./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/recursified_nla-digbench/recursified_prod4br-ll.c --full-output --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version a9b967e5 Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/recursified_nla-digbench/recursified_prod4br-ll.c -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 96f1211cbeeae798f0ae4041c6e80d5023e7b1c38257b583d7afbb4e6848597b --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-a9b967e-m [2024-09-11 20:39:47,893 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-11 20:39:47,946 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-11 20:39:47,951 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-11 20:39:47,951 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-11 20:39:47,984 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-11 20:39:47,985 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-11 20:39:47,985 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-11 20:39:47,986 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-11 20:39:47,988 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-11 20:39:47,988 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-11 20:39:47,989 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-11 20:39:47,989 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-11 20:39:47,989 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-11 20:39:47,989 INFO L153 SettingsManager]: * Use SBE=true [2024-09-11 20:39:47,990 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-11 20:39:47,990 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-11 20:39:47,990 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-11 20:39:47,991 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-11 20:39:47,998 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-11 20:39:47,999 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-11 20:39:47,999 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-11 20:39:47,999 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-11 20:39:47,999 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-11 20:39:47,999 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-11 20:39:48,000 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-11 20:39:48,000 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-11 20:39:48,000 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-11 20:39:48,000 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-11 20:39:48,000 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-11 20:39:48,000 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-11 20:39:48,001 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-11 20:39:48,001 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-11 20:39:48,001 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-11 20:39:48,001 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-11 20:39:48,002 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-11 20:39:48,002 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-11 20:39:48,002 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-11 20:39:48,002 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-11 20:39:48,003 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-11 20:39:48,003 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-11 20:39:48,003 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-11 20:39:48,003 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 96f1211cbeeae798f0ae4041c6e80d5023e7b1c38257b583d7afbb4e6848597b Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 [2024-09-11 20:39:48,176 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-11 20:39:48,197 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-11 20:39:48,199 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-11 20:39:48,199 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-11 20:39:48,200 INFO L274 PluginConnector]: CDTParser initialized [2024-09-11 20:39:48,200 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/recursified_nla-digbench/recursified_prod4br-ll.c [2024-09-11 20:39:49,362 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-11 20:39:49,506 INFO L384 CDTParser]: Found 1 translation units. [2024-09-11 20:39:49,507 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_prod4br-ll.c [2024-09-11 20:39:49,513 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/057249c8d/cb41ad892eb94b0bb4e67e10cde534ef/FLAG726ecaa4e [2024-09-11 20:39:49,927 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/057249c8d/cb41ad892eb94b0bb4e67e10cde534ef [2024-09-11 20:39:49,929 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-11 20:39:49,930 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-11 20:39:49,931 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-11 20:39:49,931 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-11 20:39:49,935 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-11 20:39:49,936 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.09 08:39:49" (1/1) ... [2024-09-11 20:39:49,937 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@22e0fe1a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:49, skipping insertion in model container [2024-09-11 20:39:49,937 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 11.09 08:39:49" (1/1) ... [2024-09-11 20:39:49,955 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-11 20:39:50,061 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_prod4br-ll.c[1060,1073] [2024-09-11 20:39:50,077 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-11 20:39:50,087 INFO L200 MainTranslator]: Completed pre-run [2024-09-11 20:39:50,095 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursified_nla-digbench/recursified_prod4br-ll.c[1060,1073] [2024-09-11 20:39:50,105 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-11 20:39:50,116 INFO L204 MainTranslator]: Completed translation [2024-09-11 20:39:50,116 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50 WrapperNode [2024-09-11 20:39:50,116 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-11 20:39:50,117 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-11 20:39:50,117 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-11 20:39:50,117 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-11 20:39:50,122 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50" (1/1) ... [2024-09-11 20:39:50,127 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50" (1/1) ... [2024-09-11 20:39:50,140 INFO L138 Inliner]: procedures = 16, calls = 86, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 76 [2024-09-11 20:39:50,141 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-11 20:39:50,141 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-11 20:39:50,141 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-11 20:39:50,142 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-11 20:39:50,149 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50" (1/1) ... [2024-09-11 20:39:50,150 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50" (1/1) ... [2024-09-11 20:39:50,151 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50" (1/1) ... [2024-09-11 20:39:50,167 INFO L175 MemorySlicer]: Split 57 memory accesses to 7 slices as follows [2, 4, 15, 9, 15, 7, 5]. 