./Ultimate.py --spec ../../sv-benchmarks/c/properties/valid-memsafety.prp --file ../../sv-benchmarks/c/array-memsafety/openbsd_cmemrchr-alloca-2.i --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/config/TaipanMemDerefMemtrack.xml -i ../../sv-benchmarks/c/array-memsafety/openbsd_cmemrchr-alloca-2.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3a34687129125cc08371e7bb78f7bdb7a4f5274a9b22928fd388f593b6db6995 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-14 16:02:43,071 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-14 16:02:43,073 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-14 16:02:43,092 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-14 16:02:43,092 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-14 16:02:43,093 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-14 16:02:43,094 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-14 16:02:43,096 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-14 16:02:43,097 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-14 16:02:43,098 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-14 16:02:43,099 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-14 16:02:43,100 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-14 16:02:43,100 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-14 16:02:43,101 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-14 16:02:43,102 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-14 16:02:43,103 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-14 16:02:43,104 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-14 16:02:43,105 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-14 16:02:43,106 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-14 16:02:43,108 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-14 16:02:43,110 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-14 16:02:43,111 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-14 16:02:43,112 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-14 16:02:43,112 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-14 16:02:43,116 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-14 16:02:43,116 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-14 16:02:43,116 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-14 16:02:43,117 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-14 16:02:43,118 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-14 16:02:43,119 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-14 16:02:43,119 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-14 16:02:43,120 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-14 16:02:43,121 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-14 16:02:43,121 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-14 16:02:43,122 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-14 16:02:43,122 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-14 16:02:43,123 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-14 16:02:43,123 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-14 16:02:43,123 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-14 16:02:43,124 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-14 16:02:43,124 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-14 16:02:43,125 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/config/svcomp-DerefFreeMemtrack-32bit-Taipan_Default.epf [2022-12-14 16:02:43,146 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-14 16:02:43,146 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-14 16:02:43,147 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-14 16:02:43,152 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-14 16:02:43,153 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-12-14 16:02:43,153 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-12-14 16:02:43,153 INFO L138 SettingsManager]: * User list type=DISABLED [2022-12-14 16:02:43,153 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2022-12-14 16:02:43,153 INFO L138 SettingsManager]: * Explicit value domain=true [2022-12-14 16:02:43,154 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2022-12-14 16:02:43,154 INFO L138 SettingsManager]: * Octagon Domain=false [2022-12-14 16:02:43,154 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2022-12-14 16:02:43,154 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2022-12-14 16:02:43,154 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2022-12-14 16:02:43,154 INFO L138 SettingsManager]: * Interval Domain=false [2022-12-14 16:02:43,155 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2022-12-14 16:02:43,155 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2022-12-14 16:02:43,155 INFO L138 SettingsManager]: * Simplification Technique=POLY_PAC [2022-12-14 16:02:43,156 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-14 16:02:43,156 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-14 16:02:43,156 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-14 16:02:43,156 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-14 16:02:43,156 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-14 16:02:43,156 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-14 16:02:43,157 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-14 16:02:43,157 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-14 16:02:43,157 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-12-14 16:02:43,157 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-12-14 16:02:43,157 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-12-14 16:02:43,157 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-12-14 16:02:43,158 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-12-14 16:02:43,158 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-14 16:02:43,158 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-14 16:02:43,158 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-14 16:02:43,158 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-12-14 16:02:43,159 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 16:02:43,159 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-14 16:02:43,159 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES [2022-12-14 16:02:43,159 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-12-14 16:02:43,159 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2022-12-14 16:02:43,159 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-12-14 16:02:43,160 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2022-12-14 16:02:43,160 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3a34687129125cc08371e7bb78f7bdb7a4f5274a9b22928fd388f593b6db6995 [2022-12-14 16:02:43,347 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-14 16:02:43,365 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-14 16:02:43,367 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-14 16:02:43,368 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-14 16:02:43,368 INFO L275 PluginConnector]: CDTParser initialized [2022-12-14 16:02:43,369 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/../../sv-benchmarks/c/array-memsafety/openbsd_cmemrchr-alloca-2.i [2022-12-14 16:02:45,936 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-14 16:02:46,133 INFO L351 CDTParser]: Found 1 translation units. [2022-12-14 16:02:46,133 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/sv-benchmarks/c/array-memsafety/openbsd_cmemrchr-alloca-2.i [2022-12-14 16:02:46,143 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/data/0751ce5f2/baf293bb657e4d9d9d450ef9f7f9576f/FLAG1e656826d [2022-12-14 16:02:46,505 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/data/0751ce5f2/baf293bb657e4d9d9d450ef9f7f9576f [2022-12-14 16:02:46,507 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-14 16:02:46,508 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-14 16:02:46,509 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-14 16:02:46,509 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-14 16:02:46,512 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-14 16:02:46,513 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 04:02:46" (1/1) ... [2022-12-14 16:02:46,514 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@30118198 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46, skipping insertion in model container [2022-12-14 16:02:46,514 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 14.12 04:02:46" (1/1) ... [2022-12-14 16:02:46,521 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-14 16:02:46,552 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-14 16:02:46,725 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 16:02:46,733 INFO L203 MainTranslator]: Completed pre-run [2022-12-14 16:02:46,760 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-14 16:02:46,779 INFO L208 MainTranslator]: Completed translation [2022-12-14 16:02:46,780 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46 WrapperNode [2022-12-14 16:02:46,780 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-14 16:02:46,781 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-14 16:02:46,781 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-14 16:02:46,782 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-14 16:02:46,790 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46" (1/1) ... [2022-12-14 16:02:46,799 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46" (1/1) ... [2022-12-14 16:02:46,812 INFO L138 Inliner]: procedures = 117, calls = 8, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 66 [2022-12-14 16:02:46,812 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-14 16:02:46,812 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-14 16:02:46,813 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-14 16:02:46,813 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-14 16:02:46,818 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46" (1/1) ... [2022-12-14 16:02:46,818 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46" (1/1) ... [2022-12-14 16:02:46,820 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46" (1/1) ... [2022-12-14 16:02:46,820 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46" (1/1) ... [2022-12-14 16:02:46,824 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46" (1/1) ... [2022-12-14 16:02:46,826 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46" (1/1) ... [2022-12-14 16:02:46,826 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46" (1/1) ... [2022-12-14 16:02:46,827 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46" (1/1) ... [2022-12-14 16:02:46,828 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-14 16:02:46,829 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-14 16:02:46,829 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-14 16:02:46,829 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-14 16:02:46,830 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46" (1/1) ... [2022-12-14 16:02:46,834 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-12-14 16:02:46,842 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:02:46,851 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-12-14 16:02:46,853 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-12-14 16:02:46,883 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-12-14 16:02:46,883 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-12-14 16:02:46,883 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-12-14 16:02:46,883 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-12-14 16:02:46,884 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-14 16:02:46,884 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-14 16:02:46,959 INFO L235 CfgBuilder]: Building ICFG [2022-12-14 16:02:46,960 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-14 16:02:47,084 INFO L276 CfgBuilder]: Performing block encoding [2022-12-14 16:02:47,135 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-14 16:02:47,135 INFO L300 CfgBuilder]: Removed 2 assume(true) statements. [2022-12-14 16:02:47,138 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 04:02:47 BoogieIcfgContainer [2022-12-14 16:02:47,138 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-14 16:02:47,141 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-12-14 16:02:47,141 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-12-14 16:02:47,145 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-12-14 16:02:47,145 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 14.12 04:02:46" (1/3) ... [2022-12-14 16:02:47,146 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@40e6f970 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 04:02:47, skipping insertion in model container [2022-12-14 16:02:47,146 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 14.12 04:02:46" (2/3) ... [2022-12-14 16:02:47,146 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@40e6f970 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 14.12 04:02:47, skipping insertion in model container [2022-12-14 16:02:47,146 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 14.12 04:02:47" (3/3) ... [2022-12-14 16:02:47,148 INFO L112 eAbstractionObserver]: Analyzing ICFG openbsd_cmemrchr-alloca-2.i [2022-12-14 16:02:47,167 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-12-14 16:02:47,168 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 5 error locations. [2022-12-14 16:02:47,204 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-12-14 16:02:47,209 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@da579a0, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-12-14 16:02:47,209 INFO L358 AbstractCegarLoop]: Starting to check reachability of 5 error locations. [2022-12-14 16:02:47,212 INFO L276 IsEmpty]: Start isEmpty. Operand has 17 states, 11 states have (on average 1.9090909090909092) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:47,216 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-12-14 16:02:47,216 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:47,216 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-12-14 16:02:47,217 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:02:47,220 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:47,221 INFO L85 PathProgramCache]: Analyzing trace with hash 107409, now seen corresponding path program 1 times [2022-12-14 16:02:47,228 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:47,228 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1668783762] [2022-12-14 16:02:47,228 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:47,229 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:47,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:47,430 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:47,431 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:47,431 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1668783762] [2022-12-14 16:02:47,432 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1668783762] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 16:02:47,432 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 16:02:47,432 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [1] imperfect sequences [] total 1 [2022-12-14 16:02:47,433 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [546993770] [2022-12-14 16:02:47,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 16:02:47,438 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-12-14 16:02:47,438 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:47,469 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-14 16:02:47,469 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 16:02:47,471 INFO L87 Difference]: Start difference. First operand has 17 states, 11 states have (on average 1.9090909090909092) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:47,506 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:02:47,506 INFO L93 Difference]: Finished difference Result 16 states and 19 transitions. [2022-12-14 16:02:47,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 16:02:47,508 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-12-14 16:02:47,508 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:02:47,513 INFO L225 Difference]: With dead ends: 16 [2022-12-14 16:02:47,513 INFO L226 Difference]: Without dead ends: 15 [2022-12-14 16:02:47,514 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 1 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-14 16:02:47,517 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 14 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 16:02:47,518 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 10 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 16:02:47,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15 states. [2022-12-14 16:02:47,535 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15 to 15. [2022-12-14 16:02:47,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 11 states have (on average 1.6363636363636365) internal successors, (18), 14 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:47,536 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 18 transitions. [2022-12-14 16:02:47,536 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 18 transitions. Word has length 3 [2022-12-14 16:02:47,537 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:02:47,537 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 18 transitions. [2022-12-14 16:02:47,537 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:47,537 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 18 transitions. [2022-12-14 16:02:47,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2022-12-14 16:02:47,537 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:47,537 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1] [2022-12-14 16:02:47,537 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-12-14 16:02:47,538 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:02:47,538 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:47,538 INFO L85 PathProgramCache]: Analyzing trace with hash 107410, now seen corresponding path program 1 times [2022-12-14 16:02:47,538 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:47,538 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1689746098] [2022-12-14 16:02:47,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:47,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:47,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:47,744 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:47,744 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:47,745 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1689746098] [2022-12-14 16:02:47,745 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1689746098] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 16:02:47,745 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 16:02:47,745 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 16:02:47,745 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [143680901] [2022-12-14 16:02:47,746 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 16:02:47,747 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 16:02:47,747 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:47,747 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 16:02:47,748 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 16:02:47,748 INFO L87 Difference]: Start difference. First operand 15 states and 18 transitions. Second operand has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:47,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:02:47,798 INFO L93 Difference]: Finished difference Result 28 states and 34 transitions. [2022-12-14 16:02:47,798 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-14 16:02:47,799 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2022-12-14 16:02:47,799 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:02:47,799 INFO L225 Difference]: With dead ends: 28 [2022-12-14 16:02:47,799 INFO L226 Difference]: Without dead ends: 28 [2022-12-14 16:02:47,800 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-12-14 16:02:47,801 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 29 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 31 SdHoareTripleChecker+Invalid, 22 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 16:02:47,801 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 31 Invalid, 22 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 16:02:47,802 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28 states. [2022-12-14 16:02:47,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28 to 17. [2022-12-14 16:02:47,809 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17 states, 13 states have (on average 1.6153846153846154) internal successors, (21), 16 states have internal predecessors, (21), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:47,809 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17 states to 17 states and 21 transitions. [2022-12-14 16:02:47,809 INFO L78 Accepts]: Start accepts. Automaton has 17 states and 21 transitions. Word has length 3 [2022-12-14 16:02:47,809 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:02:47,810 INFO L495 AbstractCegarLoop]: Abstraction has 17 states and 21 transitions. [2022-12-14 16:02:47,810 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:47,810 INFO L276 IsEmpty]: Start isEmpty. Operand 17 states and 21 transitions. [2022-12-14 16:02:47,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2022-12-14 16:02:47,810 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:47,811 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1] [2022-12-14 16:02:47,811 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-12-14 16:02:47,811 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:02:47,812 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:47,812 INFO L85 PathProgramCache]: Analyzing trace with hash 103264033, now seen corresponding path program 1 times [2022-12-14 16:02:47,812 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:47,812 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1627358736] [2022-12-14 16:02:47,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:47,812 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:47,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:48,023 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:48,024 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:48,024 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1627358736] [2022-12-14 16:02:48,024 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1627358736] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:02:48,024 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1546484753] [2022-12-14 16:02:48,024 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:48,025 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:48,025 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:02:48,026 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:02:48,027 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-12-14 16:02:48,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:48,079 INFO L263 TraceCheckSpWp]: Trace formula consists of 55 conjuncts, 16 conjunts are in the unsatisfiable core [2022-12-14 16:02:48,083 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:02:48,162 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:02:48,327 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:48,327 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:02:48,430 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:48,430 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1546484753] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:02:48,430 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [686217429] [2022-12-14 16:02:48,448 INFO L159 IcfgInterpreter]: Started Sifa with 4 locations of interest [2022-12-14 16:02:48,448 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:02:48,453 