 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:40,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:40,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:40,758 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:40,784 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:40,811 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-12-14 14:57:40,846 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:40,867 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:40,897 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:57:40,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:57:41,121 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:43,417 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5012#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:57:43,417 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:57:43,417 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:43,417 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 8, 8] total 18 [2022-12-14 14:57:43,417 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1500092593] [2022-12-14 14:57:43,417 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:57:43,417 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2022-12-14 14:57:43,417 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:43,418 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2022-12-14 14:57:43,418 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=166, Invalid=1094, Unknown=0, NotChecked=0, Total=1260 [2022-12-14 14:57:43,418 INFO L87 Difference]: Start difference. First operand 81 states and 94 transitions. Second operand has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:43,606 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:43,606 INFO L93 Difference]: Finished difference Result 143 states and 162 transitions. [2022-12-14 14:57:43,607 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-12-14 14:57:43,607 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-12-14 14:57:43,607 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:43,607 INFO L225 Difference]: With dead ends: 143 [2022-12-14 14:57:43,607 INFO L226 Difference]: Without dead ends: 143 [2022-12-14 14:57:43,607 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 101 GetRequests, 58 SyntacticMatches, 3 SemanticMatches, 40 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 446 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=248, Invalid=1474, Unknown=0, NotChecked=0, Total=1722 [2022-12-14 14:57:43,608 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 242 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 317 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 242 SdHoareTripleChecker+Valid, 69 SdHoareTripleChecker+Invalid, 319 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 317 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:43,608 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [242 Valid, 69 Invalid, 319 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 317 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 14:57:43,608 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2022-12-14 14:57:43,609 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 110. [2022-12-14 14:57:43,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 107 states have (on average 1.205607476635514) internal successors, (129), 109 states have internal predecessors, (129), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:43,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 129 transitions. [2022-12-14 14:57:43,610 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 129 transitions. Word has length 30 [2022-12-14 14:57:43,610 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:43,610 INFO L495 AbstractCegarLoop]: Abstraction has 110 states and 129 transitions. [2022-12-14 14:57:43,610 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 3.736842105263158) internal successors, (71), 19 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:43,610 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 129 transitions. [2022-12-14 14:57:43,610 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-12-14 14:57:43,610 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:43,610 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:43,614 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2022-12-14 14:57:43,811 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2022-12-14 14:57:43,812 INFO L420 AbstractCegarLoop]: === Iteration 30 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:43,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:43,813 INFO L85 PathProgramCache]: Analyzing trace with hash -1117195730, now seen corresponding path program 4 times [2022-12-14 14:57:43,813 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:43,813 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [622305873] [2022-12-14 14:57:43,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:43,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:43,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:44,159 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 3 proven. 19 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:57:44,160 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:44,160 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [622305873] [2022-12-14 14:57:44,160 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [622305873] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:44,160 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1527349747] [2022-12-14 14:57:44,160 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 14:57:44,160 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:44,160 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:44,161 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:44,161 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-12-14 14:57:44,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:44,236 INFO L263 TraceCheckSpWp]: Trace formula consists of 248 conjuncts, 37 conjunts are in the unsatisfiable core [2022-12-14 14:57:44,238 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:44,295 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:44,444 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 14:57:44,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-12-14 14:57:44,446 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:57:44,446 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:44,540 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 14:57:44,542 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:57:44,614 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 9 proven. 13 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:57:44,614 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1527349747] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:44,614 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1159589880] [2022-12-14 14:57:44,615 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 14:57:44,615 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:44,616 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:44,616 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:44,616 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:44,634 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:44,636 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:44,661 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:44,686 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:44,709 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:44,736 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:44,762 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-12-14 14:57:44,797 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:44,825 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:44,856 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:57:44,856 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:57:45,048 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:47,642 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5504#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:57:47,642 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:57:47,642 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:47,642 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 12, 12] total 31 [2022-12-14 14:57:47,642 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1557609799] [2022-12-14 14:57:47,642 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:57:47,642 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-12-14 14:57:47,642 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:47,643 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-12-14 14:57:47,643 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=145, Invalid=1835, Unknown=0, NotChecked=0, Total=1980 [2022-12-14 14:57:47,643 INFO L87 Difference]: Start difference. First operand 110 states and 129 transitions. Second operand has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 31 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:49,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:49,612 INFO L93 Difference]: Finished difference Result 359 states and 402 transitions. [2022-12-14 14:57:49,612 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 54 states. [2022-12-14 14:57:49,612 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 31 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 31 [2022-12-14 14:57:49,613 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:49,614 INFO L225 Difference]: With dead ends: 359 [2022-12-14 14:57:49,614 INFO L226 Difference]: Without dead ends: 347 [2022-12-14 14:57:49,615 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 61 SyntacticMatches, 2 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 4 DeprecatedPredicates, 2043 ImplicationChecksByTransitivity, 4.4s TimeCoverageRelationStatistics Valid=770, Invalid=7062, Unknown=0, NotChecked=0, Total=7832 [2022-12-14 14:57:49,616 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 617 mSDsluCounter, 256 mSDsCounter, 0 mSdLazyCounter, 1129 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 617 SdHoareTripleChecker+Valid, 270 SdHoareTripleChecker+Invalid, 1136 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 1129 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:49,616 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [617 Valid, 270 Invalid, 1136 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 1129 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 14:57:49,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 347 states. [2022-12-14 14:57:49,618 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 347 to 185. [2022-12-14 14:57:49,619 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 182 states have (on average 1.1923076923076923) internal successors, (217), 184 states have internal predecessors, (217), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:49,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 217 transitions. [2022-12-14 14:57:49,619 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 217 transitions. Word has length 31 [2022-12-14 14:57:49,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:49,619 INFO L495 AbstractCegarLoop]: Abstraction has 185 states and 217 transitions. [2022-12-14 14:57:49,619 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.3870967741935485) internal successors, (74), 31 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:49,619 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 217 transitions. [2022-12-14 14:57:49,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2022-12-14 14:57:49,620 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:49,620 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:49,624 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Forceful destruction successful, exit code 0 [2022-12-14 14:57:49,820 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:49,820 INFO L420 AbstractCegarLoop]: === Iteration 31 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:49,821 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:49,821 INFO L85 PathProgramCache]: Analyzing trace with hash -1600115824, now seen corresponding path program 1 times [2022-12-14 14:57:49,821 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:49,821 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [988813690] [2022-12-14 14:57:49,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:49,821 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:49,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:49,976 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 0 proven. 19 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:57:49,976 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:49,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [988813690] [2022-12-14 14:57:49,976 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [988813690] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:49,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1167379919] [2022-12-14 14:57:49,976 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:49,976 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:49,976 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:49,977 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:49,978 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-12-14 14:57:50,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:50,046 INFO L263 TraceCheckSpWp]: Trace formula consists of 250 conjuncts, 29 conjunts are in the unsatisfiable core [2022-12-14 14:57:50,048 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:50,163 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 1 proven. 18 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:57:50,163 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:50,267 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 14:57:50,292 INFO L134 CoverageAnalysis]: Checked inductivity of 23 backedges. 1 proven. 18 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:57:50,293 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1167379919] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:50,293 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [761080849] [2022-12-14 14:57:50,294 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:57:50,294 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:50,294 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:50,295 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:50,295 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:50,314 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:50,316 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:50,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:50,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:50,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:50,428 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:50,466 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-12-14 14:57:50,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:50,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:50,557 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:57:50,557 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:57:51,038 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:52,942 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6364#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:57:52,942 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:57:52,942 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:52,942 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 9] total 20 [2022-12-14 14:57:52,942 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [436450184] [2022-12-14 14:57:52,942 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:57:52,942 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2022-12-14 14:57:52,943 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:52,943 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2022-12-14 14:57:52,943 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=1238, Unknown=0, NotChecked=0, Total=1406 [2022-12-14 14:57:52,943 INFO L87 Difference]: Start difference. First operand 185 states and 217 transitions. Second operand has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:53,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:53,235 INFO L93 Difference]: Finished difference Result 211 states and 237 transitions. [2022-12-14 14:57:53,235 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-14 14:57:53,235 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 33 [2022-12-14 14:57:53,235 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:53,235 INFO L225 Difference]: With dead ends: 211 [2022-12-14 14:57:53,235 INFO L226 Difference]: Without dead ends: 211 [2022-12-14 14:57:53,236 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 118 GetRequests, 66 SyntacticMatches, 3 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 637 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=384, Invalid=2166, Unknown=0, NotChecked=0, Total=2550 [2022-12-14 14:57:53,236 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 422 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 295 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 422 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 299 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 295 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:53,236 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [422 Valid, 49 Invalid, 299 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 295 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 14:57:53,237 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 211 states. [2022-12-14 14:57:53,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 211 to 185. [2022-12-14 14:57:53,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 185 states, 182 states have (on average 1.1813186813186813) internal successors, (215), 184 states have internal predecessors, (215), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:53,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 215 transitions. [2022-12-14 14:57:53,239 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 215 transitions. Word has length 33 [2022-12-14 14:57:53,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:53,239 INFO L495 AbstractCegarLoop]: Abstraction has 185 states and 215 transitions. [2022-12-14 14:57:53,239 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:53,239 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 215 transitions. [2022-12-14 14:57:53,239 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2022-12-14 14:57:53,239 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:53,240 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:53,244 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2022-12-14 14:57:53,440 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30,14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:53,441 INFO L420 AbstractCegarLoop]: === Iteration 32 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:53,442 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:53,442 INFO L85 PathProgramCache]: Analyzing trace with hash 1925889798, now seen corresponding path program 5 times [2022-12-14 14:57:53,442 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:53,442 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1837039195] [2022-12-14 14:57:53,443 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:53,443 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:53,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:53,720 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:57:53,720 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:53,720 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1837039195] [2022-12-14 14:57:53,720 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1837039195] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:53,720 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [259548789] [2022-12-14 14:57:53,721 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 14:57:53,721 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:53,721 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:53,722 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:53,722 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-12-14 14:57:53,834 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-12-14 14:57:53,834 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:57:53,836 INFO L263 TraceCheckSpWp]: Trace formula consists of 274 conjuncts, 28 conjunts are in the unsatisfiable core [2022-12-14 14:57:53,838 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:53,944 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:57:53,944 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:54,062 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 14:57:54,095 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 23 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:57:54,095 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [259548789] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:54,096 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [225804406] [2022-12-14 14:57:54,097 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 14:57:54,097 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:54,097 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:54,097 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:54,097 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:54,116 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:54,117 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:54,137 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:54,169 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:54,185 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:54,216 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:54,239 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:54,256 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:54,285 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:57:54,286 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:57:54,546 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:57:56,235 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7034#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:57:56,235 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:57:56,235 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:57:56,235 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 27 [2022-12-14 14:57:56,235 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [149500744] [2022-12-14 14:57:56,235 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:57:56,236 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-12-14 14:57:56,236 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:57:56,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-12-14 14:57:56,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1525, Unknown=0, NotChecked=0, Total=1722 [2022-12-14 14:57:56,236 INFO L87 Difference]: Start difference. First operand 185 states and 215 transitions. Second operand has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:56,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:57:56,684 INFO L93 Difference]: Finished difference Result 263 states and 298 transitions. [2022-12-14 14:57:56,684 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 14:57:56,685 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 35 [2022-12-14 14:57:56,685 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:57:56,685 INFO L225 Difference]: With dead ends: 263 [2022-12-14 14:57:56,685 INFO L226 Difference]: Without dead ends: 263 [2022-12-14 14:57:56,686 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 122 GetRequests, 69 SyntacticMatches, 4 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 850 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=357, Invalid=2193, Unknown=0, NotChecked=0, Total=2550 [2022-12-14 14:57:56,686 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 290 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 684 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 685 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 684 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 14:57:56,686 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 171 Invalid, 685 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 684 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 14:57:56,686 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 263 states. [2022-12-14 14:57:56,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 263 to 197. [2022-12-14 14:57:56,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197 states, 194 states have (on average 1.1958762886597938) internal successors, (232), 196 states have internal predecessors, (232), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:56,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 232 transitions. [2022-12-14 14:57:56,689 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 232 transitions. Word has length 35 [2022-12-14 14:57:56,689 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:57:56,690 INFO L495 AbstractCegarLoop]: Abstraction has 197 states and 232 transitions. [2022-12-14 14:57:56,690 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 3.0) internal successors, (81), 28 states have internal predecessors, (81), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:57:56,690 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 232 transitions. [2022-12-14 14:57:56,690 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-12-14 14:57:56,690 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:57:56,690 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:57:56,695 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2022-12-14 14:57:56,890 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable31 [2022-12-14 14:57:56,891 INFO L420 AbstractCegarLoop]: === Iteration 33 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:57:56,891 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:57:56,892 INFO L85 PathProgramCache]: Analyzing trace with hash 2011222531, now seen corresponding path program 3 times [2022-12-14 14:57:56,892 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:57:56,892 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1088411772] [2022-12-14 14:57:56,893 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:57:56,893 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:57:56,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:57:57,088 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 1 proven. 