./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/nla-digbench-scaling/hard2_valuebound20.c --full-output --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version a9b967e5 Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/nla-digbench-scaling/hard2_valuebound20.c -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1619c1c02ba7c9b660af32e6427e3b3d5cd6ca3ff286b9db386918ae0c8b508c --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-a9b967e-m [2024-09-11 20:11:14,450 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-11 20:11:14,521 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-11 20:11:14,526 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-11 20:11:14,529 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-11 20:11:14,557 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-11 20:11:14,558 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-11 20:11:14,558 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-11 20:11:14,559 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-11 20:11:14,562 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-11 20:11:14,563 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-11 20:11:14,563 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-11 20:11:14,564 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-11 20:11:14,564 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-11 20:11:14,564 INFO L153 SettingsManager]: * Use SBE=true [2024-09-11 20:11:14,564 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-11 20:11:14,565 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-11 20:11:14,565 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-11 20:11:14,565 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-11 20:11:14,565 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-11 20:11:14,565 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-11 20:11:14,567 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-11 20:11:14,567 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-11 20:11:14,568 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-11 20:11:14,568 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-11 20:11:14,569 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-11 20:11:14,569 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-11 20:11:14,569 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-11 20:11:14,569 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-11 20:11:14,569 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-11 20:11:14,570 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-11 20:11:14,570 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-11 20:11:14,570 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-11 20:11:14,571 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-11 20:11:14,571 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-11 20:11:14,571 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-11 20:11:14,572 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-11 20:11:14,572 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-11 20:11:14,572 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-11 20:11:14,573 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-11 20:11:14,573 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-11 20:11:14,573 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-11 20:11:14,573 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1619c1c02ba7c9b660af32e6427e3b3d5cd6ca3ff286b9db386918ae0c8b508c Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 [2024-09-11 20:11:14,843 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-11 20:11:14,866 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-11 20:11:14,869 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-11 20:11:14,870 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-11 20:11:14,870 INFO L274 PluginConnector]: CDTParser initialized [2024-09-11 20:11:14,872 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/nla-digbench-scaling/hard2_valuebound20.c [2024-09-11 20:11:16,178 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-11 20:11:16,361 INFO L384 CDTParser]: Found 1 translation units. [2024-09-11 20:11:16,362 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/nla-digbench-scaling/hard2_valuebound20.c [2024-09-11 20:11:16,368 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/33fb3b837/c79fda4ef002469ea5afa8b9feafb781/FLAGf9990b18b [2024-09-11 20:11:16,758 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/33fb3b837/c79fda4ef002469ea5afa8b9feafb781 [2024-09-11 20:11:16,762 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-11 20:11:16,763 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-11 20:11:16,764 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-11 20:11:16,764 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-11 20:11:16,768 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-11 20:11:16,769 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:16,769 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@799c3741 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16, skipping insertion in model container [2024-09-11 20:11:16,770 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:16,785 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-11 20:11:16,923 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/nla-digbench-scaling/hard2_valuebound20.c[526,539] [2024-09-11 20:11:16,937 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-11 20:11:16,945 INFO L200 MainTranslator]: Completed pre-run [2024-09-11 20:11:16,958 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/nla-digbench-scaling/hard2_valuebound20.c[526,539] [2024-09-11 20:11:16,963 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-11 20:11:16,987 INFO L204 MainTranslator]: Completed translation [2024-09-11 20:11:16,988 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16 WrapperNode [2024-09-11 20:11:16,988 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-11 20:11:16,989 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-11 20:11:16,990 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-11 20:11:16,990 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-11 20:11:16,996 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:17,003 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:17,023 INFO L138 Inliner]: procedures = 14, calls = 23, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 64 [2024-09-11 20:11:17,024 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-11 20:11:17,025 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-11 20:11:17,025 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-11 20:11:17,026 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-11 20:11:17,039 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:17,040 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:17,043 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:17,063 INFO L175 MemorySlicer]: Split 10 memory accesses to 2 slices as follows [2, 8]. 80 percent of accesses are in the largest equivalence class. The 10 initializations are split as follows [2, 8]. The 0 writes are split as follows [0, 0]. [2024-09-11 20:11:17,063 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:17,064 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:17,067 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:17,070 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:17,074 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:17,075 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:17,076 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-11 20:11:17,077 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-11 20:11:17,077 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-11 20:11:17,081 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-11 20:11:17,082 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16" (1/1) ... [2024-09-11 20:11:17,091 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-11 20:11:17,101 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:11:17,131 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-11 20:11:17,137 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-11 20:11:17,181 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-11 20:11:17,181 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-11 20:11:17,181 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-11 20:11:17,181 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-11 20:11:17,182 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-11 20:11:17,182 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-11 20:11:17,182 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-11 20:11:17,236 INFO L242 CfgBuilder]: Building ICFG [2024-09-11 20:11:17,237 INFO L268 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-11 20:11:17,354 INFO L? ?]: Removed 7 outVars from TransFormulas that were not future-live. [2024-09-11 20:11:17,354 INFO L291 CfgBuilder]: Performing block encoding [2024-09-11 20:11:17,380 INFO L313 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-11 20:11:17,380 INFO L318 CfgBuilder]: Removed 2 assume(true) statements. [2024-09-11 20:11:17,381 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.09 08:11:17 BoogieIcfgContainer [2024-09-11 20:11:17,381 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-11 20:11:17,383 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-11 20:11:17,383 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-11 20:11:17,399 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-11 20:11:17,400 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 11.09 08:11:16" (1/3) ... [2024-09-11 20:11:17,400 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4df0351a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.09 08:11:17, skipping insertion in model container [2024-09-11 20:11:17,400 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:11:16" (2/3) ... [2024-09-11 20:11:17,401 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4df0351a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.09 08:11:17, skipping insertion in model container [2024-09-11 20:11:17,401 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.09 08:11:17" (3/3) ... [2024-09-11 20:11:17,402 INFO L112 eAbstractionObserver]: Analyzing ICFG hard2_valuebound20.c [2024-09-11 20:11:17,421 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-11 20:11:17,421 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-11 20:11:17,497 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-11 20:11:17,503 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@77080162, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-11 20:11:17,503 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-11 20:11:17,508 INFO L276 IsEmpty]: Start isEmpty. Operand has 23 states, 13 states have (on average 1.7692307692307692) internal successors, (23), 14 states have internal predecessors, (23), 7 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-11 20:11:17,514 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2024-09-11 20:11:17,514 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:11:17,515 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:11:17,515 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:11:17,520 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:17,521 INFO L85 PathProgramCache]: Analyzing trace with hash -1830609328, now seen corresponding path program 1 times [2024-09-11 20:11:17,529 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:11:17,529 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [492705820] [2024-09-11 20:11:17,530 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:17,530 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:11:17,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:17,666 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-11 20:11:17,666 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:11:17,666 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [492705820] [2024-09-11 20:11:17,667 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [492705820] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:11:17,667 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-11 20:11:17,667 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-09-11 20:11:17,668 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [211081974] [2024-09-11 20:11:17,669 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:11:17,671 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-09-11 20:11:17,671 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:11:17,689 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-09-11 20:11:17,690 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-11 20:11:17,691 INFO L87 Difference]: Start difference. First operand has 23 states, 13 states have (on average 1.7692307692307692) internal successors, (23), 14 states have internal predecessors, (23), 7 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) Second operand has 2 states, 2 states have (on average 3.5) internal successors, (7), 2 states have internal predecessors, (7), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-11 20:11:17,720 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:11:17,721 INFO L93 Difference]: Finished difference Result 44 states and 78 transitions. [2024-09-11 20:11:17,724 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-09-11 20:11:17,725 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 3.5) internal successors, (7), 2 states have internal predecessors, (7), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2024-09-11 20:11:17,725 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:11:17,731 INFO L225 Difference]: With dead ends: 44 [2024-09-11 20:11:17,731 INFO L226 Difference]: Without dead ends: 21 [2024-09-11 20:11:17,734 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-11 20:11:17,737 INFO L434 NwaCegarLoop]: 29 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 2 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-11 20:11:17,738 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 29 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 2 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-11 20:11:17,750 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21 states. [2024-09-11 20:11:17,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21 to 21. [2024-09-11 20:11:17,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21 states, 12 states have (on average 1.3333333333333333) internal successors, (16), 13 states have internal predecessors, (16), 7 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-11 20:11:17,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 29 transitions. [2024-09-11 20:11:17,766 INFO L78 Accepts]: Start accepts. Automaton has 21 states and 29 transitions. Word has length 8 [2024-09-11 20:11:17,766 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:11:17,767 INFO L474 AbstractCegarLoop]: Abstraction has 21 states and 29 transitions. [2024-09-11 20:11:17,767 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 3.5) internal successors, (7), 2 states have internal