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:02:48,458 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:02:48,459 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:02:48,504 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:02:48,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:02:48,629 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:48,679 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:48,708 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:02:49,025 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '140#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (not (<= (+ |ULTIMATE.start_main_~i~0#1| |ULTIMATE.start_main_~nondetArea~0#1.offset| 1) (select |#length| |ULTIMATE.start_main_~nondetArea~0#1.base|))) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= |ULTIMATE.start_main_#t~nondet10#1| 127) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (<= |#NULL.offset| 0) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 100000 ~MAX~0) (<= 0 |ULTIMATE.start_main_~i~0#1|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 (+ 128 |ULTIMATE.start_main_#t~nondet10#1|)) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#NULL.offset|) (<= 0 |#StackHeapBarrier|) (<= |ULTIMATE.start_main_~n~0#1| 100000) (<= ~MAX~0 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:02:49,025 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:02:49,025 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:02:49,025 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [3, 3, 3] total 9 [2022-12-14 16:02:49,025 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [684923111] [2022-12-14 16:02:49,025 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:02:49,026 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2022-12-14 16:02:49,026 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:49,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2022-12-14 16:02:49,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=138, Unknown=0, NotChecked=0, Total=182 [2022-12-14 16:02:49,027 INFO L87 Difference]: Start difference. First operand 17 states and 21 transitions. Second operand has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:49,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:02:49,139 INFO L93 Difference]: Finished difference Result 16 states and 19 transitions. [2022-12-14 16:02:49,139 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-14 16:02:49,139 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2022-12-14 16:02:49,139 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:02:49,139 INFO L225 Difference]: With dead ends: 16 [2022-12-14 16:02:49,140 INFO L226 Difference]: Without dead ends: 16 [2022-12-14 16:02:49,140 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=61, Invalid=179, Unknown=0, NotChecked=0, Total=240 [2022-12-14 16:02:49,141 INFO L413 NwaCegarLoop]: 10 mSDtfsCounter, 15 mSDsluCounter, 30 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 40 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 16:02:49,142 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 40 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 16:02:49,143 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16 states. [2022-12-14 16:02:49,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16 to 15. [2022-12-14 16:02:49,144 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15 states, 12 states have (on average 1.5) internal successors, (18), 14 states have internal predecessors, (18), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:49,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15 states to 15 states and 18 transitions. [2022-12-14 16:02:49,145 INFO L78 Accepts]: Start accepts. Automaton has 15 states and 18 transitions. Word has length 5 [2022-12-14 16:02:49,145 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:02:49,145 INFO L495 AbstractCegarLoop]: Abstraction has 15 states and 18 transitions. [2022-12-14 16:02:49,145 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 10 states have (on average 1.5) internal successors, (15), 10 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:49,146 INFO L276 IsEmpty]: Start isEmpty. Operand 15 states and 18 transitions. [2022-12-14 16:02:49,146 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 16:02:49,146 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:49,146 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:02:49,153 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-12-14 16:02:49,347 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable2 [2022-12-14 16:02:49,348 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:02:49,349 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:49,349 INFO L85 PathProgramCache]: Analyzing trace with hash 454107511, now seen corresponding path program 1 times [2022-12-14 16:02:49,349 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:49,350 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [118511851] [2022-12-14 16:02:49,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:49,350 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:49,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:49,524 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:49,524 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:49,524 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [118511851] [2022-12-14 16:02:49,524 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [118511851] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 16:02:49,524 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 16:02:49,524 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-14 16:02:49,525 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1981207259] [2022-12-14 16:02:49,525 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 16:02:49,525 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 16:02:49,525 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:49,525 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 16:02:49,525 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-14 16:02:49,526 INFO L87 Difference]: Start difference. First operand 15 states and 18 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 6 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:49,565 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:02:49,566 INFO L93 Difference]: Finished difference Result 16 states and 19 transitions. [2022-12-14 16:02:49,566 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 16:02:49,566 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 6 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 16:02:49,566 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:02:49,567 INFO L225 Difference]: With dead ends: 16 [2022-12-14 16:02:49,567 INFO L226 Difference]: Without dead ends: 16 [2022-12-14 16:02:49,567 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-12-14 16:02:49,568 INFO L413 NwaCegarLoop]: 7 mSDtfsCounter, 31 mSDsluCounter, 10 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 16:02:49,568 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 17 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 16:02:49,569 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16 states. [2022-12-14 16:02:49,570 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16 to 14. [2022-12-14 16:02:49,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 12 states have (on average 1.4166666666666667) internal successors, (17), 13 states have internal predecessors, (17), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:49,570 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 17 transitions. [2022-12-14 16:02:49,570 INFO L78 Accepts]: Start accepts. Automaton has 14 states and 17 transitions. Word has length 7 [2022-12-14 16:02:49,570 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:02:49,570 INFO L495 AbstractCegarLoop]: Abstraction has 14 states and 17 transitions. [2022-12-14 16:02:49,571 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 6 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:49,571 INFO L276 IsEmpty]: Start isEmpty. Operand 14 states and 17 transitions. [2022-12-14 16:02:49,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2022-12-14 16:02:49,571 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:49,571 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:02:49,571 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-12-14 16:02:49,571 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:02:49,572 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:49,572 INFO L85 PathProgramCache]: Analyzing trace with hash 454107512, now seen corresponding path program 1 times [2022-12-14 16:02:49,572 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:49,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [62618252] [2022-12-14 16:02:49,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:49,572 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:49,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:49,848 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:49,848 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:49,849 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [62618252] [2022-12-14 16:02:49,849 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [62618252] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:02:49,849 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [98330798] [2022-12-14 16:02:49,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:49,849 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:49,849 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:02:49,850 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:02:49,851 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-12-14 16:02:49,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:49,901 INFO L263 TraceCheckSpWp]: Trace formula consists of 82 conjuncts, 36 conjunts are in the unsatisfiable core [2022-12-14 16:02:49,902 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:02:49,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:02:50,091 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:50,092 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:02:50,337 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:50,337 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [98330798] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:02:50,338 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1374325145] [2022-12-14 16:02:50,340 INFO L159 IcfgInterpreter]: Started Sifa with 7 locations of interest [2022-12-14 16:02:50,340 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:02:50,340 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:02:50,340 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:02:50,340 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:02:50,376 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:02:50,408 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:50,450 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:50,475 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:50,540 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:02:51,258 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '272#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (= |ULTIMATE.start_cmemrchr_~n#1| |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (= |ULTIMATE.start_cmemrchr_~c#1| |ULTIMATE.start_cmemrchr_#in~c#1|) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (= |ULTIMATE.start_cmemrchr_~cp~0#1.offset| |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|) (= |ULTIMATE.start_cmemrchr_~cp~0#1.base| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (<= |#NULL.offset| 0) (= |ULTIMATE.start_cmemrchr_#t~pre3#1.base| |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 100000 ~MAX~0) (= |ULTIMATE.start_main_~n~0#1| |ULTIMATE.start_cmemrchr_#in~n#1|) (= |ULTIMATE.start_main_~nondetArea~0#1.offset| |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (= |ULTIMATE.start_main_~c~0#1| |ULTIMATE.start_cmemrchr_#in~c#1|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (= |ULTIMATE.start_cmemrchr_#in~s#1.base| |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (not (< |ULTIMATE.start_main_~i~0#1| |ULTIMATE.start_main_~n~0#1|)) (= |ULTIMATE.start_cmemrchr_~s#1.offset| |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (= (+ (ite (<= (mod |ULTIMATE.start_cmemrchr_~n#1| 4294967296) 2147483647) (mod |ULTIMATE.start_cmemrchr_~n#1| 4294967296) (+ (- 4294967296) (mod |ULTIMATE.start_cmemrchr_~n#1| 4294967296))) |ULTIMATE.start_cmemrchr_~s#1.offset|) (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1)) (<= 0 |#NULL.offset|) (<= 0 |#StackHeapBarrier|) (= |ULTIMATE.start_cmemrchr_#in~s#1.base| |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= |ULTIMATE.start_main_~n~0#1| 100000) (<= ~MAX~0 100000) (= |#NULL.base| 0) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|))))' at error location [2022-12-14 16:02:51,258 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:02:51,258 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:02:51,258 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 5] total 14 [2022-12-14 16:02:51,258 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [147323594] [2022-12-14 16:02:51,259 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:02:51,259 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2022-12-14 16:02:51,259 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:51,259 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2022-12-14 16:02:51,259 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=74, Invalid=388, Unknown=0, NotChecked=0, Total=462 [2022-12-14 16:02:51,260 INFO L87 Difference]: Start difference. First operand 14 states and 17 transitions. Second operand has 16 states, 15 states have (on average 1.2666666666666666) internal successors, (19), 15 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:51,827 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:02:51,827 INFO L93 Difference]: Finished difference Result 62 states and 72 transitions. [2022-12-14 16:02:51,828 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-14 16:02:51,828 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 15 states have (on average 1.2666666666666666) internal successors, (19), 15 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2022-12-14 16:02:51,828 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:02:51,828 INFO L225 Difference]: With dead ends: 62 [2022-12-14 16:02:51,828 INFO L226 Difference]: Without dead ends: 62 [2022-12-14 16:02:51,829 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 272 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=197, Invalid=925, Unknown=0, NotChecked=0, Total=1122 [2022-12-14 16:02:51,829 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 138 mSDsluCounter, 83 mSDsCounter, 0 mSdLazyCounter, 106 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 138 SdHoareTripleChecker+Valid, 92 SdHoareTripleChecker+Invalid, 114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 106 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 16:02:51,830 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [138 Valid, 92 Invalid, 114 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 106 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 16:02:51,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2022-12-14 16:02:51,832 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 24. [2022-12-14 16:02:51,832 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24 states, 22 states have (on average 1.4090909090909092) internal successors, (31), 23 states have internal predecessors, (31), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:51,832 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24 states to 24 states and 31 transitions. [2022-12-14 16:02:51,832 INFO L78 Accepts]: Start accepts. Automaton has 24 states and 31 transitions. Word has length 7 [2022-12-14 16:02:51,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:02:51,832 INFO L495 AbstractCegarLoop]: Abstraction has 24 states and 31 transitions. [2022-12-14 16:02:51,833 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 15 states have (on average 1.2666666666666666) internal successors, (19), 15 states have internal predecessors, (19), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:51,833 INFO L276 IsEmpty]: Start isEmpty. Operand 24 states and 31 transitions. [2022-12-14 16:02:51,833 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2022-12-14 16:02:51,833 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:51,833 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1] [2022-12-14 16:02:51,837 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-12-14 16:02:52,033 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:52,035 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr4ASSERT_VIOLATIONMEMORY_LEAK === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:02:52,036 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:52,036 INFO L85 PathProgramCache]: Analyzing trace with hash -502521436, now seen corresponding path program 1 times [2022-12-14 16:02:52,036 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:52,037 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1475383129] [2022-12-14 16:02:52,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:52,037 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:52,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:52,119 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 16:02:52,119 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:52,119 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1475383129] [2022-12-14 16:02:52,119 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1475383129] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 16:02:52,119 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-14 16:02:52,119 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-14 16:02:52,120 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1379823864] [2022-12-14 16:02:52,120 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 16:02:52,120 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-12-14 16:02:52,120 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:52,120 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-14 16:02:52,121 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 16:02:52,121 INFO L87 Difference]: Start difference. First operand 24 states and 31 transitions. Second operand has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:52,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:02:52,132 INFO L93 Difference]: Finished difference Result 23 states and 30 transitions. [2022-12-14 16:02:52,132 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-14 16:02:52,132 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2022-12-14 16:02:52,132 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:02:52,133 INFO L225 Difference]: With dead ends: 23 [2022-12-14 16:02:52,133 INFO L226 Difference]: Without dead ends: 20 [2022-12-14 16:02:52,133 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-14 16:02:52,134 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 8 mSDsluCounter, 9 mSDsCounter, 0 mSdLazyCounter, 12 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 12 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 16:02:52,134 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 18 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 12 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 16:02:52,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20 states. [2022-12-14 16:02:52,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20 to 19. [2022-12-14 16:02:52,136 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 18 states have (on average 1.2777777777777777) internal successors, (23), 18 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:52,136 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 23 transitions. [2022-12-14 16:02:52,136 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 23 transitions. Word has length 10 [2022-12-14 16:02:52,137 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:02:52,137 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 23 transitions. [2022-12-14 16:02:52,137 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:52,137 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 23 transitions. [2022-12-14 16:02:52,137 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-12-14 16:02:52,137 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:52,137 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:02:52,137 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-12-14 16:02:52,137 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:02:52,137 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:52,138 INFO L85 PathProgramCache]: Analyzing trace with hash 37291176, now seen corresponding path program 1 times [2022-12-14 16:02:52,138 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:52,138 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [488024114] [2022-12-14 16:02:52,138 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:52,138 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:52,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:52,226 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:52,226 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:52,226 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [488024114] [2022-12-14 16:02:52,226 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [488024114] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:02:52,226 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [990467377] [2022-12-14 16:02:52,227 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:52,227 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:52,227 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:02:52,228 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:02:52,228 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2022-12-14 16:02:52,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:52,274 INFO L263 TraceCheckSpWp]: Trace formula consists of 102 conjuncts, 11 conjunts are in the unsatisfiable core [2022-12-14 16:02:52,275 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:02:52,324 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:52,324 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:02:52,385 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:52,385 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [990467377] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:02:52,385 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2131429626] [2022-12-14 16:02:52,387 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:02:52,387 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:02:52,387 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:02:52,388 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:02:52,388 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:02:52,420 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:02:52,453 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:02:52,493 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:52,530 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:52,751 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:02:53,718 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '507#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:02:53,718 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:02:53,718 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:02:53,718 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5, 5] total 12 [2022-12-14 16:02:53,719 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1651584266] [2022-12-14 16:02:53,719 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:02:53,719 