35 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:57:57,088 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:57:57,088 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1088411772] [2022-12-14 14:57:57,088 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1088411772] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:57:57,089 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [830751592] [2022-12-14 14:57:57,089 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 14:57:57,089 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:57:57,089 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:57:57,090 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:57:57,090 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-12-14 14:57:57,182 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 14:57:57,182 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:57:57,184 INFO L263 TraceCheckSpWp]: Trace formula consists of 288 conjuncts, 41 conjunts are in the unsatisfiable core [2022-12-14 14:57:57,185 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:57:57,242 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:57,446 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 14:57:57,447 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-12-14 14:57:57,460 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 6 proven. 30 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:57:57,460 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:57:57,584 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 14:57:57,586 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:57:57,662 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 6 proven. 30 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:57:57,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [830751592] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:57:57,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [388150673] [2022-12-14 14:57:57,663 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 14:57:57,663 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:57:57,663 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:57:57,664 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:57:57,664 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:57:57,680 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:57:57,681 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:57:57,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:57:57,738 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:57,765 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:57,794 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:57,821 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-12-14 14:57:57,861 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:57,884 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:57:57,916 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:57:57,916 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:57:58,071 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:58:00,177 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7779#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:58:00,178 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:58:00,178 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:58:00,178 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 14, 14] total 31 [2022-12-14 14:58:00,178 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [58339023] [2022-12-14 14:58:00,178 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:58:00,178 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-12-14 14:58:00,178 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:58:00,179 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-12-14 14:58:00,179 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=148, Invalid=1832, Unknown=0, NotChecked=0, Total=1980 [2022-12-14 14:58:00,179 INFO L87 Difference]: Start difference. First operand 197 states and 232 transitions. Second operand has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:02,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:58:02,681 INFO L93 Difference]: Finished difference Result 550 states and 613 transitions. [2022-12-14 14:58:02,681 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 65 states. [2022-12-14 14:58:02,682 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 38 [2022-12-14 14:58:02,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:58:02,684 INFO L225 Difference]: With dead ends: 550 [2022-12-14 14:58:02,684 INFO L226 Difference]: Without dead ends: 540 [2022-12-14 14:58:02,687 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 78 SyntacticMatches, 2 SemanticMatches, 103 ConstructedPredicates, 0 IntricatePredicates, 5 DeprecatedPredicates, 2981 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=1085, Invalid=9835, Unknown=0, NotChecked=0, Total=10920 [2022-12-14 14:58:02,687 INFO L413 NwaCegarLoop]: 50 mSDtfsCounter, 628 mSDsluCounter, 634 mSDsCounter, 0 mSdLazyCounter, 2539 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 628 SdHoareTripleChecker+Valid, 684 SdHoareTripleChecker+Invalid, 2542 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 2539 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 14:58:02,687 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [628 Valid, 684 Invalid, 2542 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 2539 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-14 14:58:02,688 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 540 states. [2022-12-14 14:58:02,691 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 540 to 264. [2022-12-14 14:58:02,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 264 states, 261 states have (on average 1.1915708812260537) internal successors, (311), 263 states have internal predecessors, (311), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:02,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 311 transitions. [2022-12-14 14:58:02,692 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 311 transitions. Word has length 38 [2022-12-14 14:58:02,692 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:58:02,692 INFO L495 AbstractCegarLoop]: Abstraction has 264 states and 311 transitions. [2022-12-14 14:58:02,692 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:02,693 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 311 transitions. [2022-12-14 14:58:02,693 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 40 [2022-12-14 14:58:02,693 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:58:02,693 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:58:02,699 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2022-12-14 14:58:02,894 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable32 [2022-12-14 14:58:02,895 INFO L420 AbstractCegarLoop]: === Iteration 34 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:58:02,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:58:02,896 INFO L85 PathProgramCache]: Analyzing trace with hash 202916299, now seen corresponding path program 4 times [2022-12-14 14:58:02,896 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:58:02,896 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [677972151] [2022-12-14 14:58:02,896 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:58:02,897 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:58:02,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:58:03,723 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 18 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:58:03,723 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:58:03,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [677972151] [2022-12-14 14:58:03,723 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [677972151] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:58:03,723 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1271481933] [2022-12-14 14:58:03,723 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 14:58:03,723 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:58:03,723 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:58:03,724 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:58:03,725 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-12-14 14:58:03,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:58:03,797 INFO L263 TraceCheckSpWp]: Trace formula consists of 274 conjuncts, 51 conjunts are in the unsatisfiable core [2022-12-14 14:58:03,799 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:58:03,804 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 14:58:03,944 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:03,986 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:58:04,083 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:58:04,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 10 [2022-12-14 14:58:04,104 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:58:04,105 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:58:04,185 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:58:04,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 14:58:04,190 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:58:04,190 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 14:58:04,195 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2022-12-14 14:58:04,342 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 17 proven. 17 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:58:04,342 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1271481933] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:58:04,342 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [507988651] [2022-12-14 14:58:04,343 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:58:04,343 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:58:04,344 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:58:04,344 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:58:04,344 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:58:04,364 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:58:04,367 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:58:04,397 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:58:04,425 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:04,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:04,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:04,507 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-12-14 14:58:04,536 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:04,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:04,595 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:58:04,595 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:58:04,814 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:58:07,122 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8987#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:58:07,122 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:58:07,123 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:58:07,123 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 11, 11] total 30 [2022-12-14 14:58:07,123 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [15141259] [2022-12-14 14:58:07,123 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:58:07,123 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-12-14 14:58:07,123 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:58:07,123 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-12-14 14:58:07,124 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=168, Invalid=1991, Unknown=3, NotChecked=0, Total=2162 [2022-12-14 14:58:07,124 INFO L87 Difference]: Start difference. First operand 264 states and 311 transitions. Second operand has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:08,336 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:58:08,336 INFO L93 Difference]: Finished difference Result 392 states and 447 transitions. [2022-12-14 14:58:08,337 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-12-14 14:58:08,337 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 39 [2022-12-14 14:58:08,337 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:58:08,337 INFO L225 Difference]: With dead ends: 392 [2022-12-14 14:58:08,337 INFO L226 Difference]: Without dead ends: 329 [2022-12-14 14:58:08,338 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 147 GetRequests, 83 SyntacticMatches, 1 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1002 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=435, Invalid=3722, Unknown=3, NotChecked=0, Total=4160 [2022-12-14 14:58:08,338 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 338 mSDsluCounter, 173 mSDsCounter, 0 mSdLazyCounter, 611 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 338 SdHoareTripleChecker+Valid, 181 SdHoareTripleChecker+Invalid, 618 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 611 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 14:58:08,338 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [338 Valid, 181 Invalid, 618 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 611 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 14:58:08,338 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 329 states. [2022-12-14 14:58:08,341 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 329 to 326. [2022-12-14 14:58:08,341 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 326 states, 323 states have (on average 1.1640866873065014) internal successors, (376), 325 states have internal predecessors, (376), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:08,342 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 326 states to 326 states and 376 transitions. [2022-12-14 14:58:08,342 INFO L78 Accepts]: Start accepts. Automaton has 326 states and 376 transitions. Word has length 39 [2022-12-14 14:58:08,342 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:58:08,342 INFO L495 AbstractCegarLoop]: Abstraction has 326 states and 376 transitions. [2022-12-14 14:58:08,342 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 30 states have internal predecessors, (82), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:08,342 INFO L276 IsEmpty]: Start isEmpty. Operand 326 states and 376 transitions. [2022-12-14 14:58:08,342 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-12-14 14:58:08,343 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:58:08,343 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:58:08,348 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Ended with exit code 0 [2022-12-14 14:58:08,543 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2022-12-14 14:58:08,543 INFO L420 AbstractCegarLoop]: === Iteration 35 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:58:08,543 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:58:08,543 INFO L85 PathProgramCache]: Analyzing trace with hash 94811765, now seen corresponding path program 2 times [2022-12-14 14:58:08,543 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:58:08,543 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1852369953] [2022-12-14 14:58:08,544 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:58:08,544 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:58:08,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:58:09,026 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 12 proven. 30 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:58:09,026 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:58:09,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1852369953] [2022-12-14 14:58:09,026 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1852369953] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:58:09,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [107962176] [2022-12-14 14:58:09,026 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 14:58:09,026 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:58:09,026 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:58:09,027 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:58:09,028 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-12-14 14:58:09,125 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 14:58:09,125 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:58:09,127 INFO L263 TraceCheckSpWp]: Trace formula consists of 280 conjuncts, 67 conjunts are in the unsatisfiable core [2022-12-14 14:58:09,129 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:58:09,133 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 14:58:09,275 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:09,320 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:58:10,015 INFO L321 Elim1Store]: treesize reduction 53, result has 49.5 percent of original size [2022-12-14 14:58:10,015 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 1 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 66 treesize of output 79 [2022-12-14 14:58:10,038 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 12 proven. 21 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:58:10,038 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:58:10,393 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (|ULTIMATE.start_substring_~pt~0#1.offset| Int) (v_ArrVal_674 (Array Int Int))) (let ((.cse2 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_674))) (let ((.cse0 (select .cse2 |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (.cse1 (select (select .cse2 |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|))) (or (= (select .cse0 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0) (not (= (select .cse0 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) .cse1)) (= .cse1 0))))) is different from false [2022-12-14 14:58:10,399 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:58:10,399 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 87 treesize of output 54 [2022-12-14 14:58:10,420 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:58:10,421 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 136 treesize of output 156 [2022-12-14 14:58:10,436 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:58:10,436 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 2 case distinctions, treesize of input 79 treesize of output 81 [2022-12-14 14:58:10,817 INFO L134 CoverageAnalysis]: Checked inductivity of 42 backedges. 17 proven. 