26 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2, 0, 0, 0, 0, 0, 0]. The 16 writes are split as follows [0, 1, 4, 4, 4, 2, 1]. [2024-09-11 20:39:50,168 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50" (1/1) ... [2024-09-11 20:39:50,168 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50" (1/1) ... [2024-09-11 20:39:50,174 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50" (1/1) ... [2024-09-11 20:39:50,176 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50" (1/1) ... [2024-09-11 20:39:50,177 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50" (1/1) ... [2024-09-11 20:39:50,178 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50" (1/1) ... [2024-09-11 20:39:50,180 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-11 20:39:50,181 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-11 20:39:50,181 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-11 20:39:50,181 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-11 20:39:50,182 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50" (1/1) ... [2024-09-11 20:39:50,192 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-11 20:39:50,200 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:39:50,213 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-11 20:39:50,215 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-11 20:39:50,248 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-11 20:39:50,248 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-11 20:39:50,249 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-11 20:39:50,249 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-09-11 20:39:50,249 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-09-11 20:39:50,249 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-09-11 20:39:50,249 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-09-11 20:39:50,249 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-09-11 20:39:50,249 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-09-11 20:39:50,249 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-09-11 20:39:50,249 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-09-11 20:39:50,250 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-09-11 20:39:50,250 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2024-09-11 20:39:50,250 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2024-09-11 20:39:50,250 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#5 [2024-09-11 20:39:50,250 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#6 [2024-09-11 20:39:50,250 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-11 20:39:50,251 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-11 20:39:50,252 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-09-11 20:39:50,252 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-09-11 20:39:50,252 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-09-11 20:39:50,252 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2024-09-11 20:39:50,252 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2024-09-11 20:39:50,253 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#5 [2024-09-11 20:39:50,253 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#6 [2024-09-11 20:39:50,253 INFO L130 BoogieDeclarations]: Found specification of procedure func_to_recursive_line_0_to_51_0 [2024-09-11 20:39:50,253 INFO L138 BoogieDeclarations]: Found implementation of procedure func_to_recursive_line_0_to_51_0 [2024-09-11 20:39:50,253 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-11 20:39:50,254 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-11 20:39:50,254 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-09-11 20:39:50,354 INFO L242 CfgBuilder]: Building ICFG [2024-09-11 20:39:50,356 INFO L268 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-11 20:39:50,593 INFO L? ?]: Removed 20 outVars from TransFormulas that were not future-live. [2024-09-11 20:39:50,593 INFO L291 CfgBuilder]: Performing block encoding [2024-09-11 20:39:50,622 INFO L313 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-11 20:39:50,622 INFO L318 CfgBuilder]: Removed 1 assume(true) statements. [2024-09-11 20:39:50,623 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.09 08:39:50 BoogieIcfgContainer [2024-09-11 20:39:50,623 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-11 20:39:50,625 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-11 20:39:50,625 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-11 20:39:50,627 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-11 20:39:50,628 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 11.09 08:39:49" (1/3) ... [2024-09-11 20:39:50,628 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7bdec784 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.09 08:39:50, skipping insertion in model container [2024-09-11 20:39:50,629 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 11.09 08:39:50" (2/3) ... [2024-09-11 20:39:50,629 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7bdec784 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 11.09 08:39:50, skipping insertion in model container [2024-09-11 20:39:50,629 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 11.09 08:39:50" (3/3) ... [2024-09-11 20:39:50,630 INFO L112 eAbstractionObserver]: Analyzing ICFG recursified_prod4br-ll.c [2024-09-11 20:39:50,642 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-11 20:39:50,642 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-11 20:39:50,684 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-11 20:39:50,692 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@50ddf596, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-11 20:39:50,692 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-11 20:39:50,695 INFO L276 IsEmpty]: Start isEmpty. Operand has 31 states, 22 states have (on average 1.5454545454545454) internal successors, (34), 24 states have internal predecessors, (34), 5 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:39:50,701 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2024-09-11 20:39:50,701 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:39:50,701 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:39:50,702 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:39:50,705 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:39:50,706 INFO L85 PathProgramCache]: Analyzing trace with hash 2057612999, now seen corresponding path program 1 times [2024-09-11 20:39:50,713 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:39:50,713 