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-12-14 16:02:53,719 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:53,719 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-12-14 16:02:53,719 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=66, Invalid=354, Unknown=0, NotChecked=0, Total=420 [2022-12-14 16:02:53,720 INFO L87 Difference]: Start difference. First operand 19 states and 23 transitions. Second operand has 13 states, 13 states have (on average 1.9230769230769231) internal successors, (25), 12 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:53,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:02:53,783 INFO L93 Difference]: Finished difference Result 24 states and 27 transitions. [2022-12-14 16:02:53,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-14 16:02:53,784 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 1.9230769230769231) internal successors, (25), 12 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-12-14 16:02:53,784 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:02:53,784 INFO L225 Difference]: With dead ends: 24 [2022-12-14 16:02:53,784 INFO L226 Difference]: Without dead ends: 19 [2022-12-14 16:02:53,784 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 39 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 139 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=81, Invalid=425, Unknown=0, NotChecked=0, Total=506 [2022-12-14 16:02:53,785 INFO L413 NwaCegarLoop]: 4 mSDtfsCounter, 10 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 39 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 16:02:53,785 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 39 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 16:02:53,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2022-12-14 16:02:53,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2022-12-14 16:02:53,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 18 states have (on average 1.2222222222222223) internal successors, (22), 18 states have internal predecessors, (22), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:53,786 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 22 transitions. [2022-12-14 16:02:53,787 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 22 transitions. Word has length 11 [2022-12-14 16:02:53,787 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:02:53,787 INFO L495 AbstractCegarLoop]: Abstraction has 19 states and 22 transitions. [2022-12-14 16:02:53,787 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 1.9230769230769231) internal successors, (25), 12 states have internal predecessors, (25), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:53,787 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 22 transitions. [2022-12-14 16:02:53,787 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-12-14 16:02:53,787 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:53,787 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 1, 1, 1, 1, 1] [2022-12-14 16:02:53,791 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2022-12-14 16:02:53,988 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:53,988 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:02:53,989 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:53,990 INFO L85 PathProgramCache]: Analyzing trace with hash 1191886437, now seen corresponding path program 2 times [2022-12-14 16:02:53,990 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:53,990 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [232780869] [2022-12-14 16:02:53,990 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:53,991 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:54,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:54,330 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 16 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:54,330 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:54,330 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [232780869] [2022-12-14 16:02:54,330 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [232780869] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:02:54,330 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [363616111] [2022-12-14 16:02:54,330 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:02:54,330 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:54,330 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:02:54,331 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:02:54,332 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2022-12-14 16:02:54,379 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2022-12-14 16:02:54,379 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:02:54,381 INFO L263 TraceCheckSpWp]: Trace formula consists of 69 conjuncts, 32 conjunts are in the unsatisfiable core [2022-12-14 16:02:54,382 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:02:54,405 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 16:02:54,732 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-14 16:02:54,732 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-12-14 16:02:54,732 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [363616111] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-14 16:02:54,732 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-12-14 16:02:54,732 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [9] total 13 [2022-12-14 16:02:54,733 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [695383388] [2022-12-14 16:02:54,733 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-14 16:02:54,733 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-12-14 16:02:54,733 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:54,733 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-14 16:02:54,734 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=181, Unknown=0, NotChecked=0, Total=210 [2022-12-14 16:02:54,734 INFO L87 Difference]: Start difference. First operand 19 states and 22 transitions. Second operand has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:54,919 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:02:54,919 INFO L93 Difference]: Finished difference Result 22 states and 25 transitions. [2022-12-14 16:02:54,919 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-14 16:02:54,919 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-12-14 16:02:54,919 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:02:54,920 INFO L225 Difference]: With dead ends: 22 [2022-12-14 16:02:54,920 INFO L226 Difference]: Without dead ends: 22 [2022-12-14 16:02:54,920 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=47, Invalid=259, Unknown=0, NotChecked=0, Total=306 [2022-12-14 16:02:54,921 INFO L413 NwaCegarLoop]: 1 mSDtfsCounter, 14 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 5 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-12-14 16:02:54,921 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 5 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-12-14 16:02:54,922 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22 states. [2022-12-14 16:02:54,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22 to 14. [2022-12-14 16:02:54,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14 states, 13 states have (on average 1.1538461538461537) internal successors, (15), 13 states have internal predecessors, (15), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:54,923 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 15 transitions. [2022-12-14 16:02:54,924 INFO L78 Accepts]: Start accepts. Automaton has 14 states and 15 transitions. Word has length 13 [2022-12-14 16:02:54,924 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:02:54,924 INFO L495 AbstractCegarLoop]: Abstraction has 14 states and 15 transitions. [2022-12-14 16:02:54,924 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.4) internal successors, (7), 5 states have internal predecessors, (7), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:02:54,924 INFO L276 IsEmpty]: Start isEmpty. Operand 14 states and 15 transitions. [2022-12-14 16:02:54,924 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2022-12-14 16:02:54,924 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:02:54,925 INFO L195 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2022-12-14 16:02:54,929 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2022-12-14 16:02:55,125 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:55,126 INFO L420 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:02:55,127 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:02:55,127 INFO L85 PathProgramCache]: Analyzing trace with hash 1163792695, now seen corresponding path program 2 times [2022-12-14 16:02:55,128 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:02:55,128 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1199773758] [2022-12-14 16:02:55,128 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:02:55,129 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:02:55,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:02:55,541 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:02:55,541 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:02:55,541 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1199773758] [2022-12-14 16:02:55,541 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1199773758] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:02:55,541 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [435937557] [2022-12-14 16:02:55,541 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:02:55,542 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:02:55,542 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:02:55,543 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:02:55,543 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2022-12-14 16:02:55,594 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2022-12-14 16:02:55,594 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:02:55,595 INFO L263 TraceCheckSpWp]: Trace formula consists of 102 conjuncts, 48 conjunts are in the unsatisfiable core [2022-12-14 16:02:55,596 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:02:55,602 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 16:02:56,215 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 1 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 16:02:56,215 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:02:56,902 INFO L134 CoverageAnalysis]: Checked inductivity of 6 backedges. 1 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 16:02:56,902 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [435937557] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:02:56,902 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1795553131] [2022-12-14 16:02:56,903 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:02:56,903 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:02:56,903 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:02:56,904 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:02:56,904 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:02:56,930 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:02:56,958 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:56,993 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:57,011 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:02:57,263 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:02:58,458 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '759#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:02:58,458 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:02:58,458 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:02:58,458 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 30 [2022-12-14 16:02:58,458 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1947048620] [2022-12-14 16:02:58,459 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:02:58,459 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2022-12-14 16:02:58,459 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:02:58,459 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2022-12-14 16:02:58,460 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=179, Invalid=1381, Unknown=0, NotChecked=0, Total=1560 [2022-12-14 16:02:58,460 INFO L87 Difference]: Start difference. First operand 14 states and 15 transitions. Second operand has 32 states, 31 states have (on average 1.2580645161290323) internal successors, (39), 31 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:01,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:01,094 INFO L93 Difference]: Finished difference Result 41 states and 43 transitions. [2022-12-14 16:03:01,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-12-14 16:03:01,095 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 31 states have (on average 1.2580645161290323) internal successors, (39), 31 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2022-12-14 16:03:01,095 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:01,095 INFO L225 Difference]: With dead ends: 41 [2022-12-14 16:03:01,095 INFO L226 Difference]: Without dead ends: 41 [2022-12-14 16:03:01,098 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 842 ImplicationChecksByTransitivity, 4.5s TimeCoverageRelationStatistics Valid=561, Invalid=3729, Unknown=0, NotChecked=0, Total=4290 [2022-12-14 16:03:01,098 INFO L413 NwaCegarLoop]: 0 mSDtfsCounter, 170 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 302 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 170 SdHoareTripleChecker+Valid, 2 SdHoareTripleChecker+Invalid, 318 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 302 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:01,098 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [170 Valid, 2 Invalid, 318 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 302 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 16:03:01,099 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41 states. [2022-12-14 16:03:01,101 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41 to 22. [2022-12-14 16:03:01,101 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22 states, 21 states have (on average 1.0952380952380953) internal successors, (23), 21 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:01,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22 states to 22 states and 23 transitions. [2022-12-14 16:03:01,101 INFO L78 Accepts]: Start accepts. Automaton has 22 states and 23 transitions. Word has length 13 [2022-12-14 16:03:01,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:01,101 INFO L495 AbstractCegarLoop]: Abstraction has 22 states and 23 transitions. [2022-12-14 16:03:01,102 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 31 states have (on average 1.2580645161290323) internal successors, (39), 31 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:01,102 INFO L276 IsEmpty]: Start isEmpty. Operand 22 states and 23 transitions. [2022-12-14 16:03:01,102 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2022-12-14 16:03:01,102 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:01,102 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 2, 2, 1, 1, 1, 1] [2022-12-14 16:03:01,107 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2022-12-14 16:03:01,303 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:01,304 INFO L420 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:03:01,305 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:01,305 INFO L85 PathProgramCache]: Analyzing trace with hash 542675095, now seen corresponding path program 3 times [2022-12-14 16:03:01,306 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:01,306 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1077621525] [2022-12-14 16:03:01,306 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:01,307 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:01,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:01,441 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 12 proven. 8 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-12-14 16:03:01,441 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:01,441 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1077621525] [2022-12-14 16:03:01,441 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1077621525] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:01,441 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1322880409] [2022-12-14 16:03:01,442 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:03:01,442 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:01,442 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:01,443 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:01,443 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2022-12-14 16:03:01,496 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:03:01,497 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:03:01,498 INFO L263 TraceCheckSpWp]: Trace formula consists of 155 conjuncts, 50 conjunts are in the unsatisfiable core [2022-12-14 16:03:01,499 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:01,507 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 16:03:01,934 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 10 proven. 12 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:01,934 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:03:02,479 INFO L134 CoverageAnalysis]: Checked inductivity of 22 backedges. 0 proven. 22 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:02,479 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1322880409] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:03:02,479 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [505928702] [2022-12-14 16:03:02,481 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:03:02,481 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:03:02,481 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:03:02,481 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:03:02,481 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:03:02,497 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:03:02,521 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:02,552 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:02,575 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:02,733 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:03,795 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1031#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:03,795 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:03,795 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:03,795 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 10, 11] total 28 [2022-12-14 16:03:03,795 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1045579556] [2022-12-14 16:03:03,795 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:03,796 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2022-12-14 16:03:03,796 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:03,796 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2022-12-14 16:03:03,797 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=124, Invalid=1208, Unknown=0, NotChecked=0, Total=1332 [2022-12-14 16:03:03,797 INFO L87 Difference]: Start difference. First operand 22 states and 23 transitions. Second operand has 29 states, 29 states have (on average 2.0) internal successors, (58), 28 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:06,273 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:06,274 INFO L93 Difference]: Finished difference Result 57 states and 60 transitions. [2022-12-14 16:03:06,274 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2022-12-14 16:03:06,274 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 2.0) internal successors, (58), 28 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 21 [2022-12-14 16:03:06,274 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:06,275 INFO L225 Difference]: With dead ends: 57 [2022-12-14 16:03:06,275 INFO L226 Difference]: Without dead ends: 48 [2022-12-14 16:03:06,276 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 793 ImplicationChecksByTransitivity, 3.9s TimeCoverageRelationStatistics Valid=431, Invalid=3109, Unknown=0, NotChecked=0, Total=3540 [2022-12-14 16:03:06,277 INFO L413 NwaCegarLoop]: 2 mSDtfsCounter, 96 mSDsluCounter, 48 mSDsCounter, 0 mSdLazyCounter, 339 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 96 SdHoareTripleChecker+Valid, 50 SdHoareTripleChecker+Invalid, 354 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 339 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:06,277 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [96 Valid, 50 Invalid, 354 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 339 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 16:03:06,278 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2022-12-14 16:03:06,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 33. [2022-12-14 16:03:06,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 32 states have (on average 1.125) internal successors, (36), 32 states have internal predecessors, (36), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:06,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 36 transitions. [2022-12-14 16:03:06,281 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 36 transitions. Word has length 21 [2022-12-14 16:03:06,281 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:06,281 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 36 transitions. [2022-12-14 16:03:06,281 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 2.0) internal successors, (58), 28 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:06,282 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 36 transitions. [2022-12-14 16:03:06,282 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2022-12-14 16:03:06,282 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:06,282 INFO L195 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 1, 1, 1, 1] [2022-12-14 16:03:06,286 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2022-12-14 16:03:06,483 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2022-12-14 16:03:06,484 INFO L420 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:03:06,485 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:06,485 INFO L85 PathProgramCache]: Analyzing trace with hash 1566471782, now seen corresponding path program 4 times [2022-12-14 16:03:06,485 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:06,485 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [61533347] [2022-12-14 16:03:06,486 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:06,486 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:06,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:06,636 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:06,636 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:06,636 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [61533347] [2022-12-14 16:03:06,636 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [61533347] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:06,637 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2126105952] [2022-12-14 16:03:06,637 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:03:06,637 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:06,637 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:06,638 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:06,638 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2022-12-14 16:03:06,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:06,701 INFO L263 TraceCheckSpWp]: Trace formula consists of 168 conjuncts, 21 conjunts are in the unsatisfiable core [2022-12-14 16:03:06,702 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:06,776 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:06,776 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:03:06,937 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 6 proven. 