16 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:58:10,817 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [107962176] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:58:10,817 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [285366079] [2022-12-14 14:58:10,818 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:58:10,818 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:58:10,818 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:58:10,818 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:58:10,818 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:58:10,835 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:58:10,838 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:58:10,868 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:10,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:10,911 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:10,945 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:10,966 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:10,981 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:11,004 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:58:11,004 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:58:12,040 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:58:13,897 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10040#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:58:13,897 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:58:13,897 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:58:13,897 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 19, 19] total 48 [2022-12-14 14:58:13,898 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [459735023] [2022-12-14 14:58:13,898 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:58:13,898 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-12-14 14:58:13,898 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:58:13,898 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-12-14 14:58:13,898 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=298, Invalid=3737, Unknown=1, NotChecked=124, Total=4160 [2022-12-14 14:58:13,899 INFO L87 Difference]: Start difference. First operand 326 states and 376 transitions. Second operand has 49 states, 49 states have (on average 2.0) internal successors, (98), 48 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:15,188 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:58:15,188 INFO L93 Difference]: Finished difference Result 312 states and 357 transitions. [2022-12-14 14:58:15,188 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-12-14 14:58:15,189 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 2.0) internal successors, (98), 48 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 40 [2022-12-14 14:58:15,189 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:58:15,189 INFO L225 Difference]: With dead ends: 312 [2022-12-14 14:58:15,189 INFO L226 Difference]: Without dead ends: 237 [2022-12-14 14:58:15,190 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 72 SyntacticMatches, 1 SemanticMatches, 83 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 1666 ImplicationChecksByTransitivity, 4.0s TimeCoverageRelationStatistics Valid=711, Invalid=6264, Unknown=1, NotChecked=164, Total=7140 [2022-12-14 14:58:15,190 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 222 mSDsluCounter, 155 mSDsCounter, 0 mSdLazyCounter, 737 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 222 SdHoareTripleChecker+Valid, 169 SdHoareTripleChecker+Invalid, 786 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 737 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 46 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 14:58:15,190 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [222 Valid, 169 Invalid, 786 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 737 Invalid, 0 Unknown, 46 Unchecked, 0.3s Time] [2022-12-14 14:58:15,190 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 237 states. [2022-12-14 14:58:15,192 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 237 to 236. [2022-12-14 14:58:15,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 236 states, 233 states have (on average 1.184549356223176) internal successors, (276), 235 states have internal predecessors, (276), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:15,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 276 transitions. [2022-12-14 14:58:15,193 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 276 transitions. Word has length 40 [2022-12-14 14:58:15,193 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:58:15,193 INFO L495 AbstractCegarLoop]: Abstraction has 236 states and 276 transitions. [2022-12-14 14:58:15,193 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 2.0) internal successors, (98), 48 states have internal predecessors, (98), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:15,193 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 276 transitions. [2022-12-14 14:58:15,193 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-12-14 14:58:15,194 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:58:15,194 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:58:15,198 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2022-12-14 14:58:15,394 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable34,18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:58:15,395 INFO L420 AbstractCegarLoop]: === Iteration 36 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:58:15,395 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:58:15,396 INFO L85 PathProgramCache]: Analyzing trace with hash 1463732113, now seen corresponding path program 5 times [2022-12-14 14:58:15,396 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:58:15,397 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [42750877] [2022-12-14 14:58:15,397 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:58:15,397 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:58:15,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:58:15,583 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 1 proven. 38 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:58:15,583 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:58:15,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [42750877] [2022-12-14 14:58:15,583 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [42750877] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:58:15,583 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [831733541] [2022-12-14 14:58:15,584 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 14:58:15,584 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:58:15,584 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:58:15,584 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:58:15,585 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-12-14 14:58:15,671 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-12-14 14:58:15,671 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:58:15,672 INFO L263 TraceCheckSpWp]: Trace formula consists of 287 conjuncts, 29 conjunts are in the unsatisfiable core [2022-12-14 14:58:15,673 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:58:15,793 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 35 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:58:15,793 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:58:15,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 14:58:15,975 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 4 proven. 35 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:58:15,975 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [831733541] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:58:15,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [980663431] [2022-12-14 14:58:15,976 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:58:15,976 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:58:15,976 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:58:15,976 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:58:15,977 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:58:15,993 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:58:15,996 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:58:16,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:58:16,049 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:16,070 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:16,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:16,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-12-14 14:58:16,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:16,182 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:16,209 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:58:16,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:58:16,430 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:58:18,993 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '10913#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:58:18,993 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:58:18,994 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:58:18,994 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 11, 11] total 27 [2022-12-14 14:58:18,994 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1144048381] [2022-12-14 14:58:18,994 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:58:18,994 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-12-14 14:58:18,994 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:58:18,994 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-12-14 14:58:18,995 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=225, Invalid=1755, Unknown=0, NotChecked=0, Total=1980 [2022-12-14 14:58:18,995 INFO L87 Difference]: Start difference. First operand 236 states and 276 transitions. Second operand has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:19,325 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:58:19,325 INFO L93 Difference]: Finished difference Result 404 states and 464 transitions. [2022-12-14 14:58:19,325 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 15 states. [2022-12-14 14:58:19,325 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-12-14 14:58:19,325 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:58:19,327 INFO L225 Difference]: With dead ends: 404 [2022-12-14 14:58:19,327 INFO L226 Difference]: Without dead ends: 404 [2022-12-14 14:58:19,327 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 83 SyntacticMatches, 4 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 894 ImplicationChecksByTransitivity, 2.9s TimeCoverageRelationStatistics Valid=434, Invalid=2536, Unknown=0, NotChecked=0, Total=2970 [2022-12-14 14:58:19,328 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 640 mSDsluCounter, 58 mSDsCounter, 0 mSdLazyCounter, 401 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 640 SdHoareTripleChecker+Valid, 68 SdHoareTripleChecker+Invalid, 404 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 401 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 14:58:19,328 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [640 Valid, 68 Invalid, 404 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 401 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 14:58:19,329 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 404 states. [2022-12-14 14:58:19,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 404 to 303. [2022-12-14 14:58:19,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 300 states have (on average 1.19) internal successors, (357), 302 states have internal predecessors, (357), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:19,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 357 transitions. [2022-12-14 14:58:19,333 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 357 transitions. Word has length 41 [2022-12-14 14:58:19,333 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:58:19,333 INFO L495 AbstractCegarLoop]: Abstraction has 303 states and 357 transitions. [2022-12-14 14:58:19,333 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 28 states have (on average 4.0) internal successors, (112), 28 states have internal predecessors, (112), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:19,333 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 357 transitions. [2022-12-14 14:58:19,334 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-12-14 14:58:19,334 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:58:19,334 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:58:19,340 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Ended with exit code 0 [2022-12-14 14:58:19,534 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2022-12-14 14:58:19,535 INFO L420 AbstractCegarLoop]: === Iteration 37 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:58:19,536 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:58:19,536 INFO L85 PathProgramCache]: Analyzing trace with hash 525396335, now seen corresponding path program 3 times [2022-12-14 14:58:19,537 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:58:19,537 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [597503473] [2022-12-14 14:58:19,537 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:58:19,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:58:19,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:58:19,767 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 1 proven. 37 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:58:19,767 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:58:19,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [597503473] [2022-12-14 14:58:19,767 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [597503473] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:58:19,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [460666943] [2022-12-14 14:58:19,767 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 14:58:19,768 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:58:19,768 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:58:19,768 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:58:19,769 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-12-14 14:58:19,853 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 14:58:19,853 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:58:19,855 INFO L263 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 34 conjunts are in the unsatisfiable core [2022-12-14 14:58:19,856 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:58:19,972 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:58:19,972 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:58:20,116 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 14:58:20,154 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 4 proven. 34 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:58:20,154 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [460666943] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:58:20,155 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1171189458] [2022-12-14 14:58:20,156 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:58:20,156 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:58:20,156 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:58:20,156 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:58:20,156 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:58:20,171 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:58:20,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:58:20,199 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:20,228 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:20,246 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:20,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:58:20,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:20,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:20,350 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:58:20,351 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:58:21,372 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:58:22,953 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11928#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:58:22,953 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:58:22,953 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:58:22,953 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 24 [2022-12-14 14:58:22,953 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [287740038] [2022-12-14 14:58:22,953 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:58:22,953 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-12-14 14:58:22,953 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:58:22,954 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-12-14 14:58:22,954 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=185, Invalid=1537, Unknown=0, NotChecked=0, Total=1722 [2022-12-14 14:58:22,954 INFO L87 Difference]: Start difference. First operand 303 states and 357 transitions. Second operand has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:23,439 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:58:23,439 INFO L93 Difference]: Finished difference Result 351 states and 399 transitions. [2022-12-14 14:58:23,440 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-12-14 14:58:23,440 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-12-14 14:58:23,440 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:58:23,442 INFO L225 Difference]: With dead ends: 351 [2022-12-14 14:58:23,442 INFO L226 Difference]: Without dead ends: 351 [2022-12-14 14:58:23,442 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 151 GetRequests, 90 SyntacticMatches, 4 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 900 ImplicationChecksByTransitivity, 2.1s TimeCoverageRelationStatistics Valid=522, Invalid=2900, Unknown=0, NotChecked=0, Total=3422 [2022-12-14 14:58:23,442 INFO L413 NwaCegarLoop]: 12 mSDtfsCounter, 390 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 453 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 390 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 456 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 453 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 14:58:23,443 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [390 Valid, 71 Invalid, 456 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 453 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 14:58:23,443 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2022-12-14 14:58:23,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 303. [2022-12-14 14:58:23,447 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 300 states have (on average 1.1833333333333333) internal successors, (355), 302 states have internal predecessors, (355), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:23,447 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 355 transitions. [2022-12-14 14:58:23,448 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 355 transitions. Word has length 42 [2022-12-14 14:58:23,448 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:58:23,448 INFO L495 AbstractCegarLoop]: Abstraction has 303 states and 355 transitions. [2022-12-14 14:58:23,448 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 3.48) internal successors, (87), 25 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:23,448 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 355 transitions. [2022-12-14 14:58:23,448 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-12-14 14:58:23,448 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:58:23,448 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:58:23,453 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2022-12-14 14:58:23,649 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2022-12-14 14:58:23,649 INFO L420 AbstractCegarLoop]: === Iteration 38 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:58:23,649 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:58:23,649 INFO L85 PathProgramCache]: Analyzing trace with hash -1182475613, now seen corresponding path program 6 times [2022-12-14 14:58:23,649 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:58:23,649 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1642088801] [2022-12-14 14:58:23,649 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:58:23,649 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:58:23,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:58:23,896 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 4 proven. 46 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:58:23,896 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:58:23,896 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1642088801] [2022-12-14 14:58:23,896 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1642088801] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:58:23,896 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1056201888] [2022-12-14 14:58:23,896 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 14:58:23,896 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:58:23,896 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:58:23,897 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:58:23,898 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-12-14 14:58:24,012 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 14:58:24,012 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:58:24,015 INFO L263 TraceCheckSpWp]: Trace formula consists of 317 conjuncts, 95 conjunts are in the unsatisfiable core [2022-12-14 14:58:24,017 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:58:24,187 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:24,222 INFO L321 Elim1Store]: treesize reduction 27, result has 25.0 percent of original size [2022-12-14 14:58:24,222 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 22 [2022-12-14 14:58:24,666 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:58:24,678 INFO L321 Elim1Store]: treesize reduction 40, result has 23.1 percent of original size [2022-12-14 14:58:24,678 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 56 treesize of output 35 [2022-12-14 14:58:24,700 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 4 proven. 54 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:58:24,700 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:58:25,067 INFO L321 Elim1Store]: treesize reduction 19, result has 53.7 percent of original size [2022-12-14 14:58:25,067 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 187 treesize of output 147 [2022-12-14 14:58:25,073 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:58:25,073 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 143 treesize of output 137 [2022-12-14 14:58:25,090 INFO L321 Elim1Store]: treesize reduction 5, result has 37.5 percent of original size [2022-12-14 14:58:25,090 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 22 [2022-12-14 14:58:25,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:58:25,283 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 4 proven. 