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [873698276] [2024-09-11 20:39:50,714 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:39:50,714 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:39:50,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:39:50,883 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-11 20:39:50,883 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:39:50,884 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [873698276] [2024-09-11 20:39:50,884 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [873698276] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:39:50,884 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-11 20:39:50,885 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-09-11 20:39:50,886 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1314925626] [2024-09-11 20:39:50,886 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:39:50,889 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-09-11 20:39:50,889 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:39:50,909 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-09-11 20:39:50,910 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-11 20:39:50,912 INFO L87 Difference]: Start difference. First operand has 31 states, 22 states have (on average 1.5454545454545454) internal successors, (34), 24 states have internal predecessors, (34), 5 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Second operand has 2 states, 2 states have (on average 4.0) internal successors, (8), 2 states have internal predecessors, (8), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-11 20:39:50,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:39:50,938 INFO L93 Difference]: Finished difference Result 60 states and 90 transitions. [2024-09-11 20:39:50,939 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-09-11 20:39:50,940 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 4.0) internal successors, (8), 2 states have internal predecessors, (8), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2024-09-11 20:39:50,940 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:39:50,945 INFO L225 Difference]: With dead ends: 60 [2024-09-11 20:39:50,945 INFO L226 Difference]: Without dead ends: 29 [2024-09-11 20:39:50,953 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-11 20:39:50,956 INFO L434 NwaCegarLoop]: 39 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 39 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 2 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-11 20:39:50,956 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 39 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 2 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-11 20:39:50,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29 states. [2024-09-11 20:39:51,015 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29 to 29. [2024-09-11 20:39:51,016 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 23 states have internal predecessors, (30), 5 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-11 20:39:51,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 39 transitions. [2024-09-11 20:39:51,023 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 39 transitions. Word has length 10 [2024-09-11 20:39:51,024 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:39:51,024 INFO L474 AbstractCegarLoop]: Abstraction has 29 states and 39 transitions. [2024-09-11 20:39:51,024 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 4.0) internal successors, (8), 2 states have internal predecessors, (8), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-11 20:39:51,025 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:39:51,025 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 39 transitions. [2024-09-11 20:39:51,025 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2024-09-11 20:39:51,026 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:39:51,026 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:39:51,026 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-11 20:39:51,027 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:39:51,028 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:39:51,028 INFO L85 PathProgramCache]: Analyzing trace with hash -1557295927, now seen corresponding path program 1 times [2024-09-11 20:39:51,028 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:39:51,029 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [348595922] [2024-09-11 20:39:51,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:39:51,029 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:39:51,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:39:51,083 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1714863194] [2024-09-11 20:39:51,085 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:39:51,086 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:39:51,086 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:39:51,087 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:39:51,089 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-11 20:39:51,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:39:51,205 INFO L262 TraceCheckSpWp]: Trace formula consists of 191 conjuncts, 91 conjuncts are in the unsatisfiable core [2024-09-11 20:39:51,212 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:39:51,248 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:39:51,251 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:39:51,267 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:39:51,273 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:39:51,279 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:39:51,285 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:39:51,450 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:39:51,455 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-11 20:39:51,465 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:39:51,472 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-11 20:39:51,522 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-11 20:39:51,522 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-11 20:39:51,522 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:39:51,522 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [348595922] [2024-09-11 20:39:51,523 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:39:51,523 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1714863194] [2024-09-11 20:39:51,523 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1714863194] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:39:51,523 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-11 20:39:51,523 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-09-11 20:39:51,524 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [536492807] [2024-09-11 20:39:51,525 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:39:51,525 