21 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:06,937 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2126105952] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:03:06,937 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [42495247] [2022-12-14 16:03:06,939 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:03:06,939 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:03:06,939 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:03:06,939 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:03:06,939 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:03:06,965 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:03:06,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:07,016 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:07,039 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:07,223 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:08,159 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1330#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:08,159 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:08,159 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:08,159 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 22 [2022-12-14 16:03:08,160 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2049268647] [2022-12-14 16:03:08,160 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:08,160 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2022-12-14 16:03:08,160 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:08,161 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2022-12-14 16:03:08,161 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=94, Invalid=836, Unknown=0, NotChecked=0, Total=930 [2022-12-14 16:03:08,162 INFO L87 Difference]: Start difference. First operand 33 states and 36 transitions. Second operand has 23 states, 23 states have (on average 2.130434782608696) internal successors, (49), 22 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:08,340 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:08,340 INFO L93 Difference]: Finished difference Result 46 states and 48 transitions. [2022-12-14 16:03:08,341 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-14 16:03:08,341 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 2.130434782608696) internal successors, (49), 22 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2022-12-14 16:03:08,341 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:08,341 INFO L225 Difference]: With dead ends: 46 [2022-12-14 16:03:08,341 INFO L226 Difference]: Without dead ends: 33 [2022-12-14 16:03:08,342 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 83 GetRequests, 47 SyntacticMatches, 1 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 274 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=137, Invalid=1195, Unknown=0, NotChecked=0, Total=1332 [2022-12-14 16:03:08,342 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 27 mSDsluCounter, 119 mSDsCounter, 0 mSdLazyCounter, 186 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 27 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 190 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 186 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:08,342 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [27 Valid, 128 Invalid, 190 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 186 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-12-14 16:03:08,342 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2022-12-14 16:03:08,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 33. [2022-12-14 16:03:08,344 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 32 states have (on average 1.09375) internal successors, (35), 32 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:08,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 35 transitions. [2022-12-14 16:03:08,344 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 35 transitions. Word has length 23 [2022-12-14 16:03:08,345 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:08,345 INFO L495 AbstractCegarLoop]: Abstraction has 33 states and 35 transitions. [2022-12-14 16:03:08,345 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 2.130434782608696) internal successors, (49), 22 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:08,345 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 35 transitions. [2022-12-14 16:03:08,345 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-12-14 16:03:08,345 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:08,346 INFO L195 NwaCegarLoop]: trace histogram [5, 5, 4, 3, 3, 3, 1, 1, 1, 1] [2022-12-14 16:03:08,351 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2022-12-14 16:03:08,546 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2022-12-14 16:03:08,547 INFO L420 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:03:08,548 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:08,548 INFO L85 PathProgramCache]: Analyzing trace with hash 1232243396, now seen corresponding path program 5 times [2022-12-14 16:03:08,548 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:08,549 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [774949167] [2022-12-14 16:03:08,549 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:08,549 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:08,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:09,090 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 0 proven. 43 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:09,091 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:09,091 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [774949167] [2022-12-14 16:03:09,091 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [774949167] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:09,091 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [94260893] [2022-12-14 16:03:09,091 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:03:09,091 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:09,091 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:09,092 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:09,093 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2022-12-14 16:03:09,332 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2022-12-14 16:03:09,333 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:03:09,334 INFO L263 TraceCheckSpWp]: Trace formula consists of 168 conjuncts, 67 conjunts are in the unsatisfiable core [2022-12-14 16:03:09,336 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:09,341 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:03:10,402 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 6 proven. 31 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-12-14 16:03:10,402 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:03:11,904 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 10 proven. 27 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2022-12-14 16:03:11,904 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [94260893] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:03:11,904 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [775083201] [2022-12-14 16:03:11,906 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:03:11,906 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:03:11,906 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:03:11,906 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:03:11,906 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:03:11,926 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:03:11,942 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:11,977 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:11,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:12,157 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:13,460 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '1637#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:13,460 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:13,460 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:13,460 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 17, 17] total 50 [2022-12-14 16:03:13,460 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [461425609] [2022-12-14 16:03:13,460 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:13,461 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 52 states [2022-12-14 16:03:13,461 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:13,462 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 52 interpolants. [2022-12-14 16:03:13,463 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=319, Invalid=3221, Unknown=0, NotChecked=0, Total=3540 [2022-12-14 16:03:13,464 INFO L87 Difference]: Start difference. First operand 33 states and 35 transitions. Second operand has 52 states, 51 states have (on average 1.4705882352941178) internal successors, (75), 51 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:22,123 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:22,123 INFO L93 Difference]: Finished difference Result 111 states and 114 transitions. [2022-12-14 16:03:22,123 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 76 states. [2022-12-14 16:03:22,124 INFO L78 Accepts]: Start accepts. Automaton has has 52 states, 51 states have (on average 1.4705882352941178) internal successors, (75), 51 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-12-14 16:03:22,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:22,124 INFO L225 Difference]: With dead ends: 111 [2022-12-14 16:03:22,124 INFO L226 Difference]: Without dead ends: 111 [2022-12-14 16:03:22,126 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 37 SyntacticMatches, 0 SemanticMatches, 129 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3759 ImplicationChecksByTransitivity, 11.1s TimeCoverageRelationStatistics Valid=1809, Invalid=15221, Unknown=0, NotChecked=0, Total=17030 [2022-12-14 16:03:22,127 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 245 mSDsluCounter, 68 mSDsCounter, 0 mSdLazyCounter, 1045 mSolverCounterSat, 45 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 245 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 1090 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 45 IncrementalHoareTripleChecker+Valid, 1045 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:22,127 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [245 Valid, 71 Invalid, 1090 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [45 Valid, 1045 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2022-12-14 16:03:22,127 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 111 states. [2022-12-14 16:03:22,128 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 111 to 42. [2022-12-14 16:03:22,129 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42 states, 41 states have (on average 1.048780487804878) internal successors, (43), 41 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:22,129 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42 states to 42 states and 43 transitions. [2022-12-14 16:03:22,129 INFO L78 Accepts]: Start accepts. Automaton has 42 states and 43 transitions. Word has length 27 [2022-12-14 16:03:22,129 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:22,129 INFO L495 AbstractCegarLoop]: Abstraction has 42 states and 43 transitions. [2022-12-14 16:03:22,129 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 52 states, 51 states have (on average 1.4705882352941178) internal successors, (75), 51 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:22,129 INFO L276 IsEmpty]: Start isEmpty. Operand 42 states and 43 transitions. [2022-12-14 16:03:22,129 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-12-14 16:03:22,130 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:22,130 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 4, 4, 1, 1, 1, 1] [2022-12-14 16:03:22,134 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2022-12-14 16:03:22,330 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:22,331 INFO L420 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:03:22,332 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:22,332 INFO L85 PathProgramCache]: Analyzing trace with hash 1976534837, now seen corresponding path program 6 times [2022-12-14 16:03:22,333 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:22,333 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1395591086] [2022-12-14 16:03:22,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:22,333 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:22,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:22,558 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 56 proven. 40 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-12-14 16:03:22,559 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:22,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1395591086] [2022-12-14 16:03:22,559 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1395591086] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:22,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1010432544] [2022-12-14 16:03:22,559 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:03:22,559 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:22,559 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:22,560 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:22,561 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2022-12-14 16:03:22,649 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:03:22,650 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:03:22,652 INFO L263 TraceCheckSpWp]: Trace formula consists of 261 conjuncts, 72 conjunts are in the unsatisfiable core [2022-12-14 16:03:22,653 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:22,659 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 16:03:23,360 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 44 proven. 66 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2022-12-14 16:03:23,361 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:03:24,506 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 0 proven. 114 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:24,506 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1010432544] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:03:24,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [134162761] [2022-12-14 16:03:24,508 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:03:24,508 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:03:24,508 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:03:24,508 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:03:24,508 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:03:24,518 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:03:24,550 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:24,579 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:24,598 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:24,749 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:25,929 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2225#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:25,929 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:25,930 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:25,930 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 15, 18] total 44 [2022-12-14 16:03:25,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [259098484] [2022-12-14 16:03:25,930 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:25,930 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2022-12-14 16:03:25,930 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:25,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2022-12-14 16:03:25,932 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=223, Invalid=2533, Unknown=0, NotChecked=0, Total=2756 [2022-12-14 16:03:25,932 INFO L87 Difference]: Start difference. First operand 42 states and 43 transitions. Second operand has 45 states, 45 states have (on average 2.3555555555555556) internal successors, (106), 44 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:31,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:31,759 INFO L93 Difference]: Finished difference Result 105 states and 110 transitions. [2022-12-14 16:03:31,759 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2022-12-14 16:03:31,759 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 45 states have (on average 2.3555555555555556) internal successors, (106), 44 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 41 [2022-12-14 16:03:31,760 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:31,760 INFO L225 Difference]: With dead ends: 105 [2022-12-14 16:03:31,760 INFO L226 Difference]: Without dead ends: 88 [2022-12-14 16:03:31,764 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1747 ImplicationChecksByTransitivity, 7.7s TimeCoverageRelationStatistics Valid=983, Invalid=7389, Unknown=0, NotChecked=0, Total=8372 [2022-12-14 16:03:31,764 INFO L413 NwaCegarLoop]: 3 mSDtfsCounter, 130 mSDsluCounter, 116 mSDsCounter, 0 mSdLazyCounter, 870 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 130 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 898 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 870 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:31,764 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [130 Valid, 119 Invalid, 898 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 870 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-12-14 16:03:31,764 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2022-12-14 16:03:31,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 57. [2022-12-14 16:03:31,766 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 56 states have (on average 1.1071428571428572) internal successors, (62), 56 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:31,766 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 62 transitions. [2022-12-14 16:03:31,766 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 62 transitions. Word has length 41 [2022-12-14 16:03:31,766 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:31,766 INFO L495 AbstractCegarLoop]: Abstraction has 57 states and 62 transitions. [2022-12-14 16:03:31,767 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 45 states have (on average 2.3555555555555556) internal successors, (106), 44 states have internal predecessors, (106), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:31,767 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 62 transitions. [2022-12-14 16:03:31,767 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-12-14 16:03:31,767 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:31,767 INFO L195 NwaCegarLoop]: trace histogram [8, 7, 7, 7, 7, 7, 1, 1, 1, 1] [2022-12-14 16:03:31,772 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2022-12-14 16:03:31,968 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:31,969 INFO L420 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:03:31,969 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:31,970 INFO L85 PathProgramCache]: Analyzing trace with hash -1358190366, now seen corresponding path program 7 times [2022-12-14 16:03:31,970 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:31,970 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [584715186] [2022-12-14 16:03:31,971 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:31,971 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:32,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:32,293 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 14 proven. 133 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:32,294 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:32,294 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [584715186] [2022-12-14 16:03:32,294 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [584715186] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:32,294 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1753116467] [2022-12-14 16:03:32,294 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:03:32,294 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:32,294 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:32,295 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:32,296 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2022-12-14 16:03:32,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:32,382 INFO L263 TraceCheckSpWp]: Trace formula consists of 300 conjuncts, 36 conjunts are in the unsatisfiable core [2022-12-14 16:03:32,383 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:32,510 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 14 proven. 133 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:32,510 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:03:32,878 INFO L134 CoverageAnalysis]: Checked inductivity of 147 backedges. 14 proven. 133 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:32,878 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1753116467] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:03:32,878 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1088484191] [2022-12-14 16:03:32,879 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:03:32,879 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:03:32,879 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:03:32,879 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:03:32,879 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:03:32,898 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:03:32,923 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:03:32,957 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:32,982 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:33,178 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:34,378 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '2787#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:34,379 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:34,379 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:34,379 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 18, 18] total 37 [2022-12-14 16:03:34,379 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [279040117] [2022-12-14 16:03:34,379 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:34,379 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2022-12-14 16:03:34,379 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:34,380 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2022-12-14 16:03:34,380 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=130, Invalid=1940, Unknown=0, NotChecked=0, Total=2070 [2022-12-14 16:03:34,380 INFO L87 Difference]: Start difference. First operand 57 states and 62 transitions. Second operand has 38 states, 38 states have (on average 2.526315789473684) internal successors, (96), 37 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:35,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:35,072 INFO L93 Difference]: Finished difference Result 158 states and 162 transitions. [2022-12-14 16:03:35,072 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2022-12-14 16:03:35,072 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 2.526315789473684) internal successors, (96), 37 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-12-14 16:03:35,072 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:35,072 INFO L225 Difference]: With dead ends: 158 [2022-12-14 16:03:35,072 INFO L226 Difference]: Without dead ends: 129 [2022-12-14 16:03:35,073 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 112 SyntacticMatches, 1 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 587 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=217, Invalid=3323, Unknown=0, NotChecked=0, Total=3540 [2022-12-14 16:03:35,073 INFO L413 NwaCegarLoop]: 30 mSDtfsCounter, 88 mSDsluCounter, 655 mSDsCounter, 0 mSdLazyCounter, 739 mSolverCounterSat, 8 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 88 SdHoareTripleChecker+Valid, 685 SdHoareTripleChecker+Invalid, 747 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 8 IncrementalHoareTripleChecker+Valid, 739 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:35,073 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [88 Valid, 685 Invalid, 747 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [8 Valid, 739 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-12-14 16:03:35,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 129 states. [2022-12-14 16:03:35,075 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 129 to 57. [2022-12-14 16:03:35,075 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 56 states have (on average 1.0892857142857142) internal successors, (61), 56 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:35,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 61 transitions. [2022-12-14 16:03:35,075 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 61 transitions. Word has length 47 [2022-12-14 16:03:35,075 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:35,076 INFO L495 AbstractCegarLoop]: Abstraction has 57 states and 61 transitions. [2022-12-14 16:03:35,076 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 2.526315789473684) internal successors, (96), 37 states have internal predecessors, (96), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:35,076 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 61 transitions. [2022-12-14 16:03:35,076 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 48 [2022-12-14 16:03:35,076 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:35,076 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 5, 5, 1, 1, 1, 1] [2022-12-14 16:03:35,082 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2022-12-14 16:03:35,277 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2022-12-14 16:03:35,277 INFO L420 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:03:35,278 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:35,278 INFO L85 PathProgramCache]: Analyzing trace with hash 1033465012, now seen corresponding path program 8 times [2022-12-14 16:03:35,279 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:35,279 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [982577678] [2022-12-14 16:03:35,279 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:35,279 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:35,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:35,545 INFO L134 CoverageAnalysis]: Checked inductivity of 153 backedges. 