predecessors, (7), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-11 20:11:17,767 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:17,768 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 29 transitions. [2024-09-11 20:11:17,769 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2024-09-11 20:11:17,769 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:11:17,769 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:11:17,769 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-11 20:11:17,770 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:11:17,770 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:17,770 INFO L85 PathProgramCache]: Analyzing trace with hash -55601966, now seen corresponding path program 1 times [2024-09-11 20:11:17,770 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:11:17,771 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1465766165] [2024-09-11 20:11:17,771 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:17,771 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:11:17,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:17,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-11 20:11:17,929 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:11:17,929 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1465766165] [2024-09-11 20:11:17,930 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1465766165] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:11:17,930 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-11 20:11:17,930 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-09-11 20:11:17,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [782067537] [2024-09-11 20:11:17,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:11:17,931 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-11 20:11:17,932 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:11:17,932 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-11 20:11:17,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-09-11 20:11:17,933 INFO L87 Difference]: Start difference. First operand 21 states and 29 transitions. Second operand has 5 states, 5 states have (on average 1.4) internal successors, (7), 4 states have internal predecessors, (7), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-11 20:11:18,027 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:11:18,029 INFO L93 Difference]: Finished difference Result 34 states and 46 transitions. [2024-09-11 20:11:18,030 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-11 20:11:18,030 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.4) internal successors, (7), 4 states have internal predecessors, (7), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2024-09-11 20:11:18,030 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:11:18,031 INFO L225 Difference]: With dead ends: 34 [2024-09-11 20:11:18,031 INFO L226 Difference]: Without dead ends: 32 [2024-09-11 20:11:18,031 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2024-09-11 20:11:18,032 INFO L434 NwaCegarLoop]: 24 mSDtfsCounter, 9 mSDsluCounter, 59 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 83 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-11 20:11:18,033 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 83 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-11 20:11:18,036 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32 states. [2024-09-11 20:11:18,047 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32 to 25. [2024-09-11 20:11:18,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 15 states have (on average 1.2666666666666666) internal successors, (19), 16 states have internal predecessors, (19), 7 states have call successors, (7), 2 states have call predecessors, (7), 2 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-11 20:11:18,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 32 transitions. [2024-09-11 20:11:18,051 INFO L78 Accepts]: Start accepts. Automaton has 25 states and 32 transitions. Word has length 8 [2024-09-11 20:11:18,051 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:11:18,051 INFO L474 AbstractCegarLoop]: Abstraction has 25 states and 32 transitions. [2024-09-11 20:11:18,051 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.4) internal successors, (7), 4 states have internal predecessors, (7), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-11 20:11:18,052 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:18,052 INFO L276 IsEmpty]: Start isEmpty. Operand 25 states and 32 transitions. [2024-09-11 20:11:18,053 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2024-09-11 20:11:18,053 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:11:18,053 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:11:18,053 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-09-11 20:11:18,054 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:11:18,054 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:18,055 INFO L85 PathProgramCache]: Analyzing trace with hash -1587104181, now seen corresponding path program 1 times [2024-09-11 20:11:18,056 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:11:18,056 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1786638954] [2024-09-11 20:11:18,056 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:18,056 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:11:18,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:18,170 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2024-09-11 20:11:18,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:18,188 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-11 20:11:18,191 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:11:18,191 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1786638954] [2024-09-11 20:11:18,191 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1786638954] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:11:18,192 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-11 20:11:18,192 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-09-11 20:11:18,192 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1669310176] [2024-09-11 20:11:18,192 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:11:18,193 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-11 20:11:18,193 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:11:18,194 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-11 20:11:18,195 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-09-11 20:11:18,195 INFO L87 Difference]: Start difference. First operand 25 states and 32 transitions. Second operand has 5 states, 5 states have (on average 2.0) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-11 20:11:18,274 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:11:18,275 INFO L93 Difference]: Finished difference Result 38 states and 49 transitions. [2024-09-11 20:11:18,275 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-11 20:11:18,275 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.0) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 13 [2024-09-11 20:11:18,276 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:11:18,277 INFO L225 Difference]: With dead ends: 38 [2024-09-11 20:11:18,277 INFO L226 Difference]: Without dead ends: 36 [2024-09-11 20:11:18,277 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2024-09-11 20:11:18,279 INFO L434 NwaCegarLoop]: 24 mSDtfsCounter, 9 mSDsluCounter, 56 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 80 SdHoareTripleChecker+Invalid, 36 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:11:18,279 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 80 Invalid, 36 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:11:18,280 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2024-09-11 20:11:18,289 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 29. [2024-09-11 20:11:18,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 18 states have (on average 1.2222222222222223) internal successors, (22), 19 states have internal predecessors, (22), 7 states have call successors, (7), 3 states have call predecessors, (7), 3 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-11 20:11:18,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 35 transitions. [2024-09-11 20:11:18,292 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 35 transitions. Word has length 13 [2024-09-11 20:11:18,293 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:11:18,293 INFO L474 AbstractCegarLoop]: Abstraction has 29 states and 35 transitions. [2024-09-11 20:11:18,294 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.0) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-11 20:11:18,294 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:18,294 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 35 transitions. [2024-09-11 20:11:18,295 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2024-09-11 20:11:18,295 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:11:18,296 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:11:18,296 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-09-11 20:11:18,296 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:11:18,297 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:18,298 INFO L85 PathProgramCache]: Analyzing trace with hash 1972613170, now seen corresponding path program 1 times [2024-09-11 20:11:18,298 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:11:18,298 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [653297961] [2024-09-11 20:11:18,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:18,299 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:11:18,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:11:18,332 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1478712831] [2024-09-11 20:11:18,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:18,333 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:11:18,333 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:11:18,335 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:11:18,337 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-11 20:11:18,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:18,408 INFO L262 TraceCheckSpWp]: Trace formula consists of 80 conjuncts, 9 conjuncts are in the unsatisfiable core [2024-09-11 20:11:18,413 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:11:18,529 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-11 20:11:18,530 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-11 20:11:18,530 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:11:18,530 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [653297961] [2024-09-11 20:11:18,531 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:11:18,531 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1478712831] [2024-09-11 20:11:18,533 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1478712831] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:11:18,533 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-11 20:11:18,533 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-09-11 20:11:18,534 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [302556793] [2024-09-11 20:11:18,534 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:11:18,534 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-11 20:11:18,534 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:11:18,535 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-11 20:11:18,535 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-09-11 20:11:18,535 INFO L87 Difference]: Start difference. First operand 29 states and 35 transitions. Second operand has 5 states, 5 states have (on average 2.0) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-11 20:11:18,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:11:18,625 INFO L93 Difference]: Finished difference Result 55 states and 72 transitions. [2024-09-11 20:11:18,625 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-11 20:11:18,626 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.0) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 18 [2024-09-11 20:11:18,626 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:11:18,627 INFO L225 Difference]: With dead ends: 55 [2024-09-11 20:11:18,627 INFO L226 Difference]: Without dead ends: 42 [2024-09-11 20:11:18,627 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2024-09-11 20:11:18,630 INFO L434 NwaCegarLoop]: 24 mSDtfsCounter, 5 mSDsluCounter, 58 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 82 SdHoareTripleChecker+Invalid, 43 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:11:18,630 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 82 Invalid, 43 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:11:18,631 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42 states. [2024-09-11 20:11:18,642 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42 to 42. [2024-09-11 20:11:18,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42 states, 25 states have (on average 1.2) internal successors, (30), 26 states have internal predecessors, (30), 12 states have call successors, (12), 4 states have call predecessors, (12), 4 states have return successors, (11), 11 states have call predecessors, (11), 11 states have call successors, (11) [2024-09-11 20:11:18,644 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42 states to 42 states and 53 transitions. [2024-09-11 20:11:18,645 INFO L78 Accepts]: Start accepts. Automaton has 42 states and 53 transitions. Word has length 18 [2024-09-11 20:11:18,646 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:11:18,646 INFO L474 AbstractCegarLoop]: Abstraction has 42 states and 53 transitions. [2024-09-11 20:11:18,646 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.0) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-11 20:11:18,647 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:18,647 INFO L276 IsEmpty]: Start isEmpty. Operand 42 states and 53 transitions. [2024-09-11 20:11:18,648 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2024-09-11 20:11:18,648 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:11:18,649 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:11:18,666 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2024-09-11 20:11:18,852 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:11:18,853 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:11:18,853 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:18,854 INFO L85 PathProgramCache]: Analyzing trace with hash -1810344840, now seen corresponding path program 1 times [2024-09-11 20:11:18,854 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:11:18,855 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1255585266] [2024-09-11 20:11:18,855 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:18,855 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:11:18,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:11:18,891 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [893943205] [2024-09-11 20:11:18,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:18,891 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:11:18,891 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:11:18,895 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:11:18,897 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-11 20:11:18,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:18,960 INFO L262 TraceCheckSpWp]: Trace formula consists of 91 conjuncts, 15 conjuncts are in the unsatisfiable core [2024-09-11 20:11:18,962 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:11:19,048 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-09-11 20:11:19,048 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:11:19,266 INFO L134 CoverageAnalysis]: Checked inductivity of 18 backedges. 