39 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 14:58:25,283 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1056201888] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:58:25,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1475807742] [2022-12-14 14:58:25,284 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 14:58:25,284 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:58:25,284 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:58:25,284 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:58:25,285 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:58:25,301 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:58:25,304 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:58:25,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:25,348 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:25,362 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:25,394 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:58:25,413 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:25,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:25,453 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:58:25,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:58:25,713 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:58:27,974 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '12926#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:58:27,974 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:58:27,974 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:58:27,974 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 20, 17] total 47 [2022-12-14 14:58:27,974 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [743734930] [2022-12-14 14:58:27,974 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:58:27,974 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2022-12-14 14:58:27,974 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:58:27,975 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2022-12-14 14:58:27,975 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=240, Invalid=3542, Unknown=0, NotChecked=0, Total=3782 [2022-12-14 14:58:27,975 INFO L87 Difference]: Start difference. First operand 303 states and 355 transitions. Second operand has 48 states, 48 states have (on average 2.375) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:33,171 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:58:33,171 INFO L93 Difference]: Finished difference Result 839 states and 949 transitions. [2022-12-14 14:58:33,172 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 66 states. [2022-12-14 14:58:33,172 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 2.375) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 42 [2022-12-14 14:58:33,172 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:58:33,173 INFO L225 Difference]: With dead ends: 839 [2022-12-14 14:58:33,173 INFO L226 Difference]: Without dead ends: 839 [2022-12-14 14:58:33,174 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 190 GetRequests, 76 SyntacticMatches, 0 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3124 ImplicationChecksByTransitivity, 6.4s TimeCoverageRelationStatistics Valid=1374, Invalid=11966, Unknown=0, NotChecked=0, Total=13340 [2022-12-14 14:58:33,174 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 972 mSDsluCounter, 887 mSDsCounter, 0 mSdLazyCounter, 4300 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 972 SdHoareTripleChecker+Valid, 922 SdHoareTripleChecker+Invalid, 4309 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 4300 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.8s IncrementalHoareTripleChecker+Time [2022-12-14 14:58:33,174 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [972 Valid, 922 Invalid, 4309 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 4300 Invalid, 0 Unknown, 0 Unchecked, 1.8s Time] [2022-12-14 14:58:33,175 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 839 states. [2022-12-14 14:58:33,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 839 to 355. [2022-12-14 14:58:33,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 352 states have (on average 1.1988636363636365) internal successors, (422), 354 states have internal predecessors, (422), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:33,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 422 transitions. [2022-12-14 14:58:33,180 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 422 transitions. Word has length 42 [2022-12-14 14:58:33,180 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:58:33,180 INFO L495 AbstractCegarLoop]: Abstraction has 355 states and 422 transitions. [2022-12-14 14:58:33,180 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 2.375) internal successors, (114), 47 states have internal predecessors, (114), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:33,181 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 422 transitions. [2022-12-14 14:58:33,181 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-12-14 14:58:33,181 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:58:33,181 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:58:33,186 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Ended with exit code 0 [2022-12-14 14:58:33,382 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2022-12-14 14:58:33,382 INFO L420 AbstractCegarLoop]: === Iteration 39 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:58:33,383 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:58:33,383 INFO L85 PathProgramCache]: Analyzing trace with hash -487556779, now seen corresponding path program 4 times [2022-12-14 14:58:33,383 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:58:33,384 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1261256261] [2022-12-14 14:58:33,384 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:58:33,384 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:58:33,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:58:33,600 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 1 proven. 43 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:58:33,600 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:58:33,600 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1261256261] [2022-12-14 14:58:33,600 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1261256261] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:58:33,600 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [426109817] [2022-12-14 14:58:33,600 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 14:58:33,600 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:58:33,600 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:58:33,601 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:58:33,602 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-12-14 14:58:33,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:58:33,690 INFO L263 TraceCheckSpWp]: Trace formula consists of 311 conjuncts, 36 conjunts are in the unsatisfiable core [2022-12-14 14:58:33,692 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:58:33,812 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 4 proven. 40 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:58:33,813 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:58:33,948 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 14:58:33,977 INFO L134 CoverageAnalysis]: Checked inductivity of 48 backedges. 4 proven. 40 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 14:58:33,978 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [426109817] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:58:33,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1276286491] [2022-12-14 14:58:33,978 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:58:33,978 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:58:33,979 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:58:33,979 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:58:33,979 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:58:33,994 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:58:33,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:58:34,027 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:34,056 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:34,072 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:34,108 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:58:34,137 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:34,152 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:34,180 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:58:34,180 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:58:35,223 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:58:36,921 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '14526#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:58:36,922 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:58:36,922 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:58:36,922 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 11] total 24 [2022-12-14 14:58:36,922 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1265231782] [2022-12-14 14:58:36,922 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:58:36,922 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2022-12-14 14:58:36,922 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:58:36,922 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2022-12-14 14:58:36,923 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=186, Invalid=1536, Unknown=0, NotChecked=0, Total=1722 [2022-12-14 14:58:36,923 INFO L87 Difference]: Start difference. First operand 355 states and 422 transitions. Second operand has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:37,432 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:58:37,433 INFO L93 Difference]: Finished difference Result 407 states and 465 transitions. [2022-12-14 14:58:37,433 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-12-14 14:58:37,433 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 44 [2022-12-14 14:58:37,433 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:58:37,434 INFO L225 Difference]: With dead ends: 407 [2022-12-14 14:58:37,434 INFO L226 Difference]: Without dead ends: 407 [2022-12-14 14:58:37,435 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 156 GetRequests, 96 SyntacticMatches, 4 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 870 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=490, Invalid=2816, Unknown=0, NotChecked=0, Total=3306 [2022-12-14 14:58:37,435 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 668 mSDsluCounter, 90 mSDsCounter, 0 mSdLazyCounter, 603 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 668 SdHoareTripleChecker+Valid, 101 SdHoareTripleChecker+Invalid, 609 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 603 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 14:58:37,435 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [668 Valid, 101 Invalid, 609 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 603 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 14:58:37,436 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 407 states. [2022-12-14 14:58:37,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 407 to 355. [2022-12-14 14:58:37,441 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 355 states, 352 states have (on average 1.1903409090909092) internal successors, (419), 354 states have internal predecessors, (419), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:37,441 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 355 states to 355 states and 419 transitions. [2022-12-14 14:58:37,441 INFO L78 Accepts]: Start accepts. Automaton has 355 states and 419 transitions. Word has length 44 [2022-12-14 14:58:37,442 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:58:37,442 INFO L495 AbstractCegarLoop]: Abstraction has 355 states and 419 transitions. [2022-12-14 14:58:37,442 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 3.8) internal successors, (95), 25 states have internal predecessors, (95), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:37,442 INFO L276 IsEmpty]: Start isEmpty. Operand 355 states and 419 transitions. [2022-12-14 14:58:37,442 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-12-14 14:58:37,442 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:58:37,443 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:58:37,447 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Ended with exit code 0 [2022-12-14 14:58:37,643 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable38,22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:58:37,644 INFO L420 AbstractCegarLoop]: === Iteration 40 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:58:37,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:58:37,645 INFO L85 PathProgramCache]: Analyzing trace with hash 1760874124, now seen corresponding path program 4 times [2022-12-14 14:58:37,645 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:58:37,645 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [228604815] [2022-12-14 14:58:37,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:58:37,646 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:58:37,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:58:37,918 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 4 proven. 58 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 14:58:37,918 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:58:37,918 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [228604815] [2022-12-14 14:58:37,918 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [228604815] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:58:37,918 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1536529852] [2022-12-14 14:58:37,918 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 14:58:37,918 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:58:37,918 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:58:37,919 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:58:37,920 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-12-14 14:58:38,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:58:38,010 INFO L263 TraceCheckSpWp]: Trace formula consists of 344 conjuncts, 38 conjunts are in the unsatisfiable core [2022-12-14 14:58:38,011 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:58:38,162 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 9 proven. 53 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 14:58:38,162 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:58:38,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 14:58:38,373 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 9 proven. 53 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 14:58:38,374 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1536529852] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:58:38,374 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [979198711] [2022-12-14 14:58:38,375 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 14:58:38,375 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:58:38,375 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:58:38,375 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:58:38,375 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:58:38,391 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:58:38,392 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:58:38,418 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:58:38,449 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:38,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:38,499 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:58:38,533 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:58:38,533 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-12-14 14:58:38,567 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:38,587 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:38,613 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:58:38,613 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:58:38,881 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:58:40,550 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15643#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:58:40,550 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:58:40,550 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:58:40,550 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 29 [2022-12-14 14:58:40,550 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1495022113] [2022-12-14 14:58:40,550 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:58:40,551 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2022-12-14 14:58:40,551 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:58:40,551 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2022-12-14 14:58:40,551 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=197, Invalid=1783, Unknown=0, NotChecked=0, Total=1980 [2022-12-14 14:58:40,551 INFO L87 Difference]: Start difference. First operand 355 states and 419 transitions. Second operand has 31 states, 30 states have (on average 3.033333333333333) internal successors, (91), 30 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:41,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:58:41,093 INFO L93 Difference]: Finished difference Result 666 states and 773 transitions. [2022-12-14 14:58:41,093 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2022-12-14 14:58:41,093 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 30 states have (on average 3.033333333333333) internal successors, (91), 30 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-12-14 14:58:41,094 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:58:41,097 INFO L225 Difference]: With dead ends: 666 [2022-12-14 14:58:41,097 INFO L226 Difference]: Without dead ends: 666 [2022-12-14 14:58:41,098 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 103 SyntacticMatches, 5 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 968 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=549, Invalid=3111, Unknown=0, NotChecked=0, Total=3660 [2022-12-14 14:58:41,098 INFO L413 NwaCegarLoop]: 25 mSDtfsCounter, 301 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 830 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 301 SdHoareTripleChecker+Valid, 190 SdHoareTripleChecker+Invalid, 831 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 830 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 14:58:41,098 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [301 Valid, 190 Invalid, 831 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 830 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 14:58:41,098 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 666 states. [2022-12-14 14:58:41,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 666 to 358. [2022-12-14 14:58:41,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 358 states, 355 states have (on average 1.1887323943661972) internal successors, (422), 357 states have internal predecessors, (422), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:41,102 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 358 states to 358 states and 422 transitions. [2022-12-14 14:58:41,102 INFO L78 Accepts]: Start accepts. Automaton has 358 states and 422 transitions. Word has length 47 [2022-12-14 14:58:41,102 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:58:41,103 INFO L495 AbstractCegarLoop]: Abstraction has 358 states and 422 transitions. [2022-12-14 14:58:41,103 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 30 states have (on average 3.033333333333333) internal successors, (91), 30 states have internal predecessors, (91), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:41,103 INFO L276 IsEmpty]: Start isEmpty. Operand 358 states and 422 transitions. [2022-12-14 14:58:41,103 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-14 14:58:41,103 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:58:41,103 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:58:41,109 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Ended with exit code 0 [2022-12-14 14:58:41,303 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable39 [2022-12-14 14:58:41,304 INFO L420 AbstractCegarLoop]: === Iteration 41 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:58:41,304 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:58:41,304 INFO L85 PathProgramCache]: Analyzing trace with hash 298207322, now seen corresponding path program 5 times [2022-12-14 14:58:41,304 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:58:41,304 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [451572453] [2022-12-14 14:58:41,304 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:58:41,304 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:58:41,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:58:41,892 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 57 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 14:58:41,892 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:58:41,892 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [451572453] [2022-12-14 14:58:41,892 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [451572453] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:58:41,893 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1385812086] [2022-12-14 14:58:41,893 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 14:58:41,893 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:58:41,893 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:58:41,894 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:58:41,894 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2022-12-14 14:58:42,042 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-12-14 14:58:42,042 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:58:42,045 INFO L263 TraceCheckSpWp]: Trace formula consists of 336 conjuncts, 84 conjunts are in the unsatisfiable core [2022-12-14 14:58:42,047 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:58:42,054 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 14:58:42,172 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 14:58:42,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 16 [2022-12-14 14:58:42,495 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:58:42,495 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 21 [2022-12-14 14:58:42,518 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 41 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 14:58:42,518 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:58:42,761 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (v_ArrVal_939 (Array Int Int))) (let ((.cse0 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_939))) (let ((.cse1 (select (select .cse0 |ULTIMATE.start_substring_~pt~0#1.base|) (+ 2 |c_ULTIMATE.start_main_~nondetString2~0#1.offset|)))) (or (not (= (select (select .cse0 |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) .cse1)) (= .cse1 0))))) is different from false [2022-12-14 14:58:42,766 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:58:42,766 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 68 treesize of output 46 [2022-12-14 14:58:42,778 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:58:42,778 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 123 treesize of output 122 [2022-12-14 14:58:42,785 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:58:42,785 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 74 treesize of output 64 [2022-12-14 14:58:43,011 INFO L134 CoverageAnalysis]: Checked inductivity of 73 backedges. 16 proven. 