70 proven. 65 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2022-12-14 16:03:35,545 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:35,545 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [982577678] [2022-12-14 16:03:35,546 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [982577678] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:35,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [582979372] [2022-12-14 16:03:35,546 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:03:35,546 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:35,546 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:35,547 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:35,548 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2022-12-14 16:03:36,008 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2022-12-14 16:03:36,008 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:03:36,011 INFO L263 TraceCheckSpWp]: Trace formula consists of 294 conjuncts, 33 conjunts are in the unsatisfiable core [2022-12-14 16:03:36,013 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:36,299 INFO L134 CoverageAnalysis]: Checked inductivity of 153 backedges. 121 proven. 32 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:36,299 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:03:36,854 INFO L134 CoverageAnalysis]: Checked inductivity of 153 backedges. 121 proven. 32 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:36,854 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [582979372] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:03:36,854 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1189944384] [2022-12-14 16:03:36,856 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:03:36,856 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:03:36,856 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:03:36,856 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:03:36,856 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:03:36,876 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:03:36,895 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:36,927 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:36,947 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:37,148 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:38,331 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3357#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:38,331 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:38,331 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:38,331 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 18, 18] total 42 [2022-12-14 16:03:38,332 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [259008756] [2022-12-14 16:03:38,332 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:38,332 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 43 states [2022-12-14 16:03:38,332 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:38,333 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 43 interpolants. [2022-12-14 16:03:38,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=222, Invalid=2328, Unknown=0, NotChecked=0, Total=2550 [2022-12-14 16:03:38,334 INFO L87 Difference]: Start difference. First operand 57 states and 61 transitions. Second operand has 43 states, 43 states have (on average 2.4186046511627906) internal successors, (104), 42 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:39,364 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:39,364 INFO L93 Difference]: Finished difference Result 109 states and 111 transitions. [2022-12-14 16:03:39,364 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2022-12-14 16:03:39,364 INFO L78 Accepts]: Start accepts. Automaton has has 43 states, 43 states have (on average 2.4186046511627906) internal successors, (104), 42 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 47 [2022-12-14 16:03:39,365 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:39,365 INFO L225 Difference]: With dead ends: 109 [2022-12-14 16:03:39,365 INFO L226 Difference]: Without dead ends: 57 [2022-12-14 16:03:39,366 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 178 GetRequests, 98 SyntacticMatches, 6 SemanticMatches, 74 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1313 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=735, Invalid=4965, Unknown=0, NotChecked=0, Total=5700 [2022-12-14 16:03:39,366 INFO L413 NwaCegarLoop]: 11 mSDtfsCounter, 117 mSDsluCounter, 258 mSDsCounter, 0 mSdLazyCounter, 625 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 117 SdHoareTripleChecker+Valid, 269 SdHoareTripleChecker+Invalid, 641 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 625 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:39,366 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [117 Valid, 269 Invalid, 641 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 625 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-12-14 16:03:39,366 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2022-12-14 16:03:39,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 57. [2022-12-14 16:03:39,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57 states, 56 states have (on average 1.0535714285714286) internal successors, (59), 56 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:39,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 59 transitions. [2022-12-14 16:03:39,368 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 59 transitions. Word has length 47 [2022-12-14 16:03:39,368 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:39,368 INFO L495 AbstractCegarLoop]: Abstraction has 57 states and 59 transitions. [2022-12-14 16:03:39,368 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 43 states, 43 states have (on average 2.4186046511627906) internal successors, (104), 42 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:39,368 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 59 transitions. [2022-12-14 16:03:39,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-12-14 16:03:39,369 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:39,369 INFO L195 NwaCegarLoop]: trace histogram [9, 9, 8, 7, 7, 7, 1, 1, 1, 1] [2022-12-14 16:03:39,374 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2022-12-14 16:03:39,569 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2022-12-14 16:03:39,570 INFO L420 AbstractCegarLoop]: === Iteration 16 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:03:39,571 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:39,571 INFO L85 PathProgramCache]: Analyzing trace with hash -287308992, now seen corresponding path program 9 times [2022-12-14 16:03:39,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:39,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [631897399] [2022-12-14 16:03:39,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:39,573 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:39,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:40,651 INFO L134 CoverageAnalysis]: Checked inductivity of 179 backedges. 0 proven. 179 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:40,652 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:40,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [631897399] [2022-12-14 16:03:40,652 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [631897399] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:40,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1574972576] [2022-12-14 16:03:40,652 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:03:40,652 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:40,652 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:40,653 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:40,654 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2022-12-14 16:03:40,744 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:03:40,744 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:03:40,746 INFO L263 TraceCheckSpWp]: Trace formula consists of 326 conjuncts, 78 conjunts are in the unsatisfiable core [2022-12-14 16:03:40,749 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:40,754 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:03:41,849 INFO L134 CoverageAnalysis]: Checked inductivity of 179 backedges. 0 proven. 178 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 16:03:41,849 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:03:43,737 INFO L134 CoverageAnalysis]: Checked inductivity of 179 backedges. 80 proven. 98 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-12-14 16:03:43,737 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1574972576] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:03:43,738 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1063652456] [2022-12-14 16:03:43,738 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:03:43,739 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:03:43,739 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:03:43,739 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:03:43,739 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:03:43,755 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:03:43,773 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:43,796 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:43,810 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:43,962 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:45,409 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '3940#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:45,409 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:45,409 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:45,410 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 20, 20] total 57 [2022-12-14 16:03:45,410 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [644688529] [2022-12-14 16:03:45,410 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:45,410 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2022-12-14 16:03:45,410 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:45,411 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2022-12-14 16:03:45,412 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=314, Invalid=4108, Unknown=0, NotChecked=0, Total=4422 [2022-12-14 16:03:45,412 INFO L87 Difference]: Start difference. First operand 57 states and 59 transitions. Second operand has 59 states, 58 states have (on average 2.413793103448276) internal successors, (140), 58 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:52,144 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:52,145 INFO L93 Difference]: Finished difference Result 137 states and 140 transitions. [2022-12-14 16:03:52,145 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 72 states. [2022-12-14 16:03:52,145 INFO L78 Accepts]: Start accepts. Automaton has has 59 states, 58 states have (on average 2.413793103448276) internal successors, (140), 58 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 51 [2022-12-14 16:03:52,145 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:52,146 INFO L225 Difference]: With dead ends: 137 [2022-12-14 16:03:52,146 INFO L226 Difference]: Without dead ends: 137 [2022-12-14 16:03:52,148 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 236 GetRequests, 109 SyntacticMatches, 1 SemanticMatches, 126 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2709 ImplicationChecksByTransitivity, 9.5s TimeCoverageRelationStatistics Valid=1685, Invalid=14571, Unknown=0, NotChecked=0, Total=16256 [2022-12-14 16:03:52,149 INFO L413 NwaCegarLoop]: 14 mSDtfsCounter, 578 mSDsluCounter, 426 mSDsCounter, 0 mSdLazyCounter, 2230 mSolverCounterSat, 32 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 578 SdHoareTripleChecker+Valid, 440 SdHoareTripleChecker+Invalid, 2262 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 32 IncrementalHoareTripleChecker+Valid, 2230 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:52,149 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [578 Valid, 440 Invalid, 2262 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [32 Valid, 2230 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2022-12-14 16:03:52,150 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2022-12-14 16:03:52,152 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 63. [2022-12-14 16:03:52,152 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 62 states have (on average 1.064516129032258) internal successors, (66), 62 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:52,152 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 66 transitions. [2022-12-14 16:03:52,152 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 66 transitions. Word has length 51 [2022-12-14 16:03:52,152 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:52,152 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 66 transitions. [2022-12-14 16:03:52,153 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 59 states, 58 states have (on average 2.413793103448276) internal successors, (140), 58 states have internal predecessors, (140), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:52,153 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 66 transitions. [2022-12-14 16:03:52,153 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-12-14 16:03:52,153 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:52,153 INFO L195 NwaCegarLoop]: trace histogram [9, 8, 8, 8, 8, 8, 1, 1, 1, 1] [2022-12-14 16:03:52,158 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2022-12-14 16:03:52,354 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15,13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:52,355 INFO L420 AbstractCegarLoop]: === Iteration 17 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:03:52,355 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:52,356 INFO L85 PathProgramCache]: Analyzing trace with hash 118413473, now seen corresponding path program 10 times [2022-12-14 16:03:52,356 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:52,356 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [879967704] [2022-12-14 16:03:52,357 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:52,357 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:52,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:52,776 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 16 proven. 176 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:52,776 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:52,776 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [879967704] [2022-12-14 16:03:52,776 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [879967704] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:52,776 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1900281622] [2022-12-14 16:03:52,776 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:03:52,776 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:52,776 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:52,777 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:52,778 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2022-12-14 16:03:52,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:52,899 INFO L263 TraceCheckSpWp]: Trace formula consists of 333 conjuncts, 40 conjunts are in the unsatisfiable core [2022-12-14 16:03:52,900 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:53,018 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 16 proven. 176 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:53,018 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:03:53,586 INFO L134 CoverageAnalysis]: Checked inductivity of 192 backedges. 16 proven. 176 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:53,586 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1900281622] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:03:53,586 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2010434667] [2022-12-14 16:03:53,588 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:03:53,588 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:03:53,588 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:03:53,588 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:03:53,588 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:03:53,597 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:03:53,623 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:53,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:53,672 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:03:53,836 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:03:55,138 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '4624#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:03:55,139 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:03:55,139 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:03:55,139 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 20] total 41 [2022-12-14 16:03:55,139 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1100727540] [2022-12-14 16:03:55,139 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:03:55,139 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2022-12-14 16:03:55,140 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:03:55,140 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2022-12-14 16:03:55,140 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=140, Invalid=2310, Unknown=0, NotChecked=0, Total=2450 [2022-12-14 16:03:55,140 INFO L87 Difference]: Start difference. First operand 63 states and 66 transitions. Second operand has 42 states, 42 states have (on average 2.5714285714285716) internal successors, (108), 41 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:55,985 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:03:55,986 INFO L93 Difference]: Finished difference Result 96 states and 98 transitions. [2022-12-14 16:03:55,986 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2022-12-14 16:03:55,986 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 2.5714285714285716) internal successors, (108), 41 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 53 [2022-12-14 16:03:55,986 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:03:55,986 INFO L225 Difference]: With dead ends: 96 [2022-12-14 16:03:55,987 INFO L226 Difference]: Without dead ends: 63 [2022-12-14 16:03:55,987 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 193 GetRequests, 128 SyntacticMatches, 1 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 691 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=239, Invalid=4051, Unknown=0, NotChecked=0, Total=4290 [2022-12-14 16:03:55,987 INFO L413 NwaCegarLoop]: 24 mSDtfsCounter, 101 mSDsluCounter, 719 mSDsCounter, 0 mSdLazyCounter, 897 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 101 SdHoareTripleChecker+Valid, 743 SdHoareTripleChecker+Invalid, 906 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 897 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2022-12-14 16:03:55,988 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [101 Valid, 743 Invalid, 906 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 897 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2022-12-14 16:03:55,988 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 63 states. [2022-12-14 16:03:55,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 63 to 63. [2022-12-14 16:03:55,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 62 states have (on average 1.0483870967741935) internal successors, (65), 62 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:55,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 65 transitions. [2022-12-14 16:03:55,991 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 65 transitions. Word has length 53 [2022-12-14 16:03:55,991 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:03:55,991 INFO L495 AbstractCegarLoop]: Abstraction has 63 states and 65 transitions. [2022-12-14 16:03:55,991 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 42 states have (on average 2.5714285714285716) internal successors, (108), 41 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:03:55,991 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 65 transitions. [2022-12-14 16:03:55,992 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2022-12-14 16:03:55,992 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:03:55,992 INFO L195 NwaCegarLoop]: trace histogram [10, 10, 9, 8, 8, 8, 1, 1, 1, 1] [2022-12-14 16:03:55,997 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2022-12-14 16:03:56,193 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2022-12-14 16:03:56,193 INFO L420 AbstractCegarLoop]: === Iteration 18 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:03:56,194 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:03:56,194 INFO L85 PathProgramCache]: Analyzing trace with hash 1967223935, now seen corresponding path program 11 times [2022-12-14 16:03:56,195 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:03:56,195 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [465049341] [2022-12-14 16:03:56,195 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:03:56,195 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:03:56,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:03:57,193 INFO L134 CoverageAnalysis]: Checked inductivity of 228 backedges. 0 proven. 