8 proven. 4 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-09-11 20:11:19,267 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:11:19,267 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1255585266] [2024-09-11 20:11:19,267 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:11:19,267 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [893943205] [2024-09-11 20:11:19,267 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [893943205] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:11:19,267 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-11 20:11:19,267 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7] total 10 [2024-09-11 20:11:19,268 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [185042248] [2024-09-11 20:11:19,268 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-11 20:11:19,268 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2024-09-11 20:11:19,268 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:11:19,269 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2024-09-11 20:11:19,269 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2024-09-11 20:11:19,269 INFO L87 Difference]: Start difference. First operand 42 states and 53 transitions. Second operand has 10 states, 10 states have (on average 2.1) internal successors, (21), 9 states have internal predecessors, (21), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-09-11 20:11:19,391 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:11:19,391 INFO L93 Difference]: Finished difference Result 55 states and 70 transitions. [2024-09-11 20:11:19,392 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-09-11 20:11:19,392 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 2.1) internal successors, (21), 9 states have internal predecessors, (21), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 25 [2024-09-11 20:11:19,393 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:11:19,394 INFO L225 Difference]: With dead ends: 55 [2024-09-11 20:11:19,396 INFO L226 Difference]: Without dead ends: 53 [2024-09-11 20:11:19,396 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 49 GetRequests, 39 SyntacticMatches, 1 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=31, Invalid=79, Unknown=0, NotChecked=0, Total=110 [2024-09-11 20:11:19,397 INFO L434 NwaCegarLoop]: 15 mSDtfsCounter, 8 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 102 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 79 SdHoareTripleChecker+Invalid, 108 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 102 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:11:19,397 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 79 Invalid, 108 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 102 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:11:19,399 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2024-09-11 20:11:19,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 52. [2024-09-11 20:11:19,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 31 states have (on average 1.2258064516129032) internal successors, (38), 33 states have internal predecessors, (38), 15 states have call successors, (15), 5 states have call predecessors, (15), 5 states have return successors, (14), 13 states have call predecessors, (14), 14 states have call successors, (14) [2024-09-11 20:11:19,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 67 transitions. [2024-09-11 20:11:19,417 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 67 transitions. Word has length 25 [2024-09-11 20:11:19,417 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:11:19,417 INFO L474 AbstractCegarLoop]: Abstraction has 52 states and 67 transitions. [2024-09-11 20:11:19,417 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 2.1) internal successors, (21), 9 states have internal predecessors, (21), 2 states have call successors, (7), 3 states have call predecessors, (7), 2 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-09-11 20:11:19,418 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:19,418 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 67 transitions. [2024-09-11 20:11:19,419 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2024-09-11 20:11:19,419 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:11:19,419 INFO L216 NwaCegarLoop]: trace histogram [6, 5, 5, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:11:19,438 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-09-11 20:11:19,627 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:11:19,628 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:11:19,628 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:19,628 INFO L85 PathProgramCache]: Analyzing trace with hash -447891575, now seen corresponding path program 1 times [2024-09-11 20:11:19,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:11:19,628 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1344117437] [2024-09-11 20:11:19,628 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:19,629 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:11:19,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:11:19,661 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1500425260] [2024-09-11 20:11:19,661 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:19,661 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:11:19,661 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:11:19,666 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:11:19,670 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-11 20:11:19,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:19,719 INFO L262 TraceCheckSpWp]: Trace formula consists of 113 conjuncts, 13 conjuncts are in the unsatisfiable core [2024-09-11 20:11:19,721 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:11:19,830 INFO L134 CoverageAnalysis]: Checked inductivity of 54 backedges. 10 proven. 4 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-11 20:11:19,832 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:11:19,910 INFO L134 CoverageAnalysis]: Checked inductivity of 54 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2024-09-11 20:11:19,911 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:11:19,911 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1344117437] [2024-09-11 20:11:19,911 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:11:19,911 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1500425260] [2024-09-11 20:11:19,912 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1500425260] provided 1 perfect and 1 imperfect interpolant sequences [2024-09-11 20:11:19,913 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:11:19,914 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 7 [2024-09-11 20:11:19,914 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1251798238] [2024-09-11 20:11:19,914 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:11:19,914 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-11 20:11:19,914 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:11:19,915 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-11 20:11:19,915 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2024-09-11 20:11:19,915 INFO L87 Difference]: Start difference. First operand 52 states and 67 transitions. Second operand has 5 states, 5 states have (on average 2.2) internal successors, (11), 4 states have internal predecessors, (11), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2024-09-11 20:11:20,963 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:11:20,963 INFO L93 Difference]: Finished difference Result 62 states and 79 transitions. [2024-09-11 20:11:20,964 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-11 20:11:20,964 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.2) internal successors, (11), 4 states have internal predecessors, (11), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) Word has length 35 [2024-09-11 20:11:20,964 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:11:20,966 INFO L225 Difference]: With dead ends: 62 [2024-09-11 20:11:20,966 INFO L226 Difference]: Without dead ends: 60 [2024-09-11 20:11:20,967 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 61 SyntacticMatches, 2 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2024-09-11 20:11:20,968 INFO L434 NwaCegarLoop]: 23 mSDtfsCounter, 5 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 42 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2024-09-11 20:11:20,968 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 75 Invalid, 42 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2024-09-11 20:11:20,969 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2024-09-11 20:11:20,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 59. [2024-09-11 20:11:20,982 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 35 states have (on average 1.2) internal successors, (42), 38 states have internal predecessors, (42), 17 states have call successors, (17), 6 states have call predecessors, (17), 6 states have return successors, (16), 14 states have call predecessors, (16), 16 states have call successors, (16) [2024-09-11 20:11:20,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 75 transitions. [2024-09-11 20:11:20,983 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 75 transitions. Word has length 35 [2024-09-11 20:11:20,983 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:11:20,984 INFO L474 AbstractCegarLoop]: Abstraction has 59 states and 75 transitions. [2024-09-11 20:11:20,984 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.2) internal successors, (11), 4 states have internal predecessors, (11), 1 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (3), 1 states have call predecessors, (3), 1 states have call successors, (3) [2024-09-11 20:11:20,984 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:20,984 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 75 transitions. [2024-09-11 20:11:20,985 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2024-09-11 20:11:20,985 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:11:20,985 INFO L216 NwaCegarLoop]: trace histogram [7, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:11:21,002 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2024-09-11 20:11:21,193 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2024-09-11 20:11:21,194 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:11:21,194 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:21,194 INFO L85 PathProgramCache]: Analyzing trace with hash -1669992559, now seen corresponding path program 1 times [2024-09-11 20:11:21,194 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:11:21,194 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1947447184] [2024-09-11 20:11:21,195 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:21,195 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:11:21,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:21,326 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2024-09-11 20:11:21,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:21,331 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2024-09-11 20:11:21,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:21,337 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-09-11 20:11:21,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:21,346 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2024-09-11 20:11:21,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:21,356 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2024-09-11 20:11:21,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:21,362 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2024-09-11 20:11:21,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:21,369 INFO L134 CoverageAnalysis]: Checked inductivity of 72 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2024-09-11 20:11:21,372 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:11:21,372 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1947447184] [2024-09-11 20:11:21,372 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1947447184] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:11:21,372 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-11 20:11:21,372 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-09-11 20:11:21,372 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [456311083] [2024-09-11 20:11:21,373 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:11:21,373 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-11 20:11:21,373 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:11:21,374 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-11 20:11:21,374 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-09-11 20:11:21,374 INFO L87 Difference]: Start difference. First operand 59 states and 75 transitions. Second operand has 5 states, 5 states have (on average 2.6) internal successors, (13), 4 states have internal predecessors, (13), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2024-09-11 20:11:21,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:11:21,431 INFO L93 Difference]: Finished difference Result 67 states and 83 transitions. [2024-09-11 20:11:21,432 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-11 20:11:21,432 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 4 states have internal predecessors, (13), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 41 [2024-09-11 20:11:21,432 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:11:21,433 INFO L225 Difference]: With dead ends: 67 [2024-09-11 20:11:21,435 INFO L226 Difference]: Without dead ends: 55 [2024-09-11 20:11:21,436 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2024-09-11 20:11:21,436 INFO L434 NwaCegarLoop]: 27 mSDtfsCounter, 3 mSDsluCounter, 65 mSDsCounter, 0 mSdLazyCounter, 31 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 92 SdHoareTripleChecker+Invalid, 31 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 31 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-11 20:11:21,437 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 92 Invalid, 31 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 31 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-11 20:11:21,437 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2024-09-11 20:11:21,456 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2024-09-11 20:11:21,457 