41 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 14:58:43,011 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1385812086] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:58:43,011 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [69959651] [2022-12-14 14:58:43,012 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:58:43,012 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:58:43,012 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:58:43,012 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:58:43,012 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:58:43,026 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:58:43,026 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:58:43,054 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:43,083 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:43,097 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:43,125 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:43,145 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:43,157 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:43,183 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:58:43,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:58:44,232 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:58:46,387 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17045#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:58:46,387 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:58:46,387 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:58:46,387 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 17, 17] total 43 [2022-12-14 14:58:46,387 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [173107287] [2022-12-14 14:58:46,387 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:58:46,388 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2022-12-14 14:58:46,388 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:58:46,388 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2022-12-14 14:58:46,389 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=240, Invalid=3185, Unknown=1, NotChecked=114, Total=3540 [2022-12-14 14:58:46,389 INFO L87 Difference]: Start difference. First operand 358 states and 422 transitions. Second operand has 44 states, 44 states have (on average 2.6363636363636362) internal successors, (116), 43 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:57,836 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:58:57,836 INFO L93 Difference]: Finished difference Result 647 states and 744 transitions. [2022-12-14 14:58:57,836 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-12-14 14:58:57,836 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 2.6363636363636362) internal successors, (116), 43 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-12-14 14:58:57,837 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:58:57,838 INFO L225 Difference]: With dead ends: 647 [2022-12-14 14:58:57,838 INFO L226 Difference]: Without dead ends: 647 [2022-12-14 14:58:57,839 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 106 SyntacticMatches, 6 SemanticMatches, 105 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 3131 ImplicationChecksByTransitivity, 13.5s TimeCoverageRelationStatistics Valid=1092, Invalid=10041, Unknown=1, NotChecked=208, Total=11342 [2022-12-14 14:58:57,839 INFO L413 NwaCegarLoop]: 31 mSDtfsCounter, 828 mSDsluCounter, 431 mSDsCounter, 0 mSdLazyCounter, 1787 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 828 SdHoareTripleChecker+Valid, 462 SdHoareTripleChecker+Invalid, 1919 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 1787 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 123 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 14:58:57,839 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [828 Valid, 462 Invalid, 1919 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 1787 Invalid, 0 Unknown, 123 Unchecked, 0.8s Time] [2022-12-14 14:58:57,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 647 states. [2022-12-14 14:58:57,843 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 647 to 377. [2022-12-14 14:58:57,843 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 374 states have (on average 1.1844919786096257) internal successors, (443), 376 states have internal predecessors, (443), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:57,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 443 transitions. [2022-12-14 14:58:57,843 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 443 transitions. Word has length 49 [2022-12-14 14:58:57,843 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:58:57,844 INFO L495 AbstractCegarLoop]: Abstraction has 377 states and 443 transitions. [2022-12-14 14:58:57,844 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 2.6363636363636362) internal successors, (116), 43 states have internal predecessors, (116), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:58:57,844 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 443 transitions. [2022-12-14 14:58:57,844 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-12-14 14:58:57,844 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:58:57,844 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:58:57,849 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Ended with exit code 0 [2022-12-14 14:58:58,045 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable40 [2022-12-14 14:58:58,045 INFO L420 AbstractCegarLoop]: === Iteration 42 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:58:58,046 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:58:58,046 INFO L85 PathProgramCache]: Analyzing trace with hash -17042882, now seen corresponding path program 7 times [2022-12-14 14:58:58,047 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:58:58,047 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [776578472] [2022-12-14 14:58:58,047 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:58:58,048 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:58:58,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:58:58,584 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 5 proven. 66 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 14:58:58,584 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:58:58,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [776578472] [2022-12-14 14:58:58,585 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [776578472] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:58:58,585 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1186305788] [2022-12-14 14:58:58,585 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 14:58:58,585 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:58:58,585 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:58:58,586 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:58:58,586 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2022-12-14 14:58:58,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:58:58,675 INFO L263 TraceCheckSpWp]: Trace formula consists of 360 conjuncts, 49 conjunts are in the unsatisfiable core [2022-12-14 14:58:58,676 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:58:58,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:58:59,486 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 14:58:59,488 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:58:59,488 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 20 [2022-12-14 14:58:59,491 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 14:58:59,491 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:58:59,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 13 [2022-12-14 14:58:59,774 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 24 treesize of output 20 [2022-12-14 14:59:00,163 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 17 proven. 54 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 14:59:00,163 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1186305788] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:59:00,163 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1704514549] [2022-12-14 14:59:00,164 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 14:59:00,164 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:59:00,165 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:59:00,165 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:59:00,165 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:59:00,183 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:59:00,183 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:59:00,210 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:59:00,238 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:00,264 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:00,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:00,319 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-12-14 14:59:00,349 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:00,374 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:00,409 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:59:00,409 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:59:00,598 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:59:04,015 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '18520#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.offset|) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (<= 0 |#NULL.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:59:04,015 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:59:04,015 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:59:04,015 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 17, 17] total 48 [2022-12-14 14:59:04,015 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1523690158] [2022-12-14 14:59:04,015 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:59:04,015 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-12-14 14:59:04,016 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:59:04,016 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-12-14 14:59:04,016 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=217, Invalid=3689, Unknown=0, NotChecked=0, Total=3906 [2022-12-14 14:59:04,016 INFO L87 Difference]: Start difference. First operand 377 states and 443 transitions. Second operand has 49 states, 49 states have (on average 2.4489795918367347) internal successors, (120), 48 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:12,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:59:12,206 INFO L93 Difference]: Finished difference Result 1450 states and 1636 transitions. [2022-12-14 14:59:12,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 113 states. [2022-12-14 14:59:12,207 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 2.4489795918367347) internal successors, (120), 48 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 49 [2022-12-14 14:59:12,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:59:12,209 INFO L225 Difference]: With dead ends: 1450 [2022-12-14 14:59:12,209 INFO L226 Difference]: Without dead ends: 1430 [2022-12-14 14:59:12,210 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 102 SyntacticMatches, 1 SemanticMatches, 165 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7445 ImplicationChecksByTransitivity, 9.6s TimeCoverageRelationStatistics Valid=1927, Invalid=25795, Unknown=0, NotChecked=0, Total=27722 [2022-12-14 14:59:12,210 INFO L413 NwaCegarLoop]: 89 mSDtfsCounter, 1764 mSDsluCounter, 2230 mSDsCounter, 0 mSdLazyCounter, 6393 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1764 SdHoareTripleChecker+Valid, 2319 SdHoareTripleChecker+Invalid, 6411 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 6393 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.1s IncrementalHoareTripleChecker+Time [2022-12-14 14:59:12,210 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1764 Valid, 2319 Invalid, 6411 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 6393 Invalid, 0 Unknown, 0 Unchecked, 3.1s Time] [2022-12-14 14:59:12,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1430 states. [2022-12-14 14:59:12,219 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1430 to 564. [2022-12-14 14:59:12,220 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 564 states, 561 states have (on average 1.1871657754010696) internal successors, (666), 563 states have internal predecessors, (666), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:12,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 564 states to 564 states and 666 transitions. [2022-12-14 14:59:12,221 INFO L78 Accepts]: Start accepts. Automaton has 564 states and 666 transitions. Word has length 49 [2022-12-14 14:59:12,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:59:12,221 INFO L495 AbstractCegarLoop]: Abstraction has 564 states and 666 transitions. [2022-12-14 14:59:12,222 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 2.4489795918367347) internal successors, (120), 48 states have internal predecessors, (120), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:12,222 INFO L276 IsEmpty]: Start isEmpty. Operand 564 states and 666 transitions. [2022-12-14 14:59:12,222 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2022-12-14 14:59:12,223 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:59:12,223 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:59:12,227 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Ended with exit code 0 [2022-12-14 14:59:12,423 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable41,25 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:59:12,423 INFO L420 AbstractCegarLoop]: === Iteration 43 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:59:12,423 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:59:12,423 INFO L85 PathProgramCache]: Analyzing trace with hash 999448052, now seen corresponding path program 6 times [2022-12-14 14:59:12,424 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:59:12,424 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [795533767] [2022-12-14 14:59:12,424 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:59:12,424 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:59:12,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:59:12,954 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:59:12,954 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:59:12,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [795533767] [2022-12-14 14:59:12,955 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [795533767] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:59:12,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [801753357] [2022-12-14 14:59:12,955 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 14:59:12,955 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:59:12,955 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:59:12,956 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:59:12,957 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2022-12-14 14:59:13,056 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 14:59:13,056 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:59:13,058 INFO L263 TraceCheckSpWp]: Trace formula consists of 335 conjuncts, 53 conjunts are in the unsatisfiable core [2022-12-14 14:59:13,060 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:59:13,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 14:59:13,223 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:13,267 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 14:59:13,400 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2022-12-14 14:59:13,402 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:59:13,402 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:59:13,511 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:59:13,511 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 14:59:13,516 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:59:13,516 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 14:59:13,661 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 25 proven. 42 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:59:13,661 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [801753357] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:59:13,661 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [577369269] [2022-12-14 14:59:13,662 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:59:13,662 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:59:13,662 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:59:13,662 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:59:13,662 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:59:13,679 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:59:13,682 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:59:13,705 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:13,729 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:13,744 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:13,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:59:13,799 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:13,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:13,843 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:59:13,843 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:59:14,215 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:59:16,920 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '21080#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:59:16,920 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:59:16,920 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:59:16,920 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 13, 13] total 29 [2022-12-14 14:59:16,920 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1619309450] [2022-12-14 14:59:16,920 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:59:16,920 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-12-14 14:59:16,921 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:59:16,921 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-12-14 14:59:16,921 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=156, Invalid=1905, Unknown=9, NotChecked=0, Total=2070 [2022-12-14 14:59:16,921 INFO L87 Difference]: Start difference. First operand 564 states and 666 transitions. Second operand has 30 states, 30 states have (on average 2.8666666666666667) internal successors, (86), 29 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:17,701 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:59:17,702 INFO L93 Difference]: Finished difference Result 767 states and 886 transitions. [2022-12-14 14:59:17,702 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-14 14:59:17,702 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 30 states have (on average 2.8666666666666667) internal successors, (86), 29 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 50 [2022-12-14 14:59:17,702 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:59:17,705 INFO L225 Difference]: With dead ends: 767 [2022-12-14 14:59:17,705 INFO L226 Difference]: Without dead ends: 676 [2022-12-14 14:59:17,705 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 179 GetRequests, 118 SyntacticMatches, 3 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 1 DeprecatedPredicates, 654 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=302, Invalid=3229, Unknown=9, NotChecked=0, Total=3540 [2022-12-14 14:59:17,706 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 265 mSDsluCounter, 269 mSDsCounter, 0 mSdLazyCounter, 699 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 265 SdHoareTripleChecker+Valid, 283 SdHoareTripleChecker+Invalid, 705 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 699 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 14:59:17,706 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [265 Valid, 283 Invalid, 705 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 699 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 14:59:17,706 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 676 states. [2022-12-14 14:59:17,711 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 676 to 669. [2022-12-14 14:59:17,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 669 states, 666 states have (on average 1.1681681681681682) internal successors, (778), 668 states have internal predecessors, (778), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:17,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 669 states to 669 states and 778 transitions. [2022-12-14 14:59:17,712 INFO L78 Accepts]: Start accepts. Automaton has 669 states and 778 transitions. Word has length 50 [2022-12-14 14:59:17,712 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:59:17,712 INFO L495 AbstractCegarLoop]: Abstraction has 669 states and 778 transitions. [2022-12-14 14:59:17,712 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 30 states have (on average 2.8666666666666667) internal successors, (86), 29 states have internal predecessors, (86), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:17,712 INFO L276 IsEmpty]: Start isEmpty. Operand 669 states and 778 transitions. [2022-12-14 14:59:17,713 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-12-14 14:59:17,713 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:59:17,713 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-12-14 14:59:17,717 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2022-12-14 14:59:17,913 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable42 [2022-12-14 14:59:17,914 INFO L420 AbstractCegarLoop]: === Iteration 44 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:59:17,915 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:59:17,915 INFO L85 PathProgramCache]: Analyzing trace with hash 49454004, now seen corresponding path program 6 times [2022-12-14 14:59:17,915 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:59:17,915 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1083618017] [2022-12-14 14:59:17,916 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:59:17,916 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:59:17,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:59:18,579 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:59:18,579 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:59:18,579 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1083618017] [2022-12-14 14:59:18,579 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1083618017] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:59:18,579 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [415998948] [2022-12-14 14:59:18,579 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 14:59:18,579 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:59:18,579 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:59:18,580 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:59:18,581 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2022-12-14 14:59:18,695 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 14:59:18,696 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:59:18,698 INFO L263 TraceCheckSpWp]: Trace formula consists of 354 conjuncts, 64 conjunts are in the unsatisfiable core [2022-12-14 14:59:18,700 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:59:18,704 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 14:59:18,896 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:18,932 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 14:59:19,155 INFO L321 Elim1Store]: treesize reduction 3, result has 75.0 percent of original size [2022-12-14 14:59:19,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 30 [2022-12-14 14:59:19,159 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:59:19,159 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:59:19,267 WARN L837 $PredicateComparison]: unable to prove that (forall ((v_ArrVal_1077 (Array Int Int))) (= (select (select (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1077) |c_ULTIMATE.start_main_~nondetString1~0#1.base|) (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)) 0)) is different from false [2022-12-14 14:59:19,271 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:59:19,271 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 24 [2022-12-14 14:59:19,276 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:59:19,276 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 37 treesize of output 32 [2022-12-14 14:59:19,462 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 16 proven. 