228 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:03:57,193 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:03:57,193 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [465049341] [2022-12-14 16:03:57,193 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [465049341] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:03:57,194 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [720464003] [2022-12-14 16:03:57,194 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:03:57,194 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:03:57,194 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:03:57,195 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:03:57,195 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2022-12-14 16:03:57,630 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2022-12-14 16:03:57,631 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:03:57,634 INFO L263 TraceCheckSpWp]: Trace formula consists of 333 conjuncts, 99 conjunts are in the unsatisfiable core [2022-12-14 16:03:57,637 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:03:57,653 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 16:04:01,167 INFO L134 CoverageAnalysis]: Checked inductivity of 228 backedges. 28 proven. 128 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-12-14 16:04:01,167 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:04:04,826 INFO L134 CoverageAnalysis]: Checked inductivity of 228 backedges. 0 proven. 156 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-12-14 16:04:04,826 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [720464003] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:04:04,826 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [595476683] [2022-12-14 16:04:04,828 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:04:04,828 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:04:04,828 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:04:04,828 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:04:04,828 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:04:04,847 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:04:04,865 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:04,897 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:04,913 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:05,081 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:04:07,011 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '5239#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:04:07,012 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:04:07,012 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:04:07,012 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [26, 26, 26] total 78 [2022-12-14 16:04:07,012 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1220754854] [2022-12-14 16:04:07,012 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:04:07,012 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 80 states [2022-12-14 16:04:07,012 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:04:07,013 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 80 interpolants. [2022-12-14 16:04:07,013 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=600, Invalid=7056, Unknown=0, NotChecked=0, Total=7656 [2022-12-14 16:04:07,013 INFO L87 Difference]: Start difference. First operand 63 states and 65 transitions. Second operand has 80 states, 79 states have (on average 1.7848101265822784) internal successors, (141), 79 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:04:50,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:04:50,477 INFO L93 Difference]: Finished difference Result 241 states and 244 transitions. [2022-12-14 16:04:50,477 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 174 states. [2022-12-14 16:04:50,478 INFO L78 Accepts]: Start accepts. Automaton has has 80 states, 79 states have (on average 1.7848101265822784) internal successors, (141), 79 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 57 [2022-12-14 16:04:50,478 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:04:50,478 INFO L225 Difference]: With dead ends: 241 [2022-12-14 16:04:50,478 INFO L226 Difference]: Without dead ends: 241 [2022-12-14 16:04:50,482 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 366 GetRequests, 109 SyntacticMatches, 0 SemanticMatches, 257 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16954 ImplicationChecksByTransitivity, 47.4s TimeCoverageRelationStatistics Valid=5980, Invalid=60842, Unknown=0, NotChecked=0, Total=66822 [2022-12-14 16:04:50,483 INFO L413 NwaCegarLoop]: 8 mSDtfsCounter, 1139 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 3565 mSolverCounterSat, 70 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1139 SdHoareTripleChecker+Valid, 312 SdHoareTripleChecker+Invalid, 3635 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 70 IncrementalHoareTripleChecker+Valid, 3565 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.8s IncrementalHoareTripleChecker+Time [2022-12-14 16:04:50,483 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1139 Valid, 312 Invalid, 3635 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [70 Valid, 3565 Invalid, 0 Unknown, 0 Unchecked, 3.8s Time] [2022-12-14 16:04:50,483 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 241 states. [2022-12-14 16:04:50,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 241 to 92. [2022-12-14 16:04:50,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 91 states have (on average 1.021978021978022) internal successors, (93), 91 states have internal predecessors, (93), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:04:50,485 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 93 transitions. [2022-12-14 16:04:50,485 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 93 transitions. Word has length 57 [2022-12-14 16:04:50,485 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:04:50,485 INFO L495 AbstractCegarLoop]: Abstraction has 92 states and 93 transitions. [2022-12-14 16:04:50,485 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 80 states, 79 states have (on average 1.7848101265822784) internal successors, (141), 79 states have internal predecessors, (141), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:04:50,485 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 93 transitions. [2022-12-14 16:04:50,486 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 92 [2022-12-14 16:04:50,486 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:04:50,486 INFO L195 NwaCegarLoop]: trace histogram [18, 17, 17, 17, 9, 9, 1, 1, 1, 1] [2022-12-14 16:04:50,491 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2022-12-14 16:04:50,687 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2022-12-14 16:04:50,688 INFO L420 AbstractCegarLoop]: === Iteration 19 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:04:50,689 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:04:50,689 INFO L85 PathProgramCache]: Analyzing trace with hash 135676704, now seen corresponding path program 12 times [2022-12-14 16:04:50,689 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:04:50,689 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [269924031] [2022-12-14 16:04:50,690 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:04:50,690 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:04:50,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:04:51,202 INFO L134 CoverageAnalysis]: Checked inductivity of 659 backedges. 306 proven. 225 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2022-12-14 16:04:51,203 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:04:51,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [269924031] [2022-12-14 16:04:51,203 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [269924031] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:04:51,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1754324480] [2022-12-14 16:04:51,203 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:04:51,203 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:04:51,203 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:04:51,204 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:04:51,205 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2022-12-14 16:04:51,371 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:04:51,371 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:04:51,374 INFO L263 TraceCheckSpWp]: Trace formula consists of 526 conjuncts, 63 conjunts are in the unsatisfiable core [2022-12-14 16:04:51,376 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:04:51,382 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 16:04:51,708 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 16:04:52,081 INFO L134 CoverageAnalysis]: Checked inductivity of 659 backedges. 531 proven. 128 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:04:52,081 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:04:52,987 INFO L134 CoverageAnalysis]: Checked inductivity of 659 backedges. 546 proven. 113 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:04:52,987 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1754324480] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:04:52,987 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1574404721] [2022-12-14 16:04:52,988 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:04:52,988 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:04:52,988 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:04:52,988 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:04:52,988 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:04:52,997 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:04:53,024 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:53,051 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:53,064 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:04:53,239 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:04:54,589 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '6538#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:04:54,589 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:04:54,589 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:04:54,589 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 32, 32] total 75 [2022-12-14 16:04:54,589 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [526063698] [2022-12-14 16:04:54,589 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:04:54,590 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 76 states [2022-12-14 16:04:54,590 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:04:54,590 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 76 interpolants. [2022-12-14 16:04:54,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=585, Invalid=6387, Unknown=0, NotChecked=0, Total=6972 [2022-12-14 16:04:54,591 INFO L87 Difference]: Start difference. First operand 92 states and 93 transitions. Second operand has 76 states, 76 states have (on average 2.6578947368421053) internal successors, (202), 75 states have internal predecessors, (202), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:04:58,559 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:04:58,560 INFO L93 Difference]: Finished difference Result 212 states and 219 transitions. [2022-12-14 16:04:58,560 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 62 states. [2022-12-14 16:04:58,560 INFO L78 Accepts]: Start accepts. Automaton has has 76 states, 76 states have (on average 2.6578947368421053) internal successors, (202), 75 states have internal predecessors, (202), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 91 [2022-12-14 16:04:58,560 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:04:58,560 INFO L225 Difference]: With dead ends: 212 [2022-12-14 16:04:58,561 INFO L226 Difference]: Without dead ends: 108 [2022-12-14 16:04:58,561 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 349 GetRequests, 202 SyntacticMatches, 9 SemanticMatches, 138 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4749 ImplicationChecksByTransitivity, 6.2s TimeCoverageRelationStatistics Valid=2713, Invalid=16747, Unknown=0, NotChecked=0, Total=19460 [2022-12-14 16:04:58,562 INFO L413 NwaCegarLoop]: 9 mSDtfsCounter, 271 mSDsluCounter, 347 mSDsCounter, 0 mSdLazyCounter, 1998 mSolverCounterSat, 80 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 271 SdHoareTripleChecker+Valid, 356 SdHoareTripleChecker+Invalid, 2078 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 80 IncrementalHoareTripleChecker+Valid, 1998 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-12-14 16:04:58,562 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [271 Valid, 356 Invalid, 2078 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [80 Valid, 1998 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-12-14 16:04:58,562 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2022-12-14 16:04:58,563 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 108. [2022-12-14 16:04:58,563 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 108 states, 107 states have (on average 1.0186915887850467) internal successors, (109), 107 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:04:58,563 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 108 states to 108 states and 109 transitions. [2022-12-14 16:04:58,563 INFO L78 Accepts]: Start accepts. Automaton has 108 states and 109 transitions. Word has length 91 [2022-12-14 16:04:58,564 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:04:58,564 INFO L495 AbstractCegarLoop]: Abstraction has 108 states and 109 transitions. [2022-12-14 16:04:58,564 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 76 states, 76 states have (on average 2.6578947368421053) internal successors, (202), 75 states have internal predecessors, (202), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:04:58,564 INFO L276 IsEmpty]: Start isEmpty. Operand 108 states and 109 transitions. [2022-12-14 16:04:58,565 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2022-12-14 16:04:58,565 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:04:58,565 INFO L195 NwaCegarLoop]: trace histogram [18, 17, 17, 17, 17, 17, 1, 1, 1, 1] [2022-12-14 16:04:58,570 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2022-12-14 16:04:58,765 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:04:58,767 INFO L420 AbstractCegarLoop]: === Iteration 20 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:04:58,768 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:04:58,768 INFO L85 PathProgramCache]: Analyzing trace with hash -386654568, now seen corresponding path program 13 times [2022-12-14 16:04:58,768 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:04:58,769 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [990313880] [2022-12-14 16:04:58,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:04:58,770 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:04:58,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:04:59,755 INFO L134 CoverageAnalysis]: Checked inductivity of 867 backedges. 34 proven. 833 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:04:59,755 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:04:59,756 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [990313880] [2022-12-14 16:04:59,756 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [990313880] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:04:59,756 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1440645166] [2022-12-14 16:04:59,756 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:04:59,756 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:04:59,756 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:04:59,757 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:04:59,757 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2022-12-14 16:05:00,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:05:00,078 INFO L263 TraceCheckSpWp]: Trace formula consists of 630 conjuncts, 76 conjunts are in the unsatisfiable core [2022-12-14 16:05:00,080 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:05:00,310 INFO L134 CoverageAnalysis]: Checked inductivity of 867 backedges. 34 proven. 833 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:05:00,310 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:05:01,940 INFO L134 CoverageAnalysis]: Checked inductivity of 867 backedges. 34 proven. 833 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:05:01,940 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1440645166] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:05:01,940 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1742265587] [2022-12-14 16:05:01,942 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:05:01,942 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:05:01,942 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:05:01,942 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:05:01,942 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:05:01,956 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:05:01,983 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:05:02,010 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:05:02,028 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:05:02,200 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:05:04,192 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '7691#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:05:04,192 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:05:04,192 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:05:04,192 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [38, 38, 38] total 76 [2022-12-14 16:05:04,192 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1428700022] [2022-12-14 16:05:04,192 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:05:04,193 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 77 states [2022-12-14 16:05:04,193 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:05:04,193 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 77 interpolants. [2022-12-14 16:05:04,194 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=226, Invalid=6914, Unknown=0, NotChecked=0, Total=7140 [2022-12-14 16:05:04,194 INFO L87 Difference]: Start difference. First operand 108 states and 109 transitions. Second operand has 77 states, 77 states have (on average 2.792207792207792) internal successors, (215), 76 states have internal predecessors, (215), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:05:07,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:05:07,210 INFO L93 Difference]: Finished difference Result 180 states and 181 transitions. [2022-12-14 16:05:07,210 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 55 states. [2022-12-14 16:05:07,210 INFO L78 Accepts]: Start accepts. Automaton has has 77 states, 77 states have (on average 2.792207792207792) internal successors, (215), 76 states have internal predecessors, (215), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 107 [2022-12-14 16:05:07,210 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:05:07,211 INFO L225 Difference]: With dead ends: 180 [2022-12-14 16:05:07,211 INFO L226 Difference]: Without dead ends: 111 [2022-12-14 16:05:07,212 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 391 GetRequests, 272 SyntacticMatches, 2 SemanticMatches, 117 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1942 ImplicationChecksByTransitivity, 5.7s TimeCoverageRelationStatistics Valid=432, Invalid=13610, Unknown=0, NotChecked=0, Total=14042 [2022-12-14 16:05:07,212 INFO L413 NwaCegarLoop]: 51 mSDtfsCounter, 139 mSDsluCounter, 2609 mSDsCounter, 0 mSdLazyCounter, 2967 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 139 SdHoareTripleChecker+Valid, 2660 SdHoareTripleChecker+Invalid, 2985 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 2967 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2022-12-14 16:05:07,213 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [139 Valid, 2660 Invalid, 2985 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 2967 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2022-12-14 16:05:07,213 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 111 states. [2022-12-14 16:05:07,214 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 111 to 110. [2022-12-14 16:05:07,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 109 states have (on average 1.018348623853211) internal successors, (111), 109 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:05:07,215 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 111 transitions. [2022-12-14 16:05:07,215 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 111 transitions. Word has length 107 [2022-12-14 16:05:07,215 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:05:07,215 INFO L495 AbstractCegarLoop]: Abstraction has 110 states and 111 transitions. [2022-12-14 16:05:07,216 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 77 states, 77 states have (on average 2.792207792207792) internal successors, (215), 76 states have internal predecessors, (215), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:05:07,216 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 111 transitions. [2022-12-14 16:05:07,216 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2022-12-14 16:05:07,216 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:05:07,217 INFO L195 NwaCegarLoop]: trace histogram [18, 18, 18, 17, 17, 17, 1, 1, 1, 1] [2022-12-14 16:05:07,222 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Ended with exit code 0 [2022-12-14 16:05:07,417 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:05:07,418 INFO L420 AbstractCegarLoop]: === Iteration 21 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:05:07,419 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:05:07,419 INFO L85 PathProgramCache]: Analyzing trace with hash -304138457, now seen corresponding path program 14 times [2022-12-14 16:05:07,420 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:05:07,420 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [284794561] [2022-12-14 16:05:07,420 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:05:07,421 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:05:07,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:05:09,354 INFO L134 CoverageAnalysis]: Checked inductivity of 902 backedges. 0 proven. 902 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:05:09,354 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:05:09,354 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [284794561] [2022-12-14 16:05:09,354 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [284794561] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:05:09,354 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [527594487] [2022-12-14 16:05:09,354 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:05:09,355 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:05:09,355 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:05:09,355 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:05:09,356 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2022-12-14 16:05:12,154 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 18 check-sat command(s) [2022-12-14 16:05:12,154 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:05:12,161 INFO L263 TraceCheckSpWp]: Trace formula consists of 630 conjuncts, 175 conjunts are in the unsatisfiable core [2022-12-14 16:05:12,164 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:05:12,181 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:05:19,007 INFO L134 CoverageAnalysis]: Checked inductivity of 902 backedges. 28 proven. 802 refuted. 0 times theorem prover too weak. 72 trivial. 0 not checked. [2022-12-14 16:05:19,008 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:05:28,736 INFO L134 CoverageAnalysis]: Checked inductivity of 902 backedges. 