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 33 states have (on average 1.1818181818181819) internal successors, (39), 36 states have internal predecessors, (39), 15 states have call successors, (15), 6 states have call predecessors, (15), 6 states have return successors, (14), 12 states have call predecessors, (14), 14 states have call successors, (14) [2024-09-11 20:11:21,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 68 transitions. [2024-09-11 20:11:21,458 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 68 transitions. Word has length 41 [2024-09-11 20:11:21,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:11:21,460 INFO L474 AbstractCegarLoop]: Abstraction has 55 states and 68 transitions. [2024-09-11 20:11:21,460 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 4 states have internal predecessors, (13), 1 states have call successors, (7), 2 states have call predecessors, (7), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2024-09-11 20:11:21,460 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:21,461 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 68 transitions. [2024-09-11 20:11:21,462 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-09-11 20:11:21,462 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:11:21,462 INFO L216 NwaCegarLoop]: trace histogram [9, 8, 8, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:11:21,465 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-09-11 20:11:21,465 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:11:21,465 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:21,466 INFO L85 PathProgramCache]: Analyzing trace with hash -1460518785, now seen corresponding path program 1 times [2024-09-11 20:11:21,466 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:11:21,466 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1481282140] [2024-09-11 20:11:21,466 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:21,466 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:11:21,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:11:21,527 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1333340442] [2024-09-11 20:11:21,530 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:21,530 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:11:21,530 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:11:21,534 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:11:21,536 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-11 20:11:21,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:21,597 INFO L262 TraceCheckSpWp]: Trace formula consists of 153 conjuncts, 33 conjuncts are in the unsatisfiable core [2024-09-11 20:11:21,600 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:11:21,899 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 18 proven. 26 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2024-09-11 20:11:21,899 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:11:23,497 INFO L134 CoverageAnalysis]: Checked inductivity of 135 backedges. 18 proven. 26 refuted. 0 times theorem prover too weak. 91 trivial. 0 not checked. [2024-09-11 20:11:23,498 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:11:23,498 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1481282140] [2024-09-11 20:11:23,498 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:11:23,498 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1333340442] [2024-09-11 20:11:23,498 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1333340442] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:11:23,498 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-11 20:11:23,498 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9] total 15 [2024-09-11 20:11:23,499 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1615132862] [2024-09-11 20:11:23,499 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-11 20:11:23,499 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-09-11 20:11:23,499 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:11:23,500 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-09-11 20:11:23,500 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=167, Unknown=0, NotChecked=0, Total=210 [2024-09-11 20:11:23,501 INFO L87 Difference]: Start difference. First operand 55 states and 68 transitions. Second operand has 15 states, 15 states have (on average 2.2) internal successors, (33), 14 states have internal predecessors, (33), 7 states have call successors, (18), 3 states have call predecessors, (18), 2 states have return successors, (16), 5 states have call predecessors, (16), 5 states have call successors, (16) [2024-09-11 20:11:24,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:11:24,198 INFO L93 Difference]: Finished difference Result 130 states and 175 transitions. [2024-09-11 20:11:24,199 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-09-11 20:11:24,199 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 2.2) internal successors, (33), 14 states have internal predecessors, (33), 7 states have call successors, (18), 3 states have call predecessors, (18), 2 states have return successors, (16), 5 states have call predecessors, (16), 5 states have call successors, (16) Word has length 55 [2024-09-11 20:11:24,199 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:11:24,201 INFO L225 Difference]: With dead ends: 130 [2024-09-11 20:11:24,201 INFO L226 Difference]: Without dead ends: 107 [2024-09-11 20:11:24,201 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 112 GetRequests, 95 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=76, Invalid=266, Unknown=0, NotChecked=0, Total=342 [2024-09-11 20:11:24,202 INFO L434 NwaCegarLoop]: 23 mSDtfsCounter, 30 mSDsluCounter, 148 mSDsCounter, 0 mSdLazyCounter, 254 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 36 SdHoareTripleChecker+Valid, 171 SdHoareTripleChecker+Invalid, 317 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 254 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-11 20:11:24,202 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [36 Valid, 171 Invalid, 317 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 254 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-11 20:11:24,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 107 states. [2024-09-11 20:11:24,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 107 to 105. [2024-09-11 20:11:24,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 105 states, 63 states have (on average 1.2222222222222223) internal successors, (77), 68 states have internal predecessors, (77), 31 states have call successors, (31), 10 states have call predecessors, (31), 10 states have return successors, (30), 26 states have call predecessors, (30), 30 states have call successors, (30) [2024-09-11 20:11:24,246 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 105 states to 105 states and 138 transitions. [2024-09-11 20:11:24,247 INFO L78 Accepts]: Start accepts. Automaton has 105 states and 138 transitions. Word has length 55 [2024-09-11 20:11:24,249 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:11:24,250 INFO L474 AbstractCegarLoop]: Abstraction has 105 states and 138 transitions. [2024-09-11 20:11:24,250 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 2.2) internal successors, (33), 14 states have internal predecessors, (33), 7 states have call successors, (18), 3 states have call predecessors, (18), 2 states have return successors, (16), 5 states have call predecessors, (16), 5 states have call successors, (16) [2024-09-11 20:11:24,250 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:24,251 INFO L276 IsEmpty]: Start isEmpty. Operand 105 states and 138 transitions. [2024-09-11 20:11:24,252 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-11 20:11:24,252 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:11:24,252 INFO L216 NwaCegarLoop]: trace histogram [11, 10, 10, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:11:24,272 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2024-09-11 20:11:24,452 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:11:24,453 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:11:24,453 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:24,453 INFO L85 PathProgramCache]: Analyzing trace with hash -814878683, now seen corresponding path program 1 times [2024-09-11 20:11:24,453 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:11:24,453 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [292090785] [2024-09-11 20:11:24,454 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:24,454 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:11:24,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:11:24,479 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [705879157] [2024-09-11 20:11:24,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:24,480 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:11:24,480 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:11:24,482 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:11:24,484 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-11 20:11:24,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:24,539 INFO L262 TraceCheckSpWp]: Trace formula consists of 173 conjuncts, 35 conjuncts are in the unsatisfiable core [2024-09-11 20:11:24,542 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:11:24,782 INFO L134 CoverageAnalysis]: Checked inductivity of 209 backedges. 22 proven. 34 refuted. 0 times theorem prover too weak. 153 trivial. 0 not checked. [2024-09-11 20:11:24,782 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:11:25,309 INFO L134 CoverageAnalysis]: Checked inductivity of 209 backedges. 22 proven. 34 refuted. 0 times theorem prover too weak. 153 trivial. 0 not checked. [2024-09-11 20:11:25,309 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:11:25,309 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [292090785] [2024-09-11 20:11:25,310 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:11:25,310 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [705879157] [2024-09-11 20:11:25,310 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [705879157] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:11:25,310 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-11 20:11:25,310 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 9] total 16 [2024-09-11 20:11:25,310 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [90052369] [2024-09-11 20:11:25,311 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-11 20:11:25,311 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2024-09-11 20:11:25,311 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:11:25,312 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2024-09-11 20:11:25,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=53, Invalid=187, Unknown=0, NotChecked=0, Total=240 [2024-09-11 20:11:25,312 INFO L87 Difference]: Start difference. First operand 105 states and 138 transitions. Second operand has 16 states, 14 states have (on average 2.5) internal successors, (35), 15 states have internal predecessors, (35), 8 states have call successors, (22), 3 states have call predecessors, (22), 2 states have return successors, (20), 6 states have call predecessors, (20), 6 states have call successors, (20) [2024-09-11 20:11:26,084 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:11:26,084 INFO L93 Difference]: Finished difference Result 160 states and 213 transitions. [2024-09-11 20:11:26,085 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2024-09-11 20:11:26,085 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 14 states have (on average 2.5) internal successors, (35), 15 states have internal predecessors, (35), 8 states have call successors, (22), 3 states have call predecessors, (22), 2 states have return successors, (20), 6 states have call predecessors, (20), 6 states have call successors, (20) Word has length 66 [2024-09-11 20:11:26,086 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:11:26,088 INFO L225 Difference]: With dead ends: 160 [2024-09-11 20:11:26,089 INFO L226 Difference]: Without dead ends: 128 [2024-09-11 20:11:26,090 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 133 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=79, Invalid=263, Unknown=0, NotChecked=0, Total=342 [2024-09-11 20:11:26,091 INFO L434 NwaCegarLoop]: 27 mSDtfsCounter, 15 mSDsluCounter, 160 mSDsCounter, 0 mSdLazyCounter, 315 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 345 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 315 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-11 20:11:26,091 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [19 Valid, 187 Invalid, 345 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 315 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-11 20:11:26,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128 states. [2024-09-11 20:11:26,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128 to 102. [2024-09-11 20:11:26,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 62 states have (on average 1.1774193548387097) internal successors, (73), 67 states have internal predecessors, (73), 28 states have call successors, (28), 11 states have call predecessors, (28), 11 states have return successors, (27), 23 states have call predecessors, (27), 27 states have call successors, (27) [2024-09-11 20:11:26,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 128 transitions. [2024-09-11 20:11:26,132 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 128 transitions. Word has length 66 [2024-09-11 20:11:26,132 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:11:26,132 INFO L474 AbstractCegarLoop]: Abstraction has 102 states and 128 transitions. [2024-09-11 20:11:26,133 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 14 states have (on average 2.5) internal successors, (35), 15 states have internal predecessors, (35), 8 states have call successors, (22), 3 states have call predecessors, (22), 2 states have return successors, (20), 6 states have call predecessors, (20), 6 states have call successors, (20) [2024-09-11 20:11:26,135 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:26,135 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 128 transitions. [2024-09-11 20:11:26,136 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2024-09-11 20:11:26,136 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:11:26,136 INFO L216 NwaCegarLoop]: trace histogram [12, 11, 11, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:11:26,154 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-09-11 20:11:26,337 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:11:26,337 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:11:26,338 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:26,338 INFO L85 PathProgramCache]: Analyzing trace with hash -1180146986, now seen corresponding path program 1 times [2024-09-11 20:11:26,338 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:11:26,338 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [84886587] [2024-09-11 20:11:26,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:26,338 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:11:26,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:26,495 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2024-09-11 20:11:26,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:26,503 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2024-09-11 20:11:26,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:26,505 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-09-11 20:11:26,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:26,511 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2024-09-11 20:11:26,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:26,515 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2024-09-11 20:11:26,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:26,521 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2024-09-11 20:11:26,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:26,527 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2024-09-11 20:11:26,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:26,533 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2024-09-11 20:11:26,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:26,537 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2024-09-11 20:11:26,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:26,541 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2024-09-11 20:11:26,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:26,545 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2024-09-11 20:11:26,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:26,547 INFO L134 CoverageAnalysis]: Checked inductivity of 251 backedges. 