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-09-11 20:39:51,525 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:39:51,526 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-09-11 20:39:51,527 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2024-09-11 20:39:51,527 INFO L87 Difference]: Start difference. First operand 29 states and 39 transitions. Second operand has 8 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-11 20:39:51,773 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:39:51,773 INFO L93 Difference]: Finished difference Result 50 states and 68 transitions. [2024-09-11 20:39:51,774 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-11 20:39:51,775 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2024-09-11 20:39:51,775 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:39:51,776 INFO L225 Difference]: With dead ends: 50 [2024-09-11 20:39:51,776 INFO L226 Difference]: Without dead ends: 48 [2024-09-11 20:39:51,777 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=83, Unknown=0, NotChecked=0, Total=110 [2024-09-11 20:39:51,777 INFO L434 NwaCegarLoop]: 19 mSDtfsCounter, 34 mSDsluCounter, 101 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 34 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-11 20:39:51,779 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [34 Valid, 120 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-11 20:39:51,779 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2024-09-11 20:39:51,789 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 41. [2024-09-11 20:39:51,789 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 30 states have (on average 1.3666666666666667) internal successors, (41), 32 states have internal predecessors, (41), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (6), 5 states have call predecessors, (6), 5 states have call successors, (6) [2024-09-11 20:39:51,792 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 53 transitions. [2024-09-11 20:39:51,793 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 53 transitions. Word has length 10 [2024-09-11 20:39:51,793 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:39:51,793 INFO L474 AbstractCegarLoop]: Abstraction has 41 states and 53 transitions. [2024-09-11 20:39:51,793 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 6 states have (on average 1.3333333333333333) internal successors, (8), 6 states have internal predecessors, (8), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-11 20:39:51,796 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:39:51,796 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 53 transitions. [2024-09-11 20:39:51,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2024-09-11 20:39:51,796 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:39:51,796 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:39:51,817 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-09-11 20:39:51,997 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:39:52,001 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:39:52,002 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:39:52,002 INFO L85 PathProgramCache]: Analyzing trace with hash -1474177464, now seen corresponding path program 1 times [2024-09-11 20:39:52,002 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:39:52,002 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1096333067] [2024-09-11 20:39:52,002 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:39:52,002 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:39:52,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:39:52,310 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:39:52,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:39:52,372 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:39:52,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:39:52,376 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-11 20:39:52,377 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:39:52,377 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1096333067] [2024-09-11 20:39:52,377 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1096333067] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:39:52,377 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-11 20:39:52,377 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2024-09-11 20:39:52,377 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2084171680] [2024-09-11 20:39:52,377 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:39:52,378 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2024-09-11 20:39:52,378 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:39:52,378 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2024-09-11 20:39:52,379 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2024-09-11 20:39:52,379 INFO L87 Difference]: Start difference. First operand 41 states and 53 transitions. Second operand has 9 states, 8 states have (on average 2.0) internal successors, (16), 8 states have internal predecessors, (16), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-11 20:39:52,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:39:52,568 INFO L93 Difference]: Finished difference Result 65 states and 86 transitions. [2024-09-11 20:39:52,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-09-11 20:39:52,568 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 2.0) internal successors, (16), 8 states have internal predecessors, (16), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 21 [2024-09-11 20:39:52,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:39:52,570 INFO L225 Difference]: With dead ends: 65 [2024-09-11 20:39:52,571 INFO L226 Difference]: Without dead ends: 53 [2024-09-11 20:39:52,572 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2024-09-11 20:39:52,573 INFO L434 NwaCegarLoop]: 14 mSDtfsCounter, 43 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 126 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 32 SdHoareTripleChecker+Invalid, 143 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 126 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:39:52,575 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 32 Invalid, 143 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 126 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:39:52,576 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2024-09-11 20:39:52,588 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 48. [2024-09-11 20:39:52,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 34 states have (on average 1.3529411764705883) internal successors, (46), 38 states have internal predecessors, (46), 7 states have call successors, (7), 4 states have call predecessors, (7), 6 states have return successors, (11), 6 states have call predecessors, (11), 6 states have call successors, (11) [2024-09-11 