0 proven. 692 refuted. 0 times theorem prover too weak. 210 trivial. 0 not checked. [2022-12-14 16:05:28,736 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [527594487] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:05:28,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1261262534] [2022-12-14 16:05:28,737 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:05:28,737 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:05:28,737 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:05:28,738 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:05:28,738 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:05:28,748 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:05:28,772 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:05:28,803 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:05:28,827 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:05:28,982 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:05:31,842 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '8850#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:05:31,842 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:05:31,842 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:05:31,842 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [43, 53, 47] total 143 [2022-12-14 16:05:31,842 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [437001651] [2022-12-14 16:05:31,843 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:05:31,843 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 145 states [2022-12-14 16:05:31,843 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:05:31,844 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 145 interpolants. [2022-12-14 16:05:31,844 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1513, Invalid=21743, Unknown=0, NotChecked=0, Total=23256 [2022-12-14 16:05:31,845 INFO L87 Difference]: Start difference. First operand 110 states and 111 transitions. Second operand has 145 states, 144 states have (on average 1.9791666666666667) internal successors, (285), 144 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:07:27,212 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:07:27,212 INFO L93 Difference]: Finished difference Result 329 states and 331 transitions. [2022-12-14 16:07:27,212 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 236 states. [2022-12-14 16:07:27,213 INFO L78 Accepts]: Start accepts. Automaton has has 145 states, 144 states have (on average 1.9791666666666667) internal successors, (285), 144 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 109 [2022-12-14 16:07:27,213 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:07:27,213 INFO L225 Difference]: With dead ends: 329 [2022-12-14 16:07:27,213 INFO L226 Difference]: Without dead ends: 329 [2022-12-14 16:07:27,220 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 599 GetRequests, 217 SyntacticMatches, 0 SemanticMatches, 382 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 34000 ImplicationChecksByTransitivity, 126.7s TimeCoverageRelationStatistics Valid=13311, Invalid=133761, Unknown=0, NotChecked=0, Total=147072 [2022-12-14 16:07:27,220 INFO L413 NwaCegarLoop]: 16 mSDtfsCounter, 1482 mSDsluCounter, 1057 mSDsCounter, 0 mSdLazyCounter, 7348 mSolverCounterSat, 196 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1482 SdHoareTripleChecker+Valid, 1073 SdHoareTripleChecker+Invalid, 7544 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 196 IncrementalHoareTripleChecker+Valid, 7348 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.1s IncrementalHoareTripleChecker+Time [2022-12-14 16:07:27,220 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1482 Valid, 1073 Invalid, 7544 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [196 Valid, 7348 Invalid, 0 Unknown, 0 Unchecked, 6.1s Time] [2022-12-14 16:07:27,221 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 329 states. [2022-12-14 16:07:27,223 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 329 to 182. [2022-12-14 16:07:27,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 182 states, 181 states have (on average 1.011049723756906) internal successors, (183), 181 states have internal predecessors, (183), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:07:27,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 183 transitions. [2022-12-14 16:07:27,223 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 183 transitions. Word has length 109 [2022-12-14 16:07:27,223 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:07:27,223 INFO L495 AbstractCegarLoop]: Abstraction has 182 states and 183 transitions. [2022-12-14 16:07:27,224 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 145 states, 144 states have (on average 1.9791666666666667) internal successors, (285), 144 states have internal predecessors, (285), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:07:27,224 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 183 transitions. [2022-12-14 16:07:27,225 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 182 [2022-12-14 16:07:27,225 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:07:27,225 INFO L195 NwaCegarLoop]: trace histogram [36, 35, 35, 35, 18, 18, 1, 1, 1, 1] [2022-12-14 16:07:27,232 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2022-12-14 16:07:27,425 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2022-12-14 16:07:27,427 INFO L420 AbstractCegarLoop]: === Iteration 22 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:07:27,427 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:07:27,427 INFO L85 PathProgramCache]: Analyzing trace with hash 2029502855, now seen corresponding path program 15 times [2022-12-14 16:07:27,428 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:07:27,428 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1961022377] [2022-12-14 16:07:27,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:07:27,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:07:27,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:07:28,890 INFO L134 CoverageAnalysis]: Checked inductivity of 2774 backedges. 1260 proven. 936 refuted. 0 times theorem prover too weak. 578 trivial. 0 not checked. [2022-12-14 16:07:28,890 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:07:28,890 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1961022377] [2022-12-14 16:07:28,891 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1961022377] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:07:28,891 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2002190833] [2022-12-14 16:07:28,891 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:07:28,891 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:07:28,891 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:07:28,892 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:07:28,892 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2022-12-14 16:07:32,844 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:07:32,844 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:07:32,850 INFO L263 TraceCheckSpWp]: Trace formula consists of 1003 conjuncts, 129 conjunts are in the unsatisfiable core [2022-12-14 16:07:32,853 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:07:32,859 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 16:07:33,702 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 16:07:34,562 INFO L134 CoverageAnalysis]: Checked inductivity of 2774 backedges. 2073 proven. 389 refuted. 0 times theorem prover too weak. 312 trivial. 0 not checked. [2022-12-14 16:07:34,562 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:07:36,598 INFO L134 CoverageAnalysis]: Checked inductivity of 2774 backedges. 2094 proven. 368 refuted. 0 times theorem prover too weak. 312 trivial. 0 not checked. [2022-12-14 16:07:36,599 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2002190833] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:07:36,599 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [595580471] [2022-12-14 16:07:36,599 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:07:36,600 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:07:36,600 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:07:36,600 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:07:36,600 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:07:36,611 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:07:36,639 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:07:36,669 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:07:36,690 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:07:36,853 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:07:38,905 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '11026#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:07:38,905 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:07:38,905 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:07:38,905 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [40, 47, 47] total 114 [2022-12-14 16:07:38,905 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [778140879] [2022-12-14 16:07:38,905 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:07:38,906 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 115 states [2022-12-14 16:07:38,906 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:07:38,906 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 115 interpolants. [2022-12-14 16:07:38,907 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=905, Invalid=14101, Unknown=0, NotChecked=0, Total=15006 [2022-12-14 16:07:38,907 INFO L87 Difference]: Start difference. First operand 182 states and 183 transitions. Second operand has 115 states, 115 states have (on average 2.643478260869565) internal successors, (304), 114 states have internal predecessors, (304), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:07:52,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:07:52,342 INFO L93 Difference]: Finished difference Result 356 states and 360 transitions. [2022-12-14 16:07:52,342 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 92 states. [2022-12-14 16:07:52,343 INFO L78 Accepts]: Start accepts. Automaton has has 115 states, 115 states have (on average 2.643478260869565) internal successors, (304), 114 states have internal predecessors, (304), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 181 [2022-12-14 16:07:52,343 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:07:52,343 INFO L225 Difference]: With dead ends: 356 [2022-12-14 16:07:52,343 INFO L226 Difference]: Without dead ends: 192 [2022-12-14 16:07:52,346 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 667 GetRequests, 442 SyntacticMatches, 18 SemanticMatches, 207 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10169 ImplicationChecksByTransitivity, 17.5s TimeCoverageRelationStatistics Valid=5070, Invalid=38402, Unknown=0, NotChecked=0, Total=43472 [2022-12-14 16:07:52,346 INFO L413 NwaCegarLoop]: 18 mSDtfsCounter, 579 mSDsluCounter, 974 mSDsCounter, 0 mSdLazyCounter, 5471 mSolverCounterSat, 121 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 579 SdHoareTripleChecker+Valid, 992 SdHoareTripleChecker+Invalid, 5592 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 121 IncrementalHoareTripleChecker+Valid, 5471 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2022-12-14 16:07:52,347 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [579 Valid, 992 Invalid, 5592 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [121 Valid, 5471 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2022-12-14 16:07:52,347 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2022-12-14 16:07:52,350 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 192. [2022-12-14 16:07:52,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 192 states, 191 states have (on average 1.0104712041884816) internal successors, (193), 191 states have internal predecessors, (193), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:07:52,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 192 states to 192 states and 193 transitions. [2022-12-14 16:07:52,351 INFO L78 Accepts]: Start accepts. Automaton has 192 states and 193 transitions. Word has length 181 [2022-12-14 16:07:52,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:07:52,351 INFO L495 AbstractCegarLoop]: Abstraction has 192 states and 193 transitions. [2022-12-14 16:07:52,351 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 115 states, 115 states have (on average 2.643478260869565) internal successors, (304), 114 states have internal predecessors, (304), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:07:52,351 INFO L276 IsEmpty]: Start isEmpty. Operand 192 states and 193 transitions. [2022-12-14 16:07:52,353 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 192 [2022-12-14 16:07:52,353 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:07:52,353 INFO L195 NwaCegarLoop]: trace histogram [36, 35, 35, 35, 23, 23, 1, 1, 1, 1] [2022-12-14 16:07:52,360 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Ended with exit code 0 [2022-12-14 16:07:52,554 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21,19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:07:52,555 INFO L420 AbstractCegarLoop]: === Iteration 23 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:07:52,556 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:07:52,556 INFO L85 PathProgramCache]: Analyzing trace with hash 978048274, now seen corresponding path program 16 times [2022-12-14 16:07:52,557 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:07:52,557 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1687418902] [2022-12-14 16:07:52,557 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:07:52,558 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:07:52,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:07:54,489 INFO L134 CoverageAnalysis]: Checked inductivity of 2979 backedges. 1150 proven. 1541 refuted. 0 times theorem prover too weak. 288 trivial. 0 not checked. [2022-12-14 16:07:54,489 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:07:54,489 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1687418902] [2022-12-14 16:07:54,489 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1687418902] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:07:54,489 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [91479446] [2022-12-14 16:07:54,489 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:07:54,489 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:07:54,489 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:07:54,490 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:07:54,491 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2022-12-14 16:08:00,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:08:00,808 INFO L263 TraceCheckSpWp]: Trace formula consists of 1068 conjuncts, 103 conjunts are in the unsatisfiable core [2022-12-14 16:08:00,811 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:08:00,816 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 6 treesize of output 5 [2022-12-14 16:08:02,318 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 13 treesize of output 9 [2022-12-14 16:08:03,922 INFO L134 CoverageAnalysis]: Checked inductivity of 2979 backedges. 2349 proven. 630 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:08:03,922 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:08:07,881 INFO L134 CoverageAnalysis]: Checked inductivity of 2979 backedges. 2382 proven. 597 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:08:07,881 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [91479446] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:08:07,881 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [150109590] [2022-12-14 16:08:07,882 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:08:07,882 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:08:07,882 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:08:07,882 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:08:07,883 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:08:07,892 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:08:07,917 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:07,937 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:07,952 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:08:08,098 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:08:10,132 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '13048#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:08:10,132 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:08:10,132 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:08:10,132 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [50, 64, 64] total 153 [2022-12-14 16:08:10,132 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1955839705] [2022-12-14 16:08:10,132 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:08:10,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 154 states [2022-12-14 16:08:10,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:08:10,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 154 interpolants. [2022-12-14 16:08:10,134 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=2212, Invalid=23870, Unknown=0, NotChecked=0, Total=26082 [2022-12-14 16:08:10,135 INFO L87 Difference]: Start difference. First operand 192 states and 193 transitions. Second operand has 154 states, 154 states have (on average 2.792207792207792) internal successors, (430), 153 states have internal predecessors, (430), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:08:18,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:08:18,220 INFO L93 Difference]: Finished difference Result 448 states and 459 transitions. [2022-12-14 16:08:18,220 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 126 states. [2022-12-14 16:08:18,220 INFO L78 Accepts]: Start accepts. Automaton has has 154 states, 154 states have (on average 2.792207792207792) internal successors, (430), 153 states have internal predecessors, (430), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 191 [2022-12-14 16:08:18,220 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:08:18,221 INFO L225 Difference]: With dead ends: 448 [2022-12-14 16:08:18,221 INFO L226 Difference]: Without dead ends: 216 [2022-12-14 16:08:18,223 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 710 GetRequests, 438 SyntacticMatches, 23 SemanticMatches, 249 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14380 ImplicationChecksByTransitivity, 14.8s TimeCoverageRelationStatistics Valid=8792, Invalid=53958, Unknown=0, NotChecked=0, Total=62750 [2022-12-14 16:08:18,223 INFO L413 NwaCegarLoop]: 23 mSDtfsCounter, 432 mSDsluCounter, 1586 mSDsCounter, 0 mSdLazyCounter, 8249 mSolverCounterSat, 55 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 432 SdHoareTripleChecker+Valid, 1609 SdHoareTripleChecker+Invalid, 8304 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 55 IncrementalHoareTripleChecker+Valid, 8249 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.4s IncrementalHoareTripleChecker+Time [2022-12-14 16:08:18,223 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [432 Valid, 1609 Invalid, 8304 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [55 Valid, 8249 Invalid, 0 Unknown, 0 Unchecked, 2.4s Time] [2022-12-14 16:08:18,224 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 216 states. [2022-12-14 16:08:18,225 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 216 to 216. [2022-12-14 16:08:18,226 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 216 states, 215 states have (on average 1.0093023255813953) internal successors, (217), 215 states have internal predecessors, (217), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:08:18,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 216 states to 216 states and 217 transitions. [2022-12-14 16:08:18,226 INFO L78 Accepts]: Start accepts. Automaton has 216 states and 217 transitions. Word has length 191 [2022-12-14 16:08:18,226 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:08:18,226 INFO L495 AbstractCegarLoop]: Abstraction has 216 states and 217 transitions. [2022-12-14 16:08:18,226 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 154 states, 154 states have (on average 2.792207792207792) internal successors, (430), 153 states have internal predecessors, (430), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:08:18,226 INFO L276 IsEmpty]: Start isEmpty. Operand 216 states and 217 transitions. [2022-12-14 16:08:18,227 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 216 [2022-12-14 16:08:18,227 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:08:18,227 INFO L195 NwaCegarLoop]: trace histogram [36, 35, 35, 35, 35, 35, 1, 1, 1, 1] [2022-12-14 16:08:18,237 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Forceful destruction successful, exit code 0 [2022-12-14 16:08:18,428 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22,20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:08:18,429 INFO L420 AbstractCegarLoop]: === Iteration 24 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:08:18,430 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:08:18,430 INFO L85 PathProgramCache]: Analyzing trace with hash 1063664198, now seen corresponding path program 17 times [2022-12-14 16:08:18,430 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:08:18,431 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1931052877] [2022-12-14 16:08:18,431 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:08:18,431 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:08:18,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:08:21,920 INFO L134 CoverageAnalysis]: Checked inductivity of 3675 backedges. 70 proven. 3605 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:08:21,921 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:08:21,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1931052877] [2022-12-14 16:08:21,921 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1931052877] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:08:21,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1303059138] [2022-12-14 16:08:21,921 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:08:21,921 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:08:21,921 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:08:21,922 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:08:21,922 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2022-12-14 16:12:50,584 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 36 check-sat command(s) [2022-12-14 16:12:50,585 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:12:50,653 INFO L263 TraceCheckSpWp]: Trace formula consists of 1224 conjuncts, 148 conjunts are in the unsatisfiable core [2022-12-14 16:12:50,656 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:12:51,104 INFO L134 CoverageAnalysis]: Checked inductivity of 3675 backedges. 70 proven. 3605 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:12:51,104 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:12:57,945 INFO L134 CoverageAnalysis]: Checked inductivity of 3675 backedges. 70 proven. 