26 proven. 5 refuted. 0 times theorem prover too weak. 220 trivial. 0 not checked. [2024-09-11 20:11:26,547 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:11:26,547 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [84886587] [2024-09-11 20:11:26,547 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [84886587] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:11:26,547 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1602339201] [2024-09-11 20:11:26,547 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:26,548 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:11:26,548 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:11:26,549 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:11:26,551 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-11 20:11:26,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:26,614 INFO L262 TraceCheckSpWp]: Trace formula consists of 178 conjuncts, 7 conjuncts are in the unsatisfiable core [2024-09-11 20:11:26,616 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:11:26,753 INFO L134 CoverageAnalysis]: Checked inductivity of 251 backedges. 121 proven. 0 refuted. 0 times theorem prover too weak. 130 trivial. 0 not checked. [2024-09-11 20:11:26,754 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-11 20:11:26,754 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1602339201] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:11:26,754 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:11:26,754 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 9 [2024-09-11 20:11:26,756 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [175785465] [2024-09-11 20:11:26,756 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:11:26,756 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-11 20:11:26,756 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:11:26,757 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-11 20:11:26,757 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2024-09-11 20:11:26,757 INFO L87 Difference]: Start difference. First operand 102 states and 128 transitions. Second operand has 5 states, 5 states have (on average 4.0) internal successors, (20), 5 states have internal predecessors, (20), 3 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2024-09-11 20:11:26,849 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:11:26,849 INFO L93 Difference]: Finished difference Result 139 states and 169 transitions. [2024-09-11 20:11:26,850 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-11 20:11:26,850 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 4.0) internal successors, (20), 5 states have internal predecessors, (20), 3 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 71 [2024-09-11 20:11:26,852 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:11:26,853 INFO L225 Difference]: With dead ends: 139 [2024-09-11 20:11:26,853 INFO L226 Difference]: Without dead ends: 95 [2024-09-11 20:11:26,854 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 99 GetRequests, 91 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2024-09-11 20:11:26,856 INFO L434 NwaCegarLoop]: 31 mSDtfsCounter, 4 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 38 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 91 SdHoareTripleChecker+Invalid, 39 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 38 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:11:26,856 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 91 Invalid, 39 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 38 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:11:26,857 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2024-09-11 20:11:26,888 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 92. [2024-09-11 20:11:26,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 57 states have (on average 1.1228070175438596) internal successors, (64), 60 states have internal predecessors, (64), 23 states have call successors, (23), 11 states have call predecessors, (23), 11 states have return successors, (22), 20 states have call predecessors, (22), 22 states have call successors, (22) [2024-09-11 20:11:26,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 109 transitions. [2024-09-11 20:11:26,890 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 109 transitions. Word has length 71 [2024-09-11 20:11:26,890 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:11:26,891 INFO L474 AbstractCegarLoop]: Abstraction has 92 states and 109 transitions. [2024-09-11 20:11:26,891 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 4.0) internal successors, (20), 5 states have internal predecessors, (20), 3 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2024-09-11 20:11:26,891 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:26,891 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 109 transitions. [2024-09-11 20:11:26,893 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2024-09-11 20:11:26,893 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:11:26,893 INFO L216 NwaCegarLoop]: trace histogram [12, 11, 11, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:11:26,911 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2024-09-11 20:11:27,094 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2024-09-11 20:11:27,095 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:11:27,095 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:27,096 INFO L85 PathProgramCache]: Analyzing trace with hash -1399001704, now seen corresponding path program 1 times [2024-09-11 20:11:27,096 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:11:27,096 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1997779416] [2024-09-11 20:11:27,096 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:27,096 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:11:27,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:27,674 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2024-09-11 20:11:27,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:27,685 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2024-09-11 20:11:27,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:27,695 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-09-11 20:11:27,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:27,714 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2024-09-11 20:11:27,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:27,783 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2024-09-11 20:11:27,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:27,836 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2024-09-11 20:11:27,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:27,886 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2024-09-11 20:11:27,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:27,892 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2024-09-11 20:11:27,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:27,898 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2024-09-11 20:11:27,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:27,902 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2024-09-11 20:11:27,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:27,905 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2024-09-11 20:11:27,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:27,909 INFO L134 CoverageAnalysis]: Checked inductivity of 251 backedges. 22 proven. 9 refuted. 0 times theorem prover too weak. 220 trivial. 0 not checked. [2024-09-11 20:11:27,909 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:11:27,909 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1997779416] [2024-09-11 20:11:27,909 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1997779416] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:11:27,909 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [304016755] [2024-09-11 20:11:27,909 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:27,910 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:11:27,910 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:11:27,911 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:11:27,912 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-11 20:11:27,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:11:27,962 INFO L262 TraceCheckSpWp]: Trace formula consists of 182 conjuncts, 19 conjuncts are in the unsatisfiable core [2024-09-11 20:11:27,964 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:11:28,122 INFO L134 CoverageAnalysis]: Checked inductivity of 251 backedges. 22 proven. 9 refuted. 0 times theorem prover too weak. 220 trivial. 0 not checked. [2024-09-11 20:11:28,122 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:11:28,481 INFO L134 CoverageAnalysis]: Checked inductivity of 251 backedges. 22 proven. 9 refuted. 0 times theorem prover too weak. 220 trivial. 0 not checked. [2024-09-11 20:11:28,481 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [304016755] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:11:28,481 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:11:28,482 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 15 [2024-09-11 20:11:28,483 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [960099893] [2024-09-11 20:11:28,483 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:11:28,485 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-09-11 20:11:28,485 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:11:28,486 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-09-11 20:11:28,486 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=39, Invalid=171, Unknown=0, NotChecked=0, Total=210 [2024-09-11 20:11:28,486 INFO L87 Difference]: Start difference. First operand 92 states and 109 transitions. Second operand has 15 states, 14 states have (on average 2.857142857142857) internal successors, (40), 13 states have internal predecessors, (40), 9 states have call successors, (35), 3 states have call predecessors, (35), 1 states have return successors, (32), 9 states have call predecessors, (32), 9 states have call successors, (32) [2024-09-11 20:11:28,778 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:11:28,778 INFO L93 Difference]: Finished difference Result 109 states and 124 transitions. [2024-09-11 20:11:28,778 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-09-11 20:11:28,779 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 14 states have (on average 2.857142857142857) internal successors, (40), 13 states have internal predecessors, (40), 9 states have call successors, (35), 3 states have call predecessors, (35), 1 states have return successors, (32), 9 states have call predecessors, (32), 9 states have call successors, (32) Word has length 71 [2024-09-11 20:11:28,779 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:11:28,780 INFO L225 Difference]: With dead ends: 109 [2024-09-11 20:11:28,780 INFO L226 Difference]: Without dead ends: 78 [2024-09-11 20:11:28,780 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 176 GetRequests, 155 SyntacticMatches, 2 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=87, Invalid=333, Unknown=0, NotChecked=0, Total=420 [2024-09-11 20:11:28,781 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 6 mSDsluCounter, 201 mSDsCounter, 0 mSdLazyCounter, 172 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 182 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 172 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:11:28,781 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 233 Invalid, 182 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 172 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:11:28,782 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2024-09-11 20:11:28,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 78. [2024-09-11 20:11:28,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 49 states have (on average 1.0816326530612246) internal successors, (53), 51 states have internal predecessors, (53), 18 states have call successors, (18), 10 states have call predecessors, (18), 10 states have return successors, (17), 16 states have call predecessors, (17), 17 states have call successors, (17) [2024-09-11 20:11:28,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 88 transitions. [2024-09-11 20:11:28,804 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 88 transitions. Word has length 71 [2024-09-11 20:11:28,804 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:11:28,804 INFO L474 AbstractCegarLoop]: Abstraction has 78 states and 88 transitions. [2024-09-11 20:11:28,804 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 14 states have (on average 2.857142857142857) internal successors, (40), 13 states have internal predecessors, (40), 9 states have call successors, (35), 3 states have call predecessors, (35), 1 states have return successors, (32), 9 states have call predecessors, (32), 9 states have call successors, (32) [2024-09-11 20:11:28,805 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:28,805 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 88 transitions. [2024-09-11 20:11:28,805 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2024-09-11 20:11:28,805 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:11:28,805 INFO L216 NwaCegarLoop]: trace histogram [14, 13, 13, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1] [2024-09-11 20:11:28,823 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2024-09-11 20:11:29,006 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:11:29,006 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:11:29,007 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:11:29,007 INFO L85 PathProgramCache]: Analyzing trace with hash -376584808, now seen corresponding path program 2 times [2024-09-11 20:11:29,007 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:11:29,007 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [255962813] [2024-09-11 20:11:29,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:11:29,007 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:11:29,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:11:29,046 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [952225859] [2024-09-11 20:11:29,046 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-11 20:11:29,046 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:11:29,046 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:11:29,048 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:11:29,060 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-11 20:11:29,122 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-11 20:11:29,123 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-11 20:11:29,124 INFO L262 TraceCheckSpWp]: Trace formula consists of 215 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-11 20:11:29,127 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:11:29,480 INFO L134 CoverageAnalysis]: Checked inductivity of 362 backedges. 