47 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:59:19,462 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [415998948] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:59:19,462 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [734369801] [2022-12-14 14:59:19,463 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:59:19,463 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:59:19,463 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:59:19,463 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:59:19,463 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:59:19,487 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:59:19,490 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:59:19,517 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:59:19,548 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:19,572 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:19,599 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:59:19,635 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:59:19,635 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-12-14 14:59:19,678 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:19,696 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:19,727 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:59:19,727 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:59:20,785 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:59:23,020 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '22897#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:59:23,020 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:59:23,020 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:59:23,020 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 17, 17] total 36 [2022-12-14 14:59:23,021 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [32881490] [2022-12-14 14:59:23,021 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:59:23,021 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2022-12-14 14:59:23,021 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:59:23,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2022-12-14 14:59:23,021 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=2465, Unknown=1, NotChecked=100, Total=2756 [2022-12-14 14:59:23,021 INFO L87 Difference]: Start difference. First operand 669 states and 778 transitions. Second operand has 37 states, 37 states have (on average 2.3513513513513513) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:24,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:59:24,253 INFO L93 Difference]: Finished difference Result 645 states and 746 transitions. [2022-12-14 14:59:24,253 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2022-12-14 14:59:24,253 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 37 states have (on average 2.3513513513513513) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-12-14 14:59:24,254 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:59:24,254 INFO L225 Difference]: With dead ends: 645 [2022-12-14 14:59:24,254 INFO L226 Difference]: Without dead ends: 468 [2022-12-14 14:59:24,255 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 193 GetRequests, 117 SyntacticMatches, 5 SemanticMatches, 71 ConstructedPredicates, 1 IntricatePredicates, 1 DeprecatedPredicates, 1099 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=457, Invalid=4658, Unknown=1, NotChecked=140, Total=5256 [2022-12-14 14:59:24,255 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 276 mSDsluCounter, 296 mSDsCounter, 0 mSdLazyCounter, 1064 mSolverCounterSat, 7 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 276 SdHoareTripleChecker+Valid, 314 SdHoareTripleChecker+Invalid, 1127 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 1064 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 55 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 14:59:24,255 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [276 Valid, 314 Invalid, 1127 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 1064 Invalid, 1 Unknown, 55 Unchecked, 0.5s Time] [2022-12-14 14:59:24,255 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 468 states. [2022-12-14 14:59:24,258 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 468 to 468. [2022-12-14 14:59:24,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 468 states, 465 states have (on average 1.1913978494623656) internal successors, (554), 467 states have internal predecessors, (554), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:24,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 554 transitions. [2022-12-14 14:59:24,259 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 554 transitions. Word has length 51 [2022-12-14 14:59:24,259 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:59:24,259 INFO L495 AbstractCegarLoop]: Abstraction has 468 states and 554 transitions. [2022-12-14 14:59:24,259 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 37 states have (on average 2.3513513513513513) internal successors, (87), 36 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:24,259 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 554 transitions. [2022-12-14 14:59:24,260 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-12-14 14:59:24,260 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:59:24,260 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:59:24,265 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Ended with exit code 0 [2022-12-14 14:59:24,460 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 27 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable43 [2022-12-14 14:59:24,461 INFO L420 AbstractCegarLoop]: === Iteration 45 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:59:24,461 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:59:24,461 INFO L85 PathProgramCache]: Analyzing trace with hash 523030176, now seen corresponding path program 7 times [2022-12-14 14:59:24,461 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:59:24,461 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1477931957] [2022-12-14 14:59:24,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:59:24,462 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:59:24,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:59:24,727 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 4 proven. 60 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 14:59:24,727 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:59:24,727 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1477931957] [2022-12-14 14:59:24,727 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1477931957] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:59:24,727 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1342204044] [2022-12-14 14:59:24,727 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 14:59:24,727 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:59:24,727 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:59:24,728 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:59:24,729 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2022-12-14 14:59:24,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:59:24,822 INFO L263 TraceCheckSpWp]: Trace formula consists of 362 conjuncts, 39 conjunts are in the unsatisfiable core [2022-12-14 14:59:24,824 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:59:25,010 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 55 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 14:59:25,010 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:59:25,242 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 14:59:25,307 INFO L134 CoverageAnalysis]: Checked inductivity of 80 backedges. 9 proven. 55 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 14:59:25,308 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1342204044] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:59:25,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [647639780] [2022-12-14 14:59:25,309 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:59:25,309 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:59:25,309 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:59:25,309 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:59:25,309 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:59:25,324 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:59:25,325 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:59:25,351 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:59:25,377 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:25,401 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:25,426 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:59:25,473 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:59:25,474 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-12-14 14:59:25,500 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:25,515 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:25,543 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:59:25,544 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:59:26,530 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:59:28,232 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '24397#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:59:28,232 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:59:28,233 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:59:28,233 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 28 [2022-12-14 14:59:28,233 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [395265693] [2022-12-14 14:59:28,233 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:59:28,233 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-12-14 14:59:28,233 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:59:28,234 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-12-14 14:59:28,234 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=206, Invalid=1864, Unknown=0, NotChecked=0, Total=2070 [2022-12-14 14:59:28,234 INFO L87 Difference]: Start difference. First operand 468 states and 554 transitions. Second operand has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:28,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:59:28,993 INFO L93 Difference]: Finished difference Result 548 states and 628 transitions. [2022-12-14 14:59:28,993 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2022-12-14 14:59:28,993 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-12-14 14:59:28,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:59:28,994 INFO L225 Difference]: With dead ends: 548 [2022-12-14 14:59:28,994 INFO L226 Difference]: Without dead ends: 548 [2022-12-14 14:59:28,995 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 114 SyntacticMatches, 5 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1198 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=687, Invalid=3735, Unknown=0, NotChecked=0, Total=4422 [2022-12-14 14:59:28,995 INFO L413 NwaCegarLoop]: 15 mSDtfsCounter, 548 mSDsluCounter, 98 mSDsCounter, 0 mSdLazyCounter, 704 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 548 SdHoareTripleChecker+Valid, 113 SdHoareTripleChecker+Invalid, 708 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 704 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 14:59:28,995 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [548 Valid, 113 Invalid, 708 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 704 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 14:59:28,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 548 states. [2022-12-14 14:59:28,998 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 548 to 468. [2022-12-14 14:59:28,999 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 468 states, 465 states have (on average 1.1870967741935483) internal successors, (552), 467 states have internal predecessors, (552), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:28,999 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 468 states to 468 states and 552 transitions. [2022-12-14 14:59:28,999 INFO L78 Accepts]: Start accepts. Automaton has 468 states and 552 transitions. Word has length 51 [2022-12-14 14:59:28,999 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:59:28,999 INFO L495 AbstractCegarLoop]: Abstraction has 468 states and 552 transitions. [2022-12-14 14:59:29,000 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 3.4827586206896552) internal successors, (101), 29 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:29,000 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 552 transitions. [2022-12-14 14:59:29,000 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2022-12-14 14:59:29,000 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:59:29,000 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 14:59:29,005 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Ended with exit code 0 [2022-12-14 14:59:29,201 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable44 [2022-12-14 14:59:29,202 INFO L420 AbstractCegarLoop]: === Iteration 46 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:59:29,202 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:59:29,202 INFO L85 PathProgramCache]: Analyzing trace with hash -620978066, now seen corresponding path program 7 times [2022-12-14 14:59:29,203 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:59:29,203 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2047377458] [2022-12-14 14:59:29,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:59:29,203 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:59:29,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:59:29,461 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 4 proven. 70 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:59:29,461 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:59:29,461 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2047377458] [2022-12-14 14:59:29,461 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2047377458] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:59:29,462 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1712393904] [2022-12-14 14:59:29,462 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 14:59:29,462 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:59:29,462 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:59:29,463 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:59:29,463 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2022-12-14 14:59:29,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:59:29,561 INFO L263 TraceCheckSpWp]: Trace formula consists of 348 conjuncts, 37 conjunts are in the unsatisfiable core [2022-12-14 14:59:29,562 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:59:29,750 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 9 proven. 65 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:59:29,750 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:59:29,966 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 14:59:30,020 INFO L134 CoverageAnalysis]: Checked inductivity of 75 backedges. 9 proven. 65 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 14:59:30,021 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1712393904] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:59:30,021 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1758518983] [2022-12-14 14:59:30,021 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:59:30,021 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:59:30,022 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:59:30,022 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:59:30,022 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:59:30,036 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:59:30,036 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:59:30,063 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:59:30,093 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:30,115 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:30,148 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:59:30,186 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:59:30,186 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-12-14 14:59:30,217 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:30,232 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:30,263 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:59:30,263 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:59:30,635 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:59:32,954 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '25805#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (< (select |#length| |ULTIMATE.start_substring_~ps~0#1.base|) (+ |ULTIMATE.start_substring_~ps~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:59:32,954 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:59:32,954 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:59:32,954 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 12] total 26 [2022-12-14 14:59:32,954 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1769336945] [2022-12-14 14:59:32,955 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:59:32,955 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2022-12-14 14:59:32,955 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:59:32,955 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2022-12-14 14:59:32,955 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1684, Unknown=0, NotChecked=0, Total=1892 [2022-12-14 14:59:32,955 INFO L87 Difference]: Start difference. First operand 468 states and 552 transitions. Second operand has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:33,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 14:59:33,334 INFO L93 Difference]: Finished difference Result 665 states and 783 transitions. [2022-12-14 14:59:33,335 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-12-14 14:59:33,335 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 52 [2022-12-14 14:59:33,335 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 14:59:33,338 INFO L225 Difference]: With dead ends: 665 [2022-12-14 14:59:33,338 INFO L226 Difference]: Without dead ends: 665 [2022-12-14 14:59:33,338 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 118 SyntacticMatches, 5 SemanticMatches, 50 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 793 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=359, Invalid=2293, Unknown=0, NotChecked=0, Total=2652 [2022-12-14 14:59:33,339 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 529 mSDsluCounter, 99 mSDsCounter, 0 mSdLazyCounter, 496 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 529 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 497 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 496 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 14:59:33,339 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [529 Valid, 115 Invalid, 497 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 496 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 14:59:33,340 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 665 states. [2022-12-14 14:59:33,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 665 to 564. [2022-12-14 14:59:33,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 564 states, 561 states have (on average 1.1942959001782532) internal successors, (670), 563 states have internal predecessors, (670), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:33,345 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 564 states to 564 states and 670 transitions. [2022-12-14 14:59:33,345 INFO L78 Accepts]: Start accepts. Automaton has 564 states and 670 transitions. Word has length 52 [2022-12-14 14:59:33,345 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 14:59:33,345 INFO L495 AbstractCegarLoop]: Abstraction has 564 states and 670 transitions. [2022-12-14 14:59:33,346 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 27 states have (on average 4.2592592592592595) internal successors, (115), 27 states have internal predecessors, (115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 14:59:33,346 INFO L276 IsEmpty]: Start isEmpty. Operand 564 states and 670 transitions. [2022-12-14 14:59:33,346 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-14 14:59:33,346 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 14:59:33,346 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2022-12-14 14:59:33,351 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Ended with exit code 0 [2022-12-14 14:59:33,546 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable45,29 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:59:33,547 INFO L420 AbstractCegarLoop]: === Iteration 47 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 14:59:33,548 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 14:59:33,548 INFO L85 PathProgramCache]: Analyzing trace with hash 1355851898, now seen corresponding path program 8 times [2022-12-14 14:59:33,548 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 14:59:33,548 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2072553795] [2022-12-14 14:59:33,549 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 14:59:33,549 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 14:59:33,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 14:59:33,848 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 4 proven. 66 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-12-14 14:59:33,848 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 14:59:33,848 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2072553795] [2022-12-14 14:59:33,848 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2072553795] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 14:59:33,848 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1162039293] [2022-12-14 14:59:33,848 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 14:59:33,848 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 14:59:33,848 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 14:59:33,849 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 14:59:33,850 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2022-12-14 14:59:33,980 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2022-12-14 14:59:33,980 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 14:59:33,983 INFO L263 TraceCheckSpWp]: Trace formula consists of 328 conjuncts, 96 conjunts are in the unsatisfiable core [2022-12-14 14:59:33,984 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 14:59:33,990 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 14:59:34,119 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:34,167 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 18 [2022-12-14 14:59:35,194 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:59:35,195 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:59:35,197 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:59:35,241 INFO L321 Elim1Store]: treesize reduction 34, result has 62.6 percent of original size [2022-12-14 14:59:35,241 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 4 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 14 case distinctions, treesize of input 78 treesize of output 88 [2022-12-14 14:59:35,409 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 0 proven. 58 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-12-14 14:59:35,409 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 14:59:36,998 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (v_ArrVal_1216 (Array Int Int)) (|v_ULTIMATE.start_substring_~pt~0#1.base_263| Int) (|v_ULTIMATE.start_substring_~ps2~0#1.offset_259| Int)) (let ((.cse3 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1216))) (let ((.cse1 (select .cse3 |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (.cse0 (select (select .cse3 |ULTIMATE.start_substring_~pt~0#1.base|) |c_ULTIMATE.start_main_~nondetString2~0#1.offset|)) (.cse2 (select (select .cse3 |v_ULTIMATE.start_substring_~pt~0#1.base_263|) (+ |c_ULTIMATE.start_main_~nondetString2~0#1.offset| 1)))) (or (not (= .cse0 (select .cse1 (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|)))) (<= (+ 2 |v_ULTIMATE.start_substring_~ps2~0#1.offset_259|) (select |c_#length| |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (= (select .cse1 (+ |c_ULTIMATE.start_main_~nondetString1~0#1.offset| 1)) 0) (not (= .cse2 (select .cse1 |v_ULTIMATE.start_substring_~ps2~0#1.offset_259|))) (not (<= |v_ULTIMATE.start_substring_~ps2~0#1.offset_259| (+ 3 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|))) (not (<= 0 |v_ULTIMATE.start_substring_~ps2~0#1.offset_259|)) (= .cse0 0) (= .cse2 0))))) is different from false [2022-12-14 14:59:37,014 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:59:37,014 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 152 treesize of output 86 [2022-12-14 14:59:37,085 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:59:37,086 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 1 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 14 case distinctions, treesize of input 239 treesize of output 328 [2022-12-14 14:59:37,141 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 14:59:37,141 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 5 select indices, 5 select index equivalence classes, 2 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 8 case distinctions, treesize of input 148 treesize of output 190 [2022-12-14 14:59:37,159 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12 [2022-12-14 14:59:54,377 INFO L134 CoverageAnalysis]: Checked inductivity of 79 backedges. 