20:39:52,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 64 transitions. [2024-09-11 20:39:52,593 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 64 transitions. Word has length 21 [2024-09-11 20:39:52,593 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:39:52,593 INFO L474 AbstractCegarLoop]: Abstraction has 48 states and 64 transitions. [2024-09-11 20:39:52,593 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 2.0) internal successors, (16), 8 states have internal predecessors, (16), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-11 20:39:52,593 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:39:52,593 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 64 transitions. [2024-09-11 20:39:52,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2024-09-11 20:39:52,594 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:39:52,594 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:39:52,594 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-09-11 20:39:52,594 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:39:52,594 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:39:52,594 INFO L85 PathProgramCache]: Analyzing trace with hash -794119094, now seen corresponding path program 1 times [2024-09-11 20:39:52,594 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:39:52,595 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1139152273] [2024-09-11 20:39:52,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:39:52,595 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:39:52,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:39:52,622 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1873222051] [2024-09-11 20:39:52,622 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:39:52,622 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:39:52,623 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:39:52,625 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:39:52,626 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-11 20:39:52,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:39:52,705 INFO L262 TraceCheckSpWp]: Trace formula consists of 213 conjuncts, 31 conjuncts are in the unsatisfiable core [2024-09-11 20:39:52,714 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:39:52,721 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:39:52,726 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:39:52,740 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:39:52,871 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 7 treesize of output 3 [2024-09-11 20:39:52,894 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-11 20:39:52,894 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-11 20:39:52,895 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:39:52,895 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1139152273] [2024-09-11 20:39:52,895 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:39:52,895 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1873222051] [2024-09-11 20:39:52,895 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1873222051] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:39:52,895 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-11 20:39:52,895 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2024-09-11 20:39:52,896 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1987539784] [2024-09-11 20:39:52,896 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:39:52,896 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2024-09-11 20:39:52,896 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:39:52,897 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2024-09-11 20:39:52,897 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=88, Unknown=0, NotChecked=0, Total=110 [2024-09-11 20:39:52,897 INFO L87 Difference]: Start difference. First operand 48 states and 64 transitions. Second operand has 11 states, 9 states have (on average 1.7777777777777777) internal successors, (16), 8 states have internal predecessors, (16), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-11 20:39:53,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:39:53,193 INFO L93 Difference]: Finished difference Result 88 states and 124 transitions. [2024-09-11 20:39:53,194 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-09-11 20:39:53,194 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 1.7777777777777777) internal successors, (16), 8 states have internal predecessors, (16), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 21 [2024-09-11 20:39:53,194 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:39:53,195 INFO L225 Difference]: With dead ends: 88 [2024-09-11 20:39:53,196 INFO L226 Difference]: Without dead ends: 57 [2024-09-11 20:39:53,197 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 28 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=218, Unknown=0, NotChecked=0, Total=272 [2024-09-11 20:39:53,197 INFO L434 NwaCegarLoop]: 16 mSDtfsCounter, 25 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 247 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 104 SdHoareTripleChecker+Invalid, 254 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 247 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-11 20:39:53,199 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 104 Invalid, 254 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 247 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-11 20:39:53,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2024-09-11 20:39:53,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 54. [2024-09-11 20:39:53,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 38 states have (on average 1.263157894736842) internal successors, (48), 42 states have internal predecessors, (48), 8 states have call successors, (8), 5 states have call predecessors, (8), 7 states have return successors, (12), 7 states have call predecessors, (12), 7 states have call successors, (12) [2024-09-11 20:39:53,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 68 transitions. [2024-09-11 20:39:53,214 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 68 transitions. Word has length 21 [2024-09-11 20:39:53,214 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:39:53,214 INFO L474 AbstractCegarLoop]: Abstraction has 54 states and 68 transitions. [2024-09-11 20:39:53,214 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 1.7777777777777777) internal successors, (16), 8 states have internal predecessors, (16), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-11 20:39:53,215 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:39:53,215 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 68 transitions. [2024-09-11 20:39:53,215 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-09-11 20:39:53,215 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:39:53,215 