3605 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:12:57,945 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1303059138] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:12:57,945 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [331903679] [2022-12-14 16:12:57,946 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:12:57,946 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:12:57,946 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:12:57,946 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:12:57,946 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:12:57,963 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:12:57,981 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2022-12-14 16:12:58,010 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:12:58,031 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:12:58,290 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:13:01,128 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '15331#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:13:01,128 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:13:01,128 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:13:01,128 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [74, 74, 74] total 148 [2022-12-14 16:13:01,129 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1034443326] [2022-12-14 16:13:01,129 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:13:01,129 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 149 states [2022-12-14 16:13:01,129 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:13:01,130 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 149 interpolants. [2022-12-14 16:13:01,131 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=406, Invalid=24086, Unknown=0, NotChecked=0, Total=24492 [2022-12-14 16:13:01,132 INFO L87 Difference]: Start difference. First operand 216 states and 217 transitions. Second operand has 149 states, 149 states have (on average 2.8926174496644297) internal successors, (431), 148 states have internal predecessors, (431), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:13:12,786 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:13:12,786 INFO L93 Difference]: Finished difference Result 360 states and 361 transitions. [2022-12-14 16:13:12,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 109 states. [2022-12-14 16:13:12,787 INFO L78 Accepts]: Start accepts. Automaton has has 149 states, 149 states have (on average 2.8926174496644297) internal successors, (431), 148 states have internal predecessors, (431), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 215 [2022-12-14 16:13:12,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:13:12,787 INFO L225 Difference]: With dead ends: 360 [2022-12-14 16:13:12,787 INFO L226 Difference]: Without dead ends: 219 [2022-12-14 16:13:12,789 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 787 GetRequests, 560 SyntacticMatches, 2 SemanticMatches, 225 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6442 ImplicationChecksByTransitivity, 17.4s TimeCoverageRelationStatistics Valid=828, Invalid=50474, Unknown=0, NotChecked=0, Total=51302 [2022-12-14 16:13:12,789 INFO L413 NwaCegarLoop]: 105 mSDtfsCounter, 283 mSDsluCounter, 12477 mSDsCounter, 0 mSdLazyCounter, 13266 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 283 SdHoareTripleChecker+Valid, 12582 SdHoareTripleChecker+Invalid, 13302 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 13266 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.2s IncrementalHoareTripleChecker+Time [2022-12-14 16:13:12,790 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [283 Valid, 12582 Invalid, 13302 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [36 Valid, 13266 Invalid, 0 Unknown, 0 Unchecked, 5.2s Time] [2022-12-14 16:13:12,790 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 219 states. [2022-12-14 16:13:12,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 219 to 218. [2022-12-14 16:13:12,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 218 states, 217 states have (on average 1.0092165898617511) internal successors, (219), 217 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:13:12,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 218 states to 218 states and 219 transitions. [2022-12-14 16:13:12,794 INFO L78 Accepts]: Start accepts. Automaton has 218 states and 219 transitions. Word has length 215 [2022-12-14 16:13:12,794 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:13:12,794 INFO L495 AbstractCegarLoop]: Abstraction has 218 states and 219 transitions. [2022-12-14 16:13:12,794 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 149 states, 149 states have (on average 2.8926174496644297) internal successors, (431), 148 states have internal predecessors, (431), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:13:12,794 INFO L276 IsEmpty]: Start isEmpty. Operand 218 states and 219 transitions. [2022-12-14 16:13:12,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 218 [2022-12-14 16:13:12,796 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:13:12,797 INFO L195 NwaCegarLoop]: trace histogram [36, 36, 36, 35, 35, 35, 1, 1, 1, 1] [2022-12-14 16:13:12,820 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Ended with exit code 0 [2022-12-14 16:13:12,997 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23,21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:13:12,998 INFO L420 AbstractCegarLoop]: === Iteration 25 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:13:12,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:13:12,999 INFO L85 PathProgramCache]: Analyzing trace with hash -752746411, now seen corresponding path program 18 times [2022-12-14 16:13:12,999 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:13:12,999 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [792316968] [2022-12-14 16:13:13,000 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:13:13,000 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:13:13,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:13:20,499 INFO L134 CoverageAnalysis]: Checked inductivity of 3746 backedges. 0 proven. 3746 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:13:20,499 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:13:20,499 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [792316968] [2022-12-14 16:13:20,499 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [792316968] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:13:20,499 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [46572132] [2022-12-14 16:13:20,499 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2022-12-14 16:13:20,499 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:13:20,499 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:13:20,500 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:13:20,501 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2022-12-14 16:13:21,646 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2022-12-14 16:13:21,646 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2022-12-14 16:13:21,656 INFO L263 TraceCheckSpWp]: Trace formula consists of 1237 conjuncts, 247 conjunts are in the unsatisfiable core [2022-12-14 16:13:21,663 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:13:21,669 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:13:27,735 INFO L134 CoverageAnalysis]: Checked inductivity of 3746 backedges. 0 proven. 3746 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:13:27,736 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:13:42,982 INFO L134 CoverageAnalysis]: Checked inductivity of 3746 backedges. 1296 proven. 2450 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:13:42,983 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [46572132] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:13:42,983 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [2054084285] [2022-12-14 16:13:42,983 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:13:42,984 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:13:42,984 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:13:42,984 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:13:42,984 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:13:42,996 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:13:43,019 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:13:43,048 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:13:43,068 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:13:43,224 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:13:46,721 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '17550#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:13:46,721 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:13:46,721 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:13:46,721 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [79, 76, 76] total 195 [2022-12-14 16:13:46,721 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1366296319] [2022-12-14 16:13:46,721 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:13:46,722 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 197 states [2022-12-14 16:13:46,722 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:13:46,723 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 197 interpolants. [2022-12-14 16:13:46,724 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=2469, Invalid=39351, Unknown=0, NotChecked=0, Total=41820 [2022-12-14 16:13:46,724 INFO L87 Difference]: Start difference. First operand 218 states and 219 transitions. Second operand has 197 states, 196 states have (on average 2.9591836734693877) internal successors, (580), 196 states have internal predecessors, (580), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:14:14,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:14:14,656 INFO L93 Difference]: Finished difference Result 375 states and 377 transitions. [2022-12-14 16:14:14,656 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 191 states. [2022-12-14 16:14:14,657 INFO L78 Accepts]: Start accepts. Automaton has has 197 states, 196 states have (on average 2.9591836734693877) internal successors, (580), 196 states have internal predecessors, (580), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 217 [2022-12-14 16:14:14,657 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:14:14,658 INFO L225 Difference]: With dead ends: 375 [2022-12-14 16:14:14,658 INFO L226 Difference]: Without dead ends: 375 [2022-12-14 16:14:14,662 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 880 GetRequests, 523 SyntacticMatches, 2 SemanticMatches, 355 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24953 ImplicationChecksByTransitivity, 44.1s TimeCoverageRelationStatistics Valid=11925, Invalid=115167, Unknown=0, NotChecked=0, Total=127092 [2022-12-14 16:14:14,662 INFO L413 NwaCegarLoop]: 35 mSDtfsCounter, 1742 mSDsluCounter, 3845 mSDsCounter, 0 mSdLazyCounter, 20410 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1742 SdHoareTripleChecker+Valid, 3880 SdHoareTripleChecker+Invalid, 20416 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 20410 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.9s IncrementalHoareTripleChecker+Time [2022-12-14 16:14:14,662 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1742 Valid, 3880 Invalid, 20416 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [6 Valid, 20410 Invalid, 0 Unknown, 0 Unchecked, 8.9s Time] [2022-12-14 16:14:14,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 375 states. [2022-12-14 16:14:14,664 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 375 to 222. [2022-12-14 16:14:14,665 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 222 states, 221 states have (on average 1.009049773755656) internal successors, (223), 221 states have internal predecessors, (223), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:14:14,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 222 states to 222 states and 223 transitions. [2022-12-14 16:14:14,665 INFO L78 Accepts]: Start accepts. Automaton has 222 states and 223 transitions. Word has length 217 [2022-12-14 16:14:14,666 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:14:14,666 INFO L495 AbstractCegarLoop]: Abstraction has 222 states and 223 transitions. [2022-12-14 16:14:14,666 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 197 states, 196 states have (on average 2.9591836734693877) internal successors, (580), 196 states have internal predecessors, (580), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:14:14,666 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 223 transitions. [2022-12-14 16:14:14,666 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 222 [2022-12-14 16:14:14,667 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:14:14,667 INFO L195 NwaCegarLoop]: trace histogram [37, 36, 36, 36, 36, 36, 1, 1, 1, 1] [2022-12-14 16:14:14,674 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Ended with exit code 0 [2022-12-14 16:14:14,867 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2022-12-14 16:14:14,868 INFO L420 AbstractCegarLoop]: === Iteration 26 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:14:14,869 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:14:14,869 INFO L85 PathProgramCache]: Analyzing trace with hash 1993682181, now seen corresponding path program 19 times [2022-12-14 16:14:14,869 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:14:14,870 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [889634909] [2022-12-14 16:14:14,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:14:14,870 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:14:15,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:14:19,034 INFO L134 CoverageAnalysis]: Checked inductivity of 3888 backedges. 72 proven. 3816 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:14:19,034 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:14:19,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [889634909] [2022-12-14 16:14:19,034 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [889634909] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:14:19,035 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [529995942] [2022-12-14 16:14:19,035 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2022-12-14 16:14:19,035 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:14:19,035 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:14:19,035 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:14:19,036 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2022-12-14 16:14:21,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:14:21,494 INFO L263 TraceCheckSpWp]: Trace formula consists of 1257 conjuncts, 152 conjunts are in the unsatisfiable core [2022-12-14 16:14:21,497 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-14 16:14:21,951 INFO L134 CoverageAnalysis]: Checked inductivity of 3888 backedges. 72 proven. 3816 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:14:21,951 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-12-14 16:14:27,989 INFO L134 CoverageAnalysis]: Checked inductivity of 3888 backedges. 72 proven. 3816 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:14:27,989 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [529995942] provided 0 perfect and 2 imperfect interpolant sequences [2022-12-14 16:14:27,989 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSifa [1907671871] [2022-12-14 16:14:27,990 INFO L159 IcfgInterpreter]: Started Sifa with 9 locations of interest [2022-12-14 16:14:27,990 INFO L166 IcfgInterpreter]: Building call graph [2022-12-14 16:14:27,990 INFO L171 IcfgInterpreter]: Initial procedures are [ULTIMATE.start] [2022-12-14 16:14:27,990 INFO L176 IcfgInterpreter]: Starting interpretation [2022-12-14 16:14:27,991 INFO L197 IcfgInterpreter]: Interpreting procedure ULTIMATE.start with input of size 1 for LOIs [2022-12-14 16:14:28,003 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 7 [2022-12-14 16:14:28,030 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:14:28,051 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:14:28,065 INFO L350 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 14 treesize of output 10 [2022-12-14 16:14:28,220 INFO L180 IcfgInterpreter]: Interpretation finished [2022-12-14 16:14:30,519 INFO L133 SifaRunner]: Sifa could not show that error location is unreachable, found '19933#(and (<= |ULTIMATE.start_main_~length~0#1| 2147483647) (= |ULTIMATE.start_main_#t~malloc8#1.offset| 0) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_#in~c#1| 2147483647) (<= |ULTIMATE.start_cmemrchr_~s#1.offset| 0) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.offset|) (<= 1 |ULTIMATE.start_main_~i~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#in~s#1.base|) (= ~MAX~0 100000) (<= 0 |ULTIMATE.start_main_~nondetArea~0#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.offset|) (<= |ULTIMATE.start_cmemrchr_~n#1| 100000) (<= |ULTIMATE.start_main_~c~0#1| 2147483647) (or (not (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.offset|)) (not (<= (+ |ULTIMATE.start_cmemrchr_#t~pre3#1.offset| 1) (select |#length| |ULTIMATE.start_cmemrchr_#t~pre3#1.base|)))) (<= 0 |ULTIMATE.start_cmemrchr_~cp~0#1.base|) (<= 1 |ULTIMATE.start_cmemrchr_#in~n#1|) (<= 0 |ULTIMATE.start_main_#t~malloc8#1.base|) (<= 1 |ULTIMATE.start_main_~n~0#1|) (<= 1 |ULTIMATE.start_main_~length~0#1|) (<= 0 |ULTIMATE.start_cmemrchr_#t~pre3#1.base|) (<= 0 |ULTIMATE.start_cmemrchr_~s#1.base|) (<= 0 (+ |ULTIMATE.start_cmemrchr_~c#1| 2147483648)) (= |#NULL.offset| 0) (<= |ULTIMATE.start_cmemrchr_#in~n#1| 100000) (<= 0 (+ |ULTIMATE.start_main_~c~0#1| 2147483648)) (<= |ULTIMATE.start_cmemrchr_#in~s#1.offset| 0) (<= |ULTIMATE.start_cmemrchr_~c#1| 2147483647) (<= |ULTIMATE.start_main_~nondetArea~0#1.offset| 0) (<= 0 |#StackHeapBarrier|) (<= 0 (+ |ULTIMATE.start_cmemrchr_#in~c#1| 2147483648)) (<= |ULTIMATE.start_main_~n~0#1| 100000) (= |#NULL.base| 0))' at error location [2022-12-14 16:14:30,519 WARN L310 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: ALGORITHM_FAILED [2022-12-14 16:14:30,519 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-12-14 16:14:30,519 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [76, 76, 76] total 153 [2022-12-14 16:14:30,519 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [869823796] [2022-12-14 16:14:30,520 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-12-14 16:14:30,520 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 154 states [2022-12-14 16:14:30,520 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy SIFA_TAIPAN [2022-12-14 16:14:30,521 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 154 interpolants. [2022-12-14 16:14:30,521 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=420, Invalid=25662, Unknown=0, NotChecked=0, Total=26082 [2022-12-14 16:14:30,522 INFO L87 Difference]: Start difference. First operand 222 states and 223 transitions. Second operand has 154 states, 154 states have (on average 2.883116883116883) internal successors, (444), 153 states have internal predecessors, (444), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:14:41,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-14 16:14:41,264 INFO L93 Difference]: Finished difference Result 370 states and 371 transitions. [2022-12-14 16:14:41,264 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 112 states. [2022-12-14 16:14:41,264 INFO L78 Accepts]: Start accepts. Automaton has has 154 states, 154 states have (on average 2.883116883116883) internal successors, (444), 153 states have internal predecessors, (444), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 221 [2022-12-14 16:14:41,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-12-14 16:14:41,266 INFO L225 Difference]: With dead ends: 370 [2022-12-14 16:14:41,266 INFO L226 Difference]: Without dead ends: 225 [2022-12-14 16:14:41,268 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 809 GetRequests, 576 SyntacticMatches, 1 SemanticMatches, 232 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6851 ImplicationChecksByTransitivity, 16.0s TimeCoverageRelationStatistics Valid=855, Invalid=53667, Unknown=0, NotChecked=0, Total=54522 [2022-12-14 16:14:41,268 INFO L413 NwaCegarLoop]: 108 mSDtfsCounter, 292 mSDsluCounter, 11887 mSDsCounter, 0 mSdLazyCounter, 12635 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 292 SdHoareTripleChecker+Valid, 11995 SdHoareTripleChecker+Invalid, 12672 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 12635 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.8s IncrementalHoareTripleChecker+Time [2022-12-14 16:14:41,268 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [292 Valid, 11995 Invalid, 12672 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 12635 Invalid, 0 Unknown, 0 Unchecked, 4.8s Time] [2022-12-14 16:14:41,269 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 225 states. [2022-12-14 16:14:41,272 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 225 to 224. [2022-12-14 16:14:41,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 224 states, 223 states have (on average 1.0089686098654709) internal successors, (225), 223 states have internal predecessors, (225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:14:41,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 224 states to 224 states and 225 transitions. [2022-12-14 16:14:41,273 INFO L78 Accepts]: Start accepts. Automaton has 224 states and 225 transitions. Word has length 221 [2022-12-14 16:14:41,273 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-12-14 16:14:41,273 INFO L495 AbstractCegarLoop]: Abstraction has 224 states and 225 transitions. [2022-12-14 16:14:41,273 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 154 states, 154 states have (on average 2.883116883116883) internal successors, (444), 153 states have internal predecessors, (444), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-14 16:14:41,273 INFO L276 IsEmpty]: Start isEmpty. Operand 224 states and 225 transitions. [2022-12-14 16:14:41,274 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 224 [2022-12-14 16:14:41,274 INFO L187 NwaCegarLoop]: Found error trace [2022-12-14 16:14:41,274 INFO L195 NwaCegarLoop]: trace histogram [37, 37, 37, 36, 36, 36, 1, 1, 1, 1] [2022-12-14 16:14:41,287 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Ended with exit code 0 [2022-12-14 16:14:41,475 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2022-12-14 16:14:41,476 INFO L420 AbstractCegarLoop]: === Iteration 27 === Targeting ULTIMATE.startErr3REQUIRES_VIOLATIONMEMORY_DEREFERENCE === [ULTIMATE.startErr0REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr1REQUIRES_VIOLATIONMEMORY_DEREFERENCE, ULTIMATE.startErr2REQUIRES_VIOLATIONMEMORY_DEREFERENCE (and 2 more)] === [2022-12-14 16:14:41,477 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-14 16:14:41,477 INFO L85 PathProgramCache]: Analyzing trace with hash 1034021844, now seen corresponding path program 20 times [2022-12-14 16:14:41,478 INFO L118 FreeRefinementEngine]: Executing refinement strategy SIFA_TAIPAN [2022-12-14 16:14:41,478 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1182797810] [2022-12-14 16:14:41,478 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-14 16:14:41,478 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-14 16:14:41,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-14 16:14:47,578 INFO L134 CoverageAnalysis]: Checked inductivity of 3961 backedges. 0 proven. 3961 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-14 16:14:47,578 INFO L136 FreeRefinementEngine]: Strategy SIFA_TAIPAN found an infeasible trace [2022-12-14 16:14:47,578 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1182797810] [2022-12-14 16:14:47,578 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1182797810] provided 0 perfect and 1 imperfect interpolant sequences [2022-12-14 16:14:47,579 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2042032631] [2022-12-14 16:14:47,579 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2022-12-14 16:14:47,579 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-12-14 16:14:47,579 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 [2022-12-14 16:14:47,580 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-12-14 16:14:47,580 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_1e480bdc-33a0-4e0d-9551-161aef5afe7c/bin/utaipan-gh47qXpMRh/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process