0 proven. 58 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2022-12-14 14:59:54,378 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1162039293] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 14:59:54,378 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [190635345] [2022-12-14 14:59:54,378 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 14:59:54,378 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 14:59:54,379 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 14:59:54,379 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 14:59:54,379 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 14:59:54,393 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 14:59:54,393 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 14:59:54,416 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:59:54,441 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:54,469 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:54,494 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 14:59:54,530 INFO L321 Elim1Store]: treesize reduction 13, result has 45.8 percent of original size [2022-12-14 14:59:54,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 84 treesize of output 83 [2022-12-14 14:59:54,561 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:54,576 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 14:59:54,603 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 14:59:54,603 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 14:59:55,636 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 14:59:58,018 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '27430#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 14:59:58,018 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 14:59:58,018 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 14:59:58,018 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 19, 19] total 50 [2022-12-14 14:59:58,018 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1196255806] [2022-12-14 14:59:58,018 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 14:59:58,019 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-12-14 14:59:58,019 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 14:59:58,019 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-12-14 14:59:58,020 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=310, Invalid=4115, Unknown=1, NotChecked=130, Total=4556 [2022-12-14 14:59:58,020 INFO L87 Difference]: Start difference. First operand 564 states and 670 transitions. Second operand has 52 states, 51 states have (on average 2.6862745098039214) internal successors, (137), 51 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:00:22,579 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:00:22,579 INFO L93 Difference]: Finished difference Result 699 states and 788 transitions. [2022-12-14 15:00:22,579 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 82 states. [2022-12-14 15:00:22,580 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 51 states have (on average 2.6862745098039214) internal successors, (137), 51 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-12-14 15:00:22,580 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:00:22,581 INFO L225 Difference]: With dead ends: 699 [2022-12-14 15:00:22,581 INFO L226 Difference]: Without dead ends: 699 [2022-12-14 15:00:22,582 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 250 GetRequests, 103 SyntacticMatches, 1 SemanticMatches, 146 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 6001 ImplicationChecksByTransitivity, 26.2s TimeCoverageRelationStatistics Valid=3326, Invalid=18139, Unknown=1, NotChecked=290, Total=21756 [2022-12-14 15:00:22,582 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 1657 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 1564 mSolverCounterSat, 59 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1657 SdHoareTripleChecker+Valid, 62 SdHoareTripleChecker+Invalid, 1719 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 59 IncrementalHoareTripleChecker+Valid, 1564 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 96 IncrementalHoareTripleChecker+Unchecked, 2.8s IncrementalHoareTripleChecker+Time [2022-12-14 15:00:22,582 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1657 Valid, 62 Invalid, 1719 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [59 Valid, 1564 Invalid, 0 Unknown, 96 Unchecked, 2.8s Time] [2022-12-14 15:00:22,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 699 states. [2022-12-14 15:00:22,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 699 to 564. [2022-12-14 15:00:22,586 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 564 states, 561 states have (on average 1.1800356506238858) internal successors, (662), 563 states have internal predecessors, (662), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:00:22,587 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 564 states to 564 states and 662 transitions. [2022-12-14 15:00:22,587 INFO L78 Accepts]: Start accepts. Automaton has 564 states and 662 transitions. Word has length 53 [2022-12-14 15:00:22,587 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:00:22,587 INFO L495 AbstractCegarLoop]: Abstraction has 564 states and 662 transitions. [2022-12-14 15:00:22,587 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 51 states have (on average 2.6862745098039214) internal successors, (137), 51 states have internal predecessors, (137), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:00:22,587 INFO L276 IsEmpty]: Start isEmpty. Operand 564 states and 662 transitions. [2022-12-14 15:00:22,588 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-14 15:00:22,588 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:00:22,588 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:00:22,592 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Ended with exit code 0 [2022-12-14 15:00:22,788 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable46,30 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:00:22,789 INFO L420 AbstractCegarLoop]: === Iteration 48 === Targeting ULTIMATE.startErr11REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 15:00:22,790 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:00:22,790 INFO L85 PathProgramCache]: Analyzing trace with hash -563151082, now seen corresponding path program 8 times [2022-12-14 15:00:22,790 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:00:22,791 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [745592584] [2022-12-14 15:00:22,791 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:00:22,791 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:00:22,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:00:23,160 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 15:00:23,160 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:00:23,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [745592584] [2022-12-14 15:00:23,161 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [745592584] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:00:23,161 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [861823972] [2022-12-14 15:00:23,161 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:00:23,161 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:00:23,161 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:00:23,162 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:00:23,162 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2022-12-14 15:00:23,390 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-12-14 15:00:23,390 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:00:23,393 INFO L263 TraceCheckSpWp]: Trace formula consists of 386 conjuncts, 36 conjunts are in the unsatisfiable core [2022-12-14 15:00:23,394 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:00:23,630 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 15:00:23,630 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:00:23,876 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 5 [2022-12-14 15:00:23,949 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 16 proven. 64 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 15:00:23,949 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [861823972] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:00:23,949 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [331923448] [2022-12-14 15:00:23,950 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 15:00:23,950 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:00:23,950 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:00:23,951 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:00:23,951 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:00:23,970 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:00:23,973 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:00:23,995 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:24,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:24,047 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:24,085 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:24,106 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:24,123 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:24,156 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:00:24,156 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:00:24,424 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:00:26,463 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '29220#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|) (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:00:26,463 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:00:26,463 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:00:26,463 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 15] total 37 [2022-12-14 15:00:26,463 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [652186593] [2022-12-14 15:00:26,464 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:00:26,464 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-12-14 15:00:26,464 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:00:26,464 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-12-14 15:00:26,464 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=303, Invalid=2349, Unknown=0, NotChecked=0, Total=2652 [2022-12-14 15:00:26,464 INFO L87 Difference]: Start difference. First operand 564 states and 662 transitions. Second operand has 38 states, 37 states have (on average 3.2162162162162162) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:00:27,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:00:27,148 INFO L93 Difference]: Finished difference Result 738 states and 843 transitions. [2022-12-14 15:00:27,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2022-12-14 15:00:27,149 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 37 states have (on average 3.2162162162162162) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-12-14 15:00:27,149 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:00:27,151 INFO L225 Difference]: With dead ends: 738 [2022-12-14 15:00:27,151 INFO L226 Difference]: Without dead ends: 738 [2022-12-14 15:00:27,151 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 115 SyntacticMatches, 6 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1411 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=606, Invalid=3554, Unknown=0, NotChecked=0, Total=4160 [2022-12-14 15:00:27,151 INFO L413 NwaCegarLoop]: 48 mSDtfsCounter, 350 mSDsluCounter, 396 mSDsCounter, 0 mSdLazyCounter, 1398 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 444 SdHoareTripleChecker+Invalid, 1399 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1398 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 15:00:27,152 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [350 Valid, 444 Invalid, 1399 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1398 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 15:00:27,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 738 states. [2022-12-14 15:00:27,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 738 to 586. [2022-12-14 15:00:27,159 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 586 states, 583 states have (on average 1.1886792452830188) internal successors, (693), 585 states have internal predecessors, (693), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:00:27,160 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 586 states to 586 states and 693 transitions. [2022-12-14 15:00:27,160 INFO L78 Accepts]: Start accepts. Automaton has 586 states and 693 transitions. Word has length 53 [2022-12-14 15:00:27,160 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:00:27,160 INFO L495 AbstractCegarLoop]: Abstraction has 586 states and 693 transitions. [2022-12-14 15:00:27,160 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 37 states have (on average 3.2162162162162162) internal successors, (119), 38 states have internal predecessors, (119), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:00:27,160 INFO L276 IsEmpty]: Start isEmpty. Operand 586 states and 693 transitions. [2022-12-14 15:00:27,161 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-12-14 15:00:27,161 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:00:27,161 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:00:27,166 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Ended with exit code 0 [2022-12-14 15:00:27,362 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable47 [2022-12-14 15:00:27,363 INFO L420 AbstractCegarLoop]: === Iteration 49 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 15:00:27,363 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:00:27,363 INFO L85 PathProgramCache]: Analyzing trace with hash 1154445308, now seen corresponding path program 9 times [2022-12-14 15:00:27,364 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:00:27,364 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1106307064] [2022-12-14 15:00:27,364 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:00:27,364 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:00:27,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:00:27,668 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 4 proven. 76 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 15:00:27,668 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:00:27,668 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1106307064] [2022-12-14 15:00:27,668 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1106307064] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:00:27,668 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2109216361] [2022-12-14 15:00:27,668 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 15:00:27,669 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:00:27,669 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:00:27,669 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:00:27,670 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2022-12-14 15:00:27,801 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 15:00:27,801 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:00:27,803 INFO L263 TraceCheckSpWp]: Trace formula consists of 372 conjuncts, 39 conjunts are in the unsatisfiable core [2022-12-14 15:00:27,806 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:00:27,964 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 15:00:27,964 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:00:28,207 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 5 treesize of output 3 [2022-12-14 15:00:28,273 INFO L134 CoverageAnalysis]: Checked inductivity of 84 backedges. 9 proven. 71 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 15:00:28,273 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2109216361] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:00:28,273 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1956416645] [2022-12-14 15:00:28,274 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 15:00:28,274 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:00:28,274 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:00:28,274 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:00:28,274 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:00:28,290 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:00:28,290 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:00:28,322 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:28,353 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:28,373 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:28,410 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:28,439 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:28,458 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:28,493 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:00:28,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:00:29,586 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:00:31,362 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '30938#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:00:31,362 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:00:31,362 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:00:31,362 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 13] total 28 [2022-12-14 15:00:31,362 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [605467151] [2022-12-14 15:00:31,362 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:00:31,362 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2022-12-14 15:00:31,362 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:00:31,363 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2022-12-14 15:00:31,363 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1862, Unknown=0, NotChecked=0, Total=2070 [2022-12-14 15:00:31,363 INFO L87 Difference]: Start difference. First operand 586 states and 693 transitions. Second operand has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:00:32,030 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:00:32,030 INFO L93 Difference]: Finished difference Result 672 states and 767 transitions. [2022-12-14 15:00:32,030 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-12-14 15:00:32,030 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 55 [2022-12-14 15:00:32,030 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:00:32,033 INFO L225 Difference]: With dead ends: 672 [2022-12-14 15:00:32,033 INFO L226 Difference]: Without dead ends: 672 [2022-12-14 15:00:32,034 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 194 GetRequests, 126 SyntacticMatches, 5 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1132 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=615, Invalid=3545, Unknown=0, NotChecked=0, Total=4160 [2022-12-14 15:00:32,034 INFO L413 NwaCegarLoop]: 13 mSDtfsCounter, 696 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 763 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 696 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 772 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 763 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 15:00:32,034 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [696 Valid, 119 Invalid, 772 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 763 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 15:00:32,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 672 states. [2022-12-14 15:00:32,040 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 672 to 586. [2022-12-14 15:00:32,040 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 586 states, 583 states have (on average 1.1818181818181819) internal successors, (689), 585 states have internal predecessors, (689), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:00:32,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 586 states to 586 states and 689 transitions. [2022-12-14 15:00:32,041 INFO L78 Accepts]: Start accepts. Automaton has 586 states and 689 transitions. Word has length 55 [2022-12-14 15:00:32,041 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:00:32,042 INFO L495 AbstractCegarLoop]: Abstraction has 586 states and 689 transitions. [2022-12-14 15:00:32,042 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 29 states have (on average 4.0344827586206895) internal successors, (117), 29 states have internal predecessors, (117), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:00:32,042 INFO L276 IsEmpty]: Start isEmpty. Operand 586 states and 689 transitions. [2022-12-14 15:00:32,042 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2022-12-14 15:00:32,042 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:00:32,042 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:00:32,047 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Ended with exit code 0 [2022-12-14 15:00:32,243 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable48 [2022-12-14 15:00:32,243 INFO L420 AbstractCegarLoop]: === Iteration 50 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 15:00:32,244 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:00:32,244 INFO L85 PathProgramCache]: Analyzing trace with hash -690235405, now seen corresponding path program 5 times [2022-12-14 15:00:32,245 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:00:32,245 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [8203258] [2022-12-14 15:00:32,246 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:00:32,246 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:00:32,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:00:32,595 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 9 proven. 86 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 15:00:32,595 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:00:32,595 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [8203258] [2022-12-14 15:00:32,595 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [8203258] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:00:32,595 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2091438680] [2022-12-14 15:00:32,595 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:00:32,595 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:00:32,596 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:00:32,596 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:00:32,597 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2022-12-14 15:00:32,829 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2022-12-14 15:00:32,829 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:00:32,831 INFO L263 TraceCheckSpWp]: Trace formula consists of 400 conjuncts, 48 conjunts are in the unsatisfiable core [2022-12-14 15:00:32,833 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:00:32,845 INFO L321 Elim1Store]: treesize reduction 11, result has 45.0 percent of original size [2022-12-14 15:00:32,845 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 1 case distinctions, treesize of input 9 treesize of output 15 [2022-12-14 15:00:33,144 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 13 [2022-12-14 15:00:38,403 INFO L173 IndexEqualityManager]: detected equality via solver [2022-12-14 15:00:38,403 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 35 treesize of output 17 [2022-12-14 15:00:38,430 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 65 proven. 