46 proven. 40 refuted. 0 times theorem prover too weak. 276 trivial. 0 not checked. [2024-09-11 20:11:29,481 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:11:46,825 INFO L134 CoverageAnalysis]: Checked inductivity of 362 backedges. 46 proven. 40 refuted. 0 times theorem prover too weak. 276 trivial. 0 not checked. [2024-09-11 20:11:46,826 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:11:46,826 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [255962813] [2024-09-11 20:11:46,826 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:11:46,826 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [952225859] [2024-09-11 20:11:46,826 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [952225859] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:11:46,826 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-11 20:11:46,826 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13] total 22 [2024-09-11 20:11:46,827 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1010967110] [2024-09-11 20:11:46,827 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-11 20:11:46,827 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-09-11 20:11:46,827 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:11:46,828 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-09-11 20:11:46,828 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=92, Invalid=370, Unknown=0, NotChecked=0, Total=462 [2024-09-11 20:11:46,828 INFO L87 Difference]: Start difference. First operand 78 states and 88 transitions. Second operand has 22 states, 22 states have (on average 1.9545454545454546) internal successors, (43), 21 states have internal predecessors, (43), 11 states have call successors, (28), 3 states have call predecessors, (28), 2 states have return successors, (26), 9 states have call predecessors, (26), 9 states have call successors, (26) [2024-09-11 20:11:57,838 WARN L293 SmtUtils]: Spent 10.64s on a formula simplification. DAG size of input: 177 DAG size of output: 92 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-11 20:11:59,883 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.23s for a HTC check with result VALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=true, quantifiers [] [2024-09-11 20:12:01,300 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.19s for a HTC check with result VALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=true, quantifiers [] [2024-09-11 20:12:14,636 WARN L293 SmtUtils]: Spent 10.63s on a formula simplification. DAG size of input: 158 DAG size of output: 102 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-11 20:12:17,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:12:17,022 INFO L93 Difference]: Finished difference Result 156 states and 199 transitions. [2024-09-11 20:12:17,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2024-09-11 20:12:17,023 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 22 states have (on average 1.9545454545454546) internal successors, (43), 21 states have internal predecessors, (43), 11 states have call successors, (28), 3 states have call predecessors, (28), 2 states have return successors, (26), 9 states have call predecessors, (26), 9 states have call successors, (26) Word has length 85 [2024-09-11 20:12:17,023 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:12:17,024 INFO L225 Difference]: With dead ends: 156 [2024-09-11 20:12:17,024 INFO L226 Difference]: Without dead ends: 137 [2024-09-11 20:12:17,025 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 148 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 58 ImplicationChecksByTransitivity, 26.7s TimeCoverageRelationStatistics Valid=169, Invalid=587, Unknown=0, NotChecked=0, Total=756 [2024-09-11 20:12:17,025 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 48 mSDsluCounter, 272 mSDsCounter, 0 mSdLazyCounter, 414 mSolverCounterSat, 95 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 302 SdHoareTripleChecker+Invalid, 509 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 95 IncrementalHoareTripleChecker+Valid, 414 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.0s IncrementalHoareTripleChecker+Time [2024-09-11 20:12:17,026 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [54 Valid, 302 Invalid, 509 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [95 Valid, 414 Invalid, 0 Unknown, 0 Unchecked, 7.0s Time] [2024-09-11 20:12:17,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2024-09-11 20:12:17,082 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 133. [2024-09-11 20:12:17,082 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 133 states, 81 states have (on average 1.1481481481481481) internal successors, (93), 87 states have internal predecessors, (93), 38 states have call successors, (38), 13 states have call predecessors, (38), 13 states have return successors, (37), 32 states have call predecessors, (37), 37 states have call successors, (37) [2024-09-11 20:12:17,083 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133 states to 133 states and 168 transitions. [2024-09-11 20:12:17,083 INFO L78 Accepts]: Start accepts. Automaton has 133 states and 168 transitions. Word has length 85 [2024-09-11 20:12:17,084 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:12:17,084 INFO L474 AbstractCegarLoop]: Abstraction has 133 states and 168 transitions. [2024-09-11 20:12:17,084 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 22 states have (on average 1.9545454545454546) internal successors, (43), 21 states have internal predecessors, (43), 11 states have call successors, (28), 3 states have call predecessors, (28), 2 states have return successors, (26), 9 states have call predecessors, (26), 9 states have call successors, (26) [2024-09-11 20:12:17,084 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:12:17,084 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 168 transitions. [2024-09-11 20:12:17,085 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2024-09-11 20:12:17,085 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:12:17,085 INFO L216 NwaCegarLoop]: trace histogram [16, 15, 15, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:12:17,102 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2024-09-11 20:12:17,289 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:12:17,289 INFO L399 AbstractCegarLoop]: === Iteration 13 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:12:17,290 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:12:17,290 INFO L85 PathProgramCache]: Analyzing trace with hash 1552559470, now seen corresponding path program 1 times [2024-09-11 20:12:17,290 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:12:17,290 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [804290159] [2024-09-11 20:12:17,290 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:12:17,290 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:12:17,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:12:17,322 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [2080121724] [2024-09-11 20:12:17,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:12:17,322 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:12:17,323 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:12:17,324 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:12:17,329 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-11 20:12:17,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:17,395 INFO L262 TraceCheckSpWp]: Trace formula consists of 231 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-11 20:12:17,397 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:12:17,732 INFO L134 CoverageAnalysis]: Checked inductivity of 478 backedges. 32 proven. 68 refuted. 0 times theorem prover too weak. 378 trivial. 0 not checked. [2024-09-11 20:12:17,732 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:12:18,420 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:12:18,420 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [804290159] [2024-09-11 20:12:18,420 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:12:18,420 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2080121724] [2024-09-11 20:12:18,420 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2080121724] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:12:18,421 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:12:18,421 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14] total 14 [2024-09-11 20:12:18,421 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [618551892] [2024-09-11 20:12:18,421 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:12:18,421 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 14 states [2024-09-11 20:12:18,422 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:12:18,422 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2024-09-11 20:12:18,422 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=94, Invalid=326, Unknown=0, NotChecked=0, Total=420 [2024-09-11 20:12:18,423 INFO L87 Difference]: Start difference. First operand 133 states and 168 transitions. Second operand has 14 states, 13 states have (on average 2.0) internal successors, (26), 13 states have internal predecessors, (26), 6 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 5 states have call predecessors, (15), 5 states have call successors, (15) [2024-09-11 20:12:18,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:12:18,710 INFO L93 Difference]: Finished difference Result 145 states and 179 transitions. [2024-09-11 20:12:18,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2024-09-11 20:12:18,711 INFO L78 Accepts]: Start accepts. Automaton has has 14 states, 13 states have (on average 2.0) internal successors, (26), 13 states have internal predecessors, (26), 6 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 5 states have call predecessors, (15), 5 states have call successors, (15) Word has length 96 [2024-09-11 20:12:18,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:12:18,713 INFO L225 Difference]: With dead ends: 145 [2024-09-11 20:12:18,713 INFO L226 Difference]: Without dead ends: 143 [2024-09-11 20:12:18,714 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 128 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 60 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=101, Invalid=361, Unknown=0, NotChecked=0, Total=462 [2024-09-11 20:12:18,714 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 3 mSDsluCounter, 253 mSDsCounter, 0 mSdLazyCounter, 409 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4 SdHoareTripleChecker+Valid, 283 SdHoareTripleChecker+Invalid, 416 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 409 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-11 20:12:18,715 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [4 Valid, 283 Invalid, 416 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 409 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-11 20:12:18,715 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2024-09-11 20:12:18,778 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 142. [2024-09-11 20:12:18,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 87 states have (on average 1.1379310344827587) internal successors, (99), 94 states have internal predecessors, (99), 39 states have call successors, (39), 15 states have call predecessors, (39), 15 states have return successors, (38), 32 states have call predecessors, (38), 38 states have call successors, (38) [2024-09-11 20:12:18,780 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 176 transitions. [2024-09-11 20:12:18,780 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 176 transitions. Word has length 96 [2024-09-11 20:12:18,781 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:12:18,781 INFO L474 AbstractCegarLoop]: Abstraction has 142 states and 176 transitions. [2024-09-11 20:12:18,781 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 14 states, 13 states have (on average 2.0) internal successors, (26), 13 states have internal predecessors, (26), 6 states have call successors, (16), 2 states have call predecessors, (16), 2 states have return successors, (15), 5 states have call predecessors, (15), 5 states have call successors, (15) [2024-09-11 20:12:18,781 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:12:18,781 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 176 transitions. [2024-09-11 20:12:18,782 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 97 [2024-09-11 20:12:18,782 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:12:18,782 INFO L216 NwaCegarLoop]: trace histogram [16, 15, 15, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:12:18,800 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2024-09-11 20:12:18,983 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2024-09-11 20:12:18,983 INFO L399 AbstractCegarLoop]: === Iteration 14 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:12:18,983 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:12:18,984 INFO L85 PathProgramCache]: Analyzing trace with hash -1154059924, now seen corresponding path program 2 times [2024-09-11 20:12:18,984 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:12:18,984 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1909744241] [2024-09-11 20:12:18,984 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:12:18,984 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:12:19,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:12:19,004 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1019619175] [2024-09-11 20:12:19,004 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-11 20:12:19,005 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:12:19,005 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:12:19,006 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:12:19,008 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-09-11 20:12:19,071 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-11 20:12:19,071 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-11 20:12:19,073 INFO L262 TraceCheckSpWp]: Trace formula consists of 235 conjuncts, 50 conjuncts are in the unsatisfiable core [2024-09-11 20:12:19,075 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:12:19,419 INFO L134 CoverageAnalysis]: Checked inductivity of 478 backedges. 