30 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 15:00:38,430 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:00:38,812 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 11 [2022-12-14 15:00:38,815 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 22 treesize of output 20 [2022-12-14 15:00:39,363 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 60 proven. 35 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 15:00:39,364 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2091438680] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:00:39,364 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2146426567] [2022-12-14 15:00:39,364 INFO L159 IcfgInterpreter]: Started Sifa with 15 locations of interest [2022-12-14 15:00:39,364 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:00:39,365 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:00:39,365 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:00:39,365 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:00:39,381 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:00:39,384 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:00:39,412 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:00:39,440 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:39,464 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:39,491 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:39,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-12-14 15:00:39,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:39,573 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:00:39,606 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:00:39,606 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:00:39,766 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:00:42,161 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '32629#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (<= |ULTIMATE.start_substring_~ps~0#1.offset| 0) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:00:42,161 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:00:42,161 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:00:42,161 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 18, 18] total 48 [2022-12-14 15:00:42,161 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [601565845] [2022-12-14 15:00:42,161 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:00:42,162 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2022-12-14 15:00:42,162 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:00:42,162 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2022-12-14 15:00:42,162 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=310, Invalid=3594, Unknown=2, NotChecked=0, Total=3906 [2022-12-14 15:00:42,162 INFO L87 Difference]: Start difference. First operand 586 states and 689 transitions. Second operand has 49 states, 49 states have (on average 2.877551020408163) internal successors, (141), 48 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:01:56,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:01:56,970 INFO L93 Difference]: Finished difference Result 1854 states and 2065 transitions. [2022-12-14 15:01:56,970 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 131 states. [2022-12-14 15:01:56,970 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 49 states have (on average 2.877551020408163) internal successors, (141), 48 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2022-12-14 15:01:56,970 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:01:56,975 INFO L225 Difference]: With dead ends: 1854 [2022-12-14 15:01:56,975 INFO L226 Difference]: Without dead ends: 1836 [2022-12-14 15:01:56,976 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 309 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 190 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10827 ImplicationChecksByTransitivity, 76.6s TimeCoverageRelationStatistics Valid=6070, Invalid=30594, Unknown=8, NotChecked=0, Total=36672 [2022-12-14 15:01:56,976 INFO L413 NwaCegarLoop]: 28 mSDtfsCounter, 1559 mSDsluCounter, 629 mSDsCounter, 0 mSdLazyCounter, 3177 mSolverCounterSat, 2 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1559 SdHoareTripleChecker+Valid, 657 SdHoareTripleChecker+Invalid, 3183 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 3177 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2022-12-14 15:01:56,977 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1559 Valid, 657 Invalid, 3183 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 3177 Invalid, 4 Unknown, 0 Unchecked, 6.1s Time] [2022-12-14 15:01:56,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1836 states. [2022-12-14 15:01:56,984 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1836 to 741. [2022-12-14 15:01:56,985 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 741 states, 738 states have (on average 1.1856368563685638) internal successors, (875), 740 states have internal predecessors, (875), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:01:56,985 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 741 states to 741 states and 875 transitions. [2022-12-14 15:01:56,985 INFO L78 Accepts]: Start accepts. Automaton has 741 states and 875 transitions. Word has length 56 [2022-12-14 15:01:56,985 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:01:56,985 INFO L495 AbstractCegarLoop]: Abstraction has 741 states and 875 transitions. [2022-12-14 15:01:56,986 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 49 states have (on average 2.877551020408163) internal successors, (141), 48 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:01:56,986 INFO L276 IsEmpty]: Start isEmpty. Operand 741 states and 875 transitions. [2022-12-14 15:01:56,986 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2022-12-14 15:01:56,986 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:01:56,986 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 4, 4, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:01:56,992 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Forceful destruction successful, exit code 0 [2022-12-14 15:01:57,187 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable49,33 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:01:57,187 INFO L420 AbstractCegarLoop]: === Iteration 51 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 15:01:57,188 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:01:57,188 INFO L85 PathProgramCache]: Analyzing trace with hash 316753893, now seen corresponding path program 10 times [2022-12-14 15:01:57,189 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:01:57,189 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [143972212] [2022-12-14 15:01:57,189 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:01:57,189 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:01:57,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:01:58,168 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 20 proven. 93 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 15:01:58,168 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:01:58,168 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [143972212] [2022-12-14 15:01:58,168 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [143972212] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:01:58,168 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [425438098] [2022-12-14 15:01:58,168 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 15:01:58,168 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:01:58,169 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:01:58,169 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:01:58,170 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2022-12-14 15:01:58,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:01:58,289 INFO L263 TraceCheckSpWp]: Trace formula consists of 405 conjuncts, 61 conjunts are in the unsatisfiable core [2022-12-14 15:01:58,291 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:01:58,464 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:01:58,520 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:01:58,520 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:01:58,803 INFO L321 Elim1Store]: treesize reduction 3, result has 75.0 percent of original size [2022-12-14 15:01:58,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 30 [2022-12-14 15:01:58,806 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 20 proven. 68 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 15:01:58,806 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:01:59,054 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 38 [2022-12-14 15:01:59,216 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 20 proven. 68 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 15:01:59,216 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [425438098] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 15:01:59,216 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1598204292] [2022-12-14 15:01:59,217 INFO L159 IcfgInterpreter]: Started Sifa with 17 locations of interest [2022-12-14 15:01:59,217 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 15:01:59,217 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 15:01:59,218 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 15:01:59,218 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 15:01:59,228 INFO L190 IndexEqualityManager]: detected not equals via solver [2022-12-14 15:01:59,229 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 3 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 15 [2022-12-14 15:01:59,257 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 15:01:59,294 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:01:59,323 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:01:59,350 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:01:59,390 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 85 treesize of output 77 [2022-12-14 15:01:59,422 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:01:59,445 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:01:59,481 INFO L321 Elim1Store]: treesize reduction 36, result has 21.7 percent of original size [2022-12-14 15:01:59,481 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 25 treesize of output 24 [2022-12-14 15:01:59,919 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 15:02:02,822 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '35883#(and (<= |ULTIMATE.start_substring_#in~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~t#1.base|) |ULTIMATE.start_substring_#t~short6#1| (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.offset|) (<= (+ |ULTIMATE.start_substring_~pt~0#1.offset| 1) (select |#length| |ULTIMATE.start_substring_~pt~0#1.base|)) (<= 0 |ULTIMATE.start_main_#t~malloc14#1.base|) (<= |ULTIMATE.start_main_~nondetString2~0#1.offset| 0) (<= 0 |ULTIMATE.start_main_~i~1#1|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.offset|) (< (select |#length| |ULTIMATE.start_substring_~ps2~0#1.base|) (+ |ULTIMATE.start_substring_~ps2~0#1.offset| 1)) (<= 0 |ULTIMATE.start_substring_~s#1.base|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.base|) (<= |ULTIMATE.start_substring_~t#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps2~0#1.offset|) (<= 0 |ULTIMATE.start_substring_~ps~0#1.base|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.offset|) (<= 0 |ULTIMATE.start_main_#t~malloc13#1.base|) (<= 1 |ULTIMATE.start_main_~length1~0#1|) (<= 0 |ULTIMATE.start_main_~nondetString1~0#1.base|) (<= |ULTIMATE.start_substring_#in~s#1.offset| 0) (<= 1 |ULTIMATE.start_main_~length2~0#1|) (= |ULTIMATE.start_substring_#t~mem3#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (<= 0 |ULTIMATE.start_main_~i~0#1|) (= |ULTIMATE.start_main_#t~malloc13#1.offset| 0) (<= |ULTIMATE.start_main_~length1~0#1| 2147483647) (<= |ULTIMATE.start_main_~nondetString1~0#1.offset| 0) (<= 0 |ULTIMATE.start_substring_~pt~0#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~t#1.base|) (= |ULTIMATE.start_substring_#t~mem4#1| (select (select |#memory_int| |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|)) (= |#NULL.offset| 0) (= (select |#valid| |ULTIMATE.start_substring_~pt~0#1.base|) 1) (<= 0 |ULTIMATE.start_substring_~s#1.offset|) (<= 0 |ULTIMATE.start_substring_#in~s#1.offset|) (not (= |ULTIMATE.start_substring_#t~mem3#1| 0)) (= |ULTIMATE.start_main_#t~malloc14#1.offset| 0) (<= 0 |ULTIMATE.start_substring_#in~s#1.base|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~length2~0#1| 2147483647) (<= 0 |ULTIMATE.start_substring_~t#1.offset|) (<= 0 |ULTIMATE.start_substring_~pt~0#1.base|) (<= |ULTIMATE.start_substring_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetString2~0#1.base|) (= |#NULL.base| 0))' at error location [2022-12-14 15:02:02,822 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 15:02:02,822 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 15:02:02,823 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 19, 19] total 44 [2022-12-14 15:02:02,823 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1929194784] [2022-12-14 15:02:02,823 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 15:02:02,823 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-12-14 15:02:02,823 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 15:02:02,823 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-12-14 15:02:02,823 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=236, Invalid=3424, Unknown=0, NotChecked=0, Total=3660 [2022-12-14 15:02:02,823 INFO L87 Difference]: Start difference. First operand 741 states and 875 transitions. Second operand has 45 states, 45 states have (on average 2.2222222222222223) internal successors, (100), 44 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:02:14,556 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 15:02:14,556 INFO L93 Difference]: Finished difference Result 1417 states and 1644 transitions. [2022-12-14 15:02:14,557 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 71 states. [2022-12-14 15:02:14,557 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 45 states have (on average 2.2222222222222223) internal successors, (100), 44 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 58 [2022-12-14 15:02:14,557 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 15:02:14,559 INFO L225 Difference]: With dead ends: 1417 [2022-12-14 15:02:14,559 INFO L226 Difference]: Without dead ends: 1417 [2022-12-14 15:02:14,559 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 137 SyntacticMatches, 4 SemanticMatches, 122 ConstructedPredicates, 0 IntricatePredicates, 2 DeprecatedPredicates, 3971 ImplicationChecksByTransitivity, 10.2s TimeCoverageRelationStatistics Valid=1402, Invalid=13850, Unknown=0, NotChecked=0, Total=15252 [2022-12-14 15:02:14,560 INFO L413 NwaCegarLoop]: 49 mSDtfsCounter, 1563 mSDsluCounter, 1071 mSDsCounter, 0 mSdLazyCounter, 4424 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1563 SdHoareTripleChecker+Valid, 1120 SdHoareTripleChecker+Invalid, 4453 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 4424 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.5s IncrementalHoareTripleChecker+Time [2022-12-14 15:02:14,560 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1563 Valid, 1120 Invalid, 4453 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 4424 Invalid, 0 Unknown, 0 Unchecked, 5.5s Time] [2022-12-14 15:02:14,560 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1417 states. [2022-12-14 15:02:14,567 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1417 to 817. [2022-12-14 15:02:14,567 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 817 states, 814 states have (on average 1.1805896805896805) internal successors, (961), 816 states have internal predecessors, (961), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:02:14,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 817 states to 817 states and 961 transitions. [2022-12-14 15:02:14,571 INFO L78 Accepts]: Start accepts. Automaton has 817 states and 961 transitions. Word has length 58 [2022-12-14 15:02:14,571 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 15:02:14,571 INFO L495 AbstractCegarLoop]: Abstraction has 817 states and 961 transitions. [2022-12-14 15:02:14,571 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 45 states have (on average 2.2222222222222223) internal successors, (100), 44 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 15:02:14,571 INFO L276 IsEmpty]: Start isEmpty. Operand 817 states and 961 transitions. [2022-12-14 15:02:14,572 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2022-12-14 15:02:14,573 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 15:02:14,573 INFO L195 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 4, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 15:02:14,577 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Ended with exit code 0 [2022-12-14 15:02:14,773 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable50,34 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:02:14,774 INFO L420 AbstractCegarLoop]: === Iteration 52 === Targeting ULTIMATE.startErr15REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 16 more)] === [2022-12-14 15:02:14,775 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 15:02:14,775 INFO L85 PathProgramCache]: Analyzing trace with hash -175738785, now seen corresponding path program 11 times [2022-12-14 15:02:14,776 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 15:02:14,776 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1211602808] [2022-12-14 15:02:14,776 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 15:02:14,777 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 15:02:14,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 15:02:15,100 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 9 proven. 88 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2022-12-14 15:02:15,100 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 15:02:15,100 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1211602808] [2022-12-14 15:02:15,100 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1211602808] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 15:02:15,100 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [102044734] [2022-12-14 15:02:15,100 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 15:02:15,100 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 15:02:15,100 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 15:02:15,101 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 15:02:15,102 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_4aa96a29-b12e-41bd-aae7-e2820ae570ed/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (35)] Waiting until timeout for monitored process [2022-12-14 15:02:15,319 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 5 check-sat command(s) [2022-12-14 15:02:15,319 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 15:02:15,321 INFO L263 TraceCheckSpWp]: Trace formula consists of 392 conjuncts, 81 conjunts are in the unsatisfiable core [2022-12-14 15:02:15,324 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 15:02:15,327 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 10 treesize of output 8 [2022-12-14 15:02:15,432 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 15:02:15,473 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 19 [2022-12-14 15:02:37,639 INFO L321 Elim1Store]: treesize reduction 22, result has 82.4 percent of original size [2022-12-14 15:02:37,640 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 5 select indices, 5 select index equivalence classes, 0 disjoint index pairs (out of 10 index pairs), introduced 5 new quantified variables, introduced 10 case distinctions, treesize of input 67 treesize of output 130 [2022-12-14 15:02:38,351 INFO L134 CoverageAnalysis]: Checked inductivity of 122 backedges. 8 proven. 71 refuted. 2 times theorem prover too weak. 41 trivial. 0 not checked. [2022-12-14 15:02:38,352 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 15:02:45,869 WARN L837 $PredicateComparison]: unable to prove that (forall ((|ULTIMATE.start_substring_~pt~0#1.base| Int) (|v_ULTIMATE.start_substring_~ps2~0#1.offset_335| Int) (v_ArrVal_1499 (Array Int Int)) (|v_ULTIMATE.start_substring_~pt~0#1.offset_346| Int) (|ULTIMATE.start_substring_~pt~0#1.offset| Int) (|v_ULTIMATE.start_substring_~ps2~0#1.offset_336| Int) (|v_ULTIMATE.start_substring_~ps2~0#1.offset_337| Int) (|v_ULTIMATE.start_substring_~pt~0#1.base_346| Int) (|v_ULTIMATE.start_substring_~pt~0#1.base_344| Int) (|v_ULTIMATE.start_substring_~pt~0#1.offset_344| Int)) (let ((.cse4 (store |c_#memory_int| |c_ULTIMATE.start_main_~nondetString2~0#1.base| v_ArrVal_1499))) (let ((.cse3 (select (select .cse4 |v_ULTIMATE.start_substring_~pt~0#1.base_344|) |v_ULTIMATE.start_substring_~pt~0#1.offset_344|)) (.cse2 (select (select .cse4 |v_ULTIMATE.start_substring_~pt~0#1.base_346|) |v_ULTIMATE.start_substring_~pt~0#1.offset_346|)) (.cse1 (select .cse4 |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (.cse0 (select (select .cse4 |ULTIMATE.start_substring_~pt~0#1.base|) |ULTIMATE.start_substring_~pt~0#1.offset|))) (or (not (<= |v_ULTIMATE.start_substring_~ps2~0#1.offset_335| (+ |v_ULTIMATE.start_substring_~ps2~0#1.offset_336| 1))) (<= (+ 2 |v_ULTIMATE.start_substring_~ps2~0#1.offset_335|) (select |c_#length| |c_ULTIMATE.start_main_~nondetString1~0#1.base|)) (< (+ 2 |c_ULTIMATE.start_main_~nondetString1~0#1.offset|) |v_ULTIMATE.start_substring_~ps2~0#1.offset_337|) (not (= .cse0 (select .cse1 |v_ULTIMATE.start_substring_~ps2~0#1.offset_337|))) (= .cse2 0) (not (= (select .cse1 |v_ULTIMATE.start_substring_~ps2~0#1.offset_335|) .cse3)) (= .cse3 0) (not (= .cse2 (select .cse1 |v_ULTIMATE.start_substring_~ps2~0#1.offset_336|))) (not (<= |v_ULTIMATE.start_substring_~ps2~0#1.offset_336| (+ |v_ULTIMATE.start_substring_~ps2~0#1.offset_337| 1))) (not (<= 0 |v_ULTIMATE.start_substring_~ps2~0#1.offset_335|)) (= .cse0 0))))) is different from false [2022-12-14 15:02:45,898 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:02:45,899 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 1 case distinctions, treesize of input 184 treesize of output 96 [2022-12-14 15:02:46,114 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:02:46,114 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 7 select indices, 7 select index equivalence classes, 0 disjoint index pairs (out of 21 index pairs), introduced 7 new quantified variables, introduced 21 case distinctions, treesize of input 285 treesize of output 455 [2022-12-14 15:02:46,300 INFO L321 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2022-12-14 15:02:46,300 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 6 select indices, 6 select index equivalence classes, 0 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 190 treesize of output 280 [2022-12-14 15:02:46,337 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 12