50 proven. 50 refuted. 0 times theorem prover too weak. 378 trivial. 0 not checked. [2024-09-11 20:12:19,419 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:12:21,720 INFO L134 CoverageAnalysis]: Checked inductivity of 478 backedges. 50 proven. 50 refuted. 0 times theorem prover too weak. 378 trivial. 0 not checked. [2024-09-11 20:12:21,720 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:12:21,721 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1909744241] [2024-09-11 20:12:21,721 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:12:21,721 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1019619175] [2024-09-11 20:12:21,721 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1019619175] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:12:21,721 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-11 20:12:21,721 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 15] total 27 [2024-09-11 20:12:21,721 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [258361317] [2024-09-11 20:12:21,721 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-11 20:12:21,721 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2024-09-11 20:12:21,721 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:12:21,722 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2024-09-11 20:12:21,722 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=155, Invalid=547, Unknown=0, NotChecked=0, Total=702 [2024-09-11 20:12:21,723 INFO L87 Difference]: Start difference. First operand 142 states and 176 transitions. Second operand has 27 states, 25 states have (on average 1.8) internal successors, (45), 25 states have internal predecessors, (45), 15 states have call successors, (32), 3 states have call predecessors, (32), 2 states have return successors, (30), 13 states have call predecessors, (30), 13 states have call successors, (30) [2024-09-11 20:12:25,694 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.61s for a HTC check with result VALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=true, quantifiers [] [2024-09-11 20:12:27,022 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.32s for a HTC check with result VALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=true, quantifiers [] [2024-09-11 20:12:27,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:12:27,420 INFO L93 Difference]: Finished difference Result 195 states and 251 transitions. [2024-09-11 20:12:27,421 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 24 states. [2024-09-11 20:12:27,421 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 25 states have (on average 1.8) internal successors, (45), 25 states have internal predecessors, (45), 15 states have call successors, (32), 3 states have call predecessors, (32), 2 states have return successors, (30), 13 states have call predecessors, (30), 13 states have call successors, (30) Word has length 96 [2024-09-11 20:12:27,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:12:27,422 INFO L225 Difference]: With dead ends: 195 [2024-09-11 20:12:27,422 INFO L226 Difference]: Without dead ends: 150 [2024-09-11 20:12:27,423 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 197 GetRequests, 165 SyntacticMatches, 0 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 170 ImplicationChecksByTransitivity, 2.3s TimeCoverageRelationStatistics Valid=270, Invalid=852, Unknown=0, NotChecked=0, Total=1122 [2024-09-11 20:12:27,424 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 51 mSDsluCounter, 263 mSDsCounter, 0 mSdLazyCounter, 533 mSolverCounterSat, 113 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 56 SdHoareTripleChecker+Valid, 293 SdHoareTripleChecker+Invalid, 646 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 113 IncrementalHoareTripleChecker+Valid, 533 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2024-09-11 20:12:27,424 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [56 Valid, 293 Invalid, 646 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [113 Valid, 533 Invalid, 0 Unknown, 0 Unchecked, 4.2s Time] [2024-09-11 20:12:27,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 150 states. [2024-09-11 20:12:27,472 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 150 to 128. [2024-09-11 20:12:27,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 128 states, 79 states have (on average 1.1012658227848102) internal successors, (87), 84 states have internal predecessors, (87), 33 states have call successors, (33), 15 states have call predecessors, (33), 15 states have return successors, (32), 28 states have call predecessors, (32), 32 states have call successors, (32) [2024-09-11 20:12:27,473 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 128 states to 128 states and 152 transitions. [2024-09-11 20:12:27,474 INFO L78 Accepts]: Start accepts. Automaton has 128 states and 152 transitions. Word has length 96 [2024-09-11 20:12:27,474 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:12:27,474 INFO L474 AbstractCegarLoop]: Abstraction has 128 states and 152 transitions. [2024-09-11 20:12:27,474 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 25 states have (on average 1.8) internal successors, (45), 25 states have internal predecessors, (45), 15 states have call successors, (32), 3 states have call predecessors, (32), 2 states have return successors, (30), 13 states have call predecessors, (30), 13 states have call successors, (30) [2024-09-11 20:12:27,475 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:12:27,475 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 152 transitions. [2024-09-11 20:12:27,475 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 102 [2024-09-11 20:12:27,476 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:12:27,476 INFO L216 NwaCegarLoop]: trace histogram [17, 16, 16, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:12:27,492 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2024-09-11 20:12:27,680 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2024-09-11 20:12:27,681 INFO L399 AbstractCegarLoop]: === Iteration 15 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:12:27,681 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:12:27,681 INFO L85 PathProgramCache]: Analyzing trace with hash -2060413457, now seen corresponding path program 1 times [2024-09-11 20:12:27,681 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:12:27,681 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1211266950] [2024-09-11 20:12:27,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:12:27,682 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:12:27,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,273 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2024-09-11 20:12:28,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,282 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2024-09-11 20:12:28,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,289 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-09-11 20:12:28,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,297 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2024-09-11 20:12:28,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,304 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2024-09-11 20:12:28,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,312 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2024-09-11 20:12:28,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,319 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2024-09-11 20:12:28,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,325 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2024-09-11 20:12:28,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,331 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2024-09-11 20:12:28,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,337 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2024-09-11 20:12:28,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,342 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2024-09-11 20:12:28,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,347 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2024-09-11 20:12:28,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,365 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2024-09-11 20:12:28,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,370 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2024-09-11 20:12:28,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,373 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 86 [2024-09-11 20:12:28,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,377 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 92 [2024-09-11 20:12:28,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,381 INFO L134 CoverageAnalysis]: Checked inductivity of 540 backedges. 32 proven. 28 refuted. 0 times theorem prover too weak. 480 trivial. 0 not checked. [2024-09-11 20:12:28,381 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:12:28,381 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1211266950] [2024-09-11 20:12:28,382 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1211266950] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:12:28,382 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1608561883] [2024-09-11 20:12:28,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:12:28,382 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:12:28,382 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:12:28,384 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:12:28,388 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-09-11 20:12:28,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:28,452 INFO L262 TraceCheckSpWp]: Trace formula consists of 240 conjuncts, 41 conjuncts are in the unsatisfiable core [2024-09-11 20:12:28,454 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:12:28,803 INFO L134 CoverageAnalysis]: Checked inductivity of 540 backedges. 34 proven. 71 refuted. 0 times theorem prover too weak. 435 trivial. 0 not checked. [2024-09-11 20:12:28,804 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:12:30,435 INFO L134 CoverageAnalysis]: Checked inductivity of 540 backedges. 34 proven. 71 refuted. 0 times theorem prover too weak. 435 trivial. 0 not checked. [2024-09-11 20:12:30,435 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1608561883] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:12:30,435 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:12:30,435 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 15, 14] total 32 [2024-09-11 20:12:30,435 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1998860828] [2024-09-11 20:12:30,435 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:12:30,436 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2024-09-11 20:12:30,436 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:12:30,437 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2024-09-11 20:12:30,437 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=153, Invalid=839, Unknown=0, NotChecked=0, Total=992 [2024-09-11 20:12:30,437 INFO L87 Difference]: Start difference. First operand 128 states and 152 transitions. Second operand has 32 states, 31 states have (on average 1.935483870967742) internal successors, (60), 29 states have internal predecessors, (60), 19 states have call successors, (49), 3 states have call predecessors, (49), 2 states have return successors, (47), 19 states have call predecessors, (47), 19 states have call successors, (47) [2024-09-11 20:12:32,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:12:32,216 INFO L93 Difference]: Finished difference Result 190 states and 238 transitions. [2024-09-11 20:12:32,216 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2024-09-11 20:12:32,216 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 31 states have (on average 1.935483870967742) internal successors, (60), 29 states have internal predecessors, (60), 19 states have call successors, (49), 3 states have call predecessors, (49), 2 states have return successors, (47), 19 states have call predecessors, (47), 19 states have call successors, (47) Word has length 101 [2024-09-11 20:12:32,216 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:12:32,218 INFO L225 Difference]: With dead ends: 190 [2024-09-11 20:12:32,218 INFO L226 Difference]: Without dead ends: 155 [2024-09-11 20:12:32,219 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 214 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 599 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=455, Invalid=2095, Unknown=0, NotChecked=0, Total=2550 [2024-09-11 20:12:32,219 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 43 mSDsluCounter, 459 mSDsCounter, 0 mSdLazyCounter, 612 mSolverCounterSat, 132 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 487 SdHoareTripleChecker+Invalid, 744 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 132 IncrementalHoareTripleChecker+Valid, 612 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-09-11 20:12:32,219 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 487 Invalid, 744 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [132 Valid, 612 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2024-09-11 20:12:32,220 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 155 states. [2024-09-11 20:12:32,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 155 to 146. [2024-09-11 20:12:32,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 146 states, 87 states have (on average 1.1264367816091954) internal successors, (98), 92 states have internal predecessors, (98), 42 states have call successors, (42), 16 states have call predecessors, (42), 16 states have return successors, (40), 37 states have call predecessors, (40), 40 states have call successors, (40) [2024-09-11 20:12:32,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 146 states to 146 states and 180 transitions. [2024-09-11 20:12:32,328 INFO L78 Accepts]: Start accepts. Automaton has 146 states and 180 transitions. Word has length 101 [2024-09-11 20:12:32,329 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:12:32,329 INFO L474 AbstractCegarLoop]: Abstraction has 146 states and 180 transitions. [2024-09-11 20:12:32,329 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 31 states have (on average 1.935483870967742) internal successors, (60), 29 states have internal predecessors, (60), 19 states have call successors, (49), 3 states have call predecessors, (49), 2 states have return successors, (47), 19 states have call predecessors, (47), 19 states have call successors, (47) [2024-09-11 20:12:32,329 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:12:32,330 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 180 transitions. [2024-09-11 20:12:32,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2024-09-11 20:12:32,330 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:12:32,330 INFO L216 NwaCegarLoop]: trace histogram [19, 18, 18, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:12:32,343 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2024-09-11 20:12:32,531 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2024-09-11 20:12:32,531 INFO L399 AbstractCegarLoop]: === Iteration 16 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:12:32,531 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:12:32,532 INFO L85 PathProgramCache]: Analyzing trace with hash 2077808773, now seen corresponding path program 2 times [2024-09-11 20:12:32,532 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:12:32,532 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [287367658] [2024-09-11 20:12:32,532 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:12:32,532 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:12:32,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,675 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2024-09-11 20:12:32,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,678 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 9 [2024-09-11 20:12:32,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,683 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-09-11 20:12:32,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,685 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2024-09-11 20:12:32,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,687 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2024-09-11 20:12:32,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,689 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2024-09-11 20:12:32,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,691 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2024-09-11 20:12:32,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,693 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2024-09-11 20:12:32,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,694 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2024-09-11 20:12:32,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,697 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2024-09-11 20:12:32,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,699 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2024-09-11 20:12:32,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,700 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2024-09-11 20:12:32,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,703 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 72 [2024-09-11 20:12:32,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,705 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 77 [2024-09-11 20:12:32,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,707 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85 [2024-09-11 20:12:32,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,709 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2024-09-11 20:12:32,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,711 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 98 [2024-09-11 20:12:32,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,713 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2024-09-11 20:12:32,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:32,717 INFO L134 CoverageAnalysis]: Checked inductivity of 691 backedges. 51 proven. 28 refuted. 0 times theorem prover too weak. 612 trivial. 0 not checked. [2024-09-11 20:12:32,718 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:12:32,718 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [287367658] [2024-09-11 20:12:32,718 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [287367658] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:12:32,718 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1006973154] [2024-09-11 20:12:32,718 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-11 20:12:32,718 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:12:32,718 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:12:32,720 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:12:32,724 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-09-11 20:12:32,786 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-11 20:12:32,787 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-11 20:12:32,788 INFO L262 TraceCheckSpWp]: Trace formula consists of 264 conjuncts, 7 conjuncts are in the unsatisfiable core [2024-09-11 20:12:32,789 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:12:32,842 INFO L134 CoverageAnalysis]: Checked inductivity of 691 backedges. 66 proven. 13 refuted. 0 times theorem prover too weak. 612 trivial. 0 not checked. [2024-09-11 20:12:32,843 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:12:32,986 INFO L134 CoverageAnalysis]: Checked inductivity of 691 backedges. 66 proven. 13 refuted. 0 times theorem prover too weak. 612 trivial. 0 not checked. [2024-09-11 20:12:32,986 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1006973154] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:12:32,986 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:12:32,986 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 6, 6] total 9 [2024-09-11 20:12:32,987 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [949321941] [2024-09-11 20:12:32,987 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:12:32,987 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2024-09-11 20:12:32,987 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:12:32,988 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2024-09-11 20:12:32,988 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=44, Unknown=0, NotChecked=0, Total=72 [2024-09-11 20:12:32,988 INFO L87 Difference]: Start difference. First operand 146 states and 180 transitions. Second operand has 9 states, 9 states have (on average 3.888888888888889) internal successors, (35), 9 states have internal predecessors, (35), 8 states have call successors, (26), 2 states have call predecessors, (26), 1 states have return successors, (25), 7 states have call predecessors, (25), 7 states have call successors, (25) [2024-09-11 20:12:33,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:12:33,200 INFO L93 Difference]: Finished difference Result 155 states and 190 transitions. [2024-09-11 20:12:33,200 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-09-11 20:12:33,201 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 3.888888888888889) internal successors, (35), 9 states have internal predecessors, (35), 8 states have call successors, (26), 2 states have call predecessors, (26), 1 states have return successors, (25), 7 states have call predecessors, (25), 7 states have call successors, (25) Word has length 113 [2024-09-11 20:12:33,201 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:12:33,202 INFO L225 Difference]: With dead ends: 155 [2024-09-11 20:12:33,202 INFO L226 Difference]: Without dead ends: 141 [2024-09-11 20:12:33,203 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 268 GetRequests, 255 SyntacticMatches, 6 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=28, Invalid=44, Unknown=0, NotChecked=0, Total=72 [2024-09-11 20:12:33,203 INFO L434 NwaCegarLoop]: 45 mSDtfsCounter, 6 mSDsluCounter, 132 mSDsCounter, 0 mSdLazyCounter, 67 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 177 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 67 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:12:33,204 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 177 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 67 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:12:33,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 141 states. [2024-09-11 20:12:33,263 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 141 to 110. [2024-09-11 20:12:33,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 70 states have (on average 1.0714285714285714) internal successors, (75), 73 states have internal predecessors, (75), 24 states have call successors, (24), 15 states have call predecessors, (24), 15 states have return successors, (23), 21 states have call predecessors, (23), 23 states have call successors, (23) [2024-09-11 20:12:33,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 122 transitions. [2024-09-11 20:12:33,265 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 122 transitions. Word has length 113 [2024-09-11 20:12:33,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:12:33,266 INFO L474 AbstractCegarLoop]: Abstraction has 110 states and 122 transitions. [2024-09-11 20:12:33,266 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 3.888888888888889) internal successors, (35), 9 states have internal predecessors, (35), 8 states have call successors, (26), 2 states have call predecessors, (26), 1 states have return successors, (25), 7 states have call predecessors, (25), 7 states have call successors, (25) [2024-09-11 20:12:33,266 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:12:33,266 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 122 transitions. [2024-09-11 20:12:33,268 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2024-09-11 20:12:33,268 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:12:33,268 INFO L216 NwaCegarLoop]: trace histogram [19, 18, 18, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:12:33,284 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2024-09-11 20:12:33,468 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2024-09-11 20:12:33,469 INFO L399 AbstractCegarLoop]: === Iteration 17 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:12:33,469 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:12:33,469 INFO L85 PathProgramCache]: Analyzing trace with hash 395227745, now seen corresponding path program 1 times [2024-09-11 20:12:33,469 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:12:33,469 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [848353484] [2024-09-11 20:12:33,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:12:33,469 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:12:33,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:12:33,510 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1438187395] [2024-09-11 20:12:33,510 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:12:33,510 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:12:33,510 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:12:33,514 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:12:33,515 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2024-09-11 20:12:33,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:12:33,582 INFO L262 TraceCheckSpWp]: Trace formula consists of 273 conjuncts, 55 conjuncts are in the unsatisfiable core [2024-09-11 20:12:33,584 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:12:34,105 INFO L134 CoverageAnalysis]: Checked inductivity of 699 backedges. 38 proven. 100 refuted. 0 times theorem prover too weak. 561 trivial. 0 not checked. [2024-09-11 20:12:34,105 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:13:56,693 INFO L134 CoverageAnalysis]: Checked inductivity of 699 backedges. 38 proven. 100 refuted. 0 times theorem prover too weak. 561 trivial. 0 not checked. [2024-09-11 20:13:56,693 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:13:56,693 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [848353484] [2024-09-11 20:13:56,693 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:13:56,694 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1438187395] [2024-09-11 20:13:56,694 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1438187395] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:13:56,694 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-11 20:13:56,694 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 16] total 29 [2024-09-11 20:13:56,694 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1672572846] [2024-09-11 20:13:56,694 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-11 20:13:56,694 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2024-09-11 20:13:56,694 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:13:56,695 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2024-09-11 20:13:56,695 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=169, Invalid=643, Unknown=0, NotChecked=0, Total=812 [2024-09-11 20:13:56,695 INFO L87 Difference]: Start difference. First operand 110 states and 122 transitions. Second operand has 29 states, 29 states have (on average 1.8275862068965518) internal successors, (53), 27 states have internal predecessors, (53), 15 states have call successors, (38), 3 states have call predecessors, (38), 2 states have return successors, (36), 13 states have call predecessors, (36), 13 states have call successors, (36) [2024-09-11 20:14:48,597 WARN L293 SmtUtils]: Spent 51.16s on a formula simplification. DAG size of input: 569 DAG size of output: 130 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-11 20:14:50,915 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.17s for a HTC check with result VALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=true, quantifiers [] [2024-09-11 20:14:55,096 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.01s for a HTC check with result INVALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=true, quantifiers [] [2024-09-11 20:14:57,899 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.67s for a HTC check with result VALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=true, quantifiers [] [2024-09-11 20:15:08,597 WARN L293 SmtUtils]: Spent 9.46s on a formula simplification. DAG size of input: 179 DAG size of output: 111 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-11 20:15:21,403 WARN L293 SmtUtils]: Spent 10.50s on a formula simplification. DAG size of input: 143 DAG size of output: 113 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-11 20:15:23,209 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.78s for a HTC check with result INVALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=true, quantifiers [] [2024-09-11 20:15:37,542 WARN L293 SmtUtils]: Spent 9.72s on a formula simplification. DAG size of input: 176 DAG size of output: 85 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-11 20:15:46,547 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.53s for a HTC check with result INVALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=true, quantifiers []