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:39:53,228 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-09-11 20:39:53,419 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:39:53,420 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:39:53,420 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:39:53,420 INFO L85 PathProgramCache]: Analyzing trace with hash 1237036607, now seen corresponding path program 1 times [2024-09-11 20:39:53,420 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:39:53,420 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [563270864] [2024-09-11 20:39:53,420 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:39:53,420 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:39:53,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:39:53,473 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [741162315] [2024-09-11 20:39:53,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:39:53,473 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:39:53,473 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:39:53,475 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:39:53,476 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-11 20:39:53,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:39:53,590 WARN L260 TraceCheckSpWp]: Trace formula consists of 296 conjuncts, 167 conjuncts are in the unsatisfiable core [2024-09-11 20:39:53,595 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:39:53,600 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:39:53,602 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:39:53,612 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:39:53,620 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:39:53,626 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:39:53,631 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:39:53,954 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 38 treesize of output 22 [2024-09-11 20:39:53,965 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 38 treesize of output 22 [2024-09-11 20:39:53,976 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:39:54,133 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 13 [2024-09-11 20:39:54,137 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 14 [2024-09-11 20:39:54,148 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 30 treesize of output 18 [2024-09-11 20:39:54,155 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2024-09-11 20:39:54,273 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-11 20:39:54,273 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:39:55,733 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 4 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-11 20:39:55,733 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:39:55,733 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [563270864] [2024-09-11 20:39:55,733 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:39:55,733 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [741162315] [2024-09-11 20:39:55,735 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [741162315] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:39:55,735 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-11 20:39:55,735 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 12] total 21 [2024-09-11 20:39:55,736 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [17039712] [2024-09-11 20:39:55,736 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-11 20:39:55,736 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-11 20:39:55,736 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:39:55,736 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-11 20:39:55,737 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=66, Invalid=354, Unknown=0, NotChecked=0, Total=420 [2024-09-11 20:39:55,737 INFO L87 Difference]: Start difference. First operand 54 states and 68 transitions. Second operand has 21 states, 17 states have (on average 1.8235294117647058) internal successors, (31), 16 states have internal predecessors, (31), 8 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-11 20:40:01,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:40:01,970 INFO L93 Difference]: Finished difference Result 105 states and 145 transitions. [2024-09-11 20:40:01,971 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2024-09-11 20:40:01,971 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 17 states have (on average 1.8235294117647058) internal successors, (31), 16 states have internal predecessors, (31), 8 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 23 [2024-09-11 20:40:01,971 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:40:01,972 INFO L225 Difference]: With dead ends: 105 [2024-09-11 20:40:01,972 INFO L226 Difference]: Without dead ends: 101 [2024-09-11 20:40:01,973 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 22 SyntacticMatches, 3 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 229 ImplicationChecksByTransitivity, 5.2s TimeCoverageRelationStatistics Valid=248, Invalid=1158, Unknown=0, NotChecked=0, Total=1406 [2024-09-11 20:40:01,973 INFO L434 NwaCegarLoop]: 22 mSDtfsCounter, 200 mSDsluCounter, 172 mSDsCounter, 0 mSdLazyCounter, 544 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 200 SdHoareTripleChecker+Valid, 194 SdHoareTripleChecker+Invalid, 587 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 544 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.0s IncrementalHoareTripleChecker+Time [2024-09-11 20:40:01,973 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [200 Valid, 194 Invalid, 587 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 544 Invalid, 0 Unknown, 0 Unchecked, 2.0s Time] [2024-09-11 20:40:01,974 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2024-09-11 20:40:01,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 78. [2024-09-11 20:40:01,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 55 states have (on average 1.2545454545454546) internal successors, (69), 59 states have internal predecessors, (69), 11 states have call successors, (11), 8 states have call predecessors, (11), 11 states have return successors, (19), 10 states have call predecessors, (19), 9 states have call successors, (19) [2024-09-11 20:40:01,997 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 99 transitions. [2024-09-11 20:40:01,997 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 99 transitions. Word has length 23 [2024-09-11 20:40:01,997 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:40:01,997 INFO L474 AbstractCegarLoop]: Abstraction has 78 states and 99 transitions. [2024-09-11 20:40:01,997 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 17 states have (on average 1.8235294117647058) internal successors, (31), 16 states have internal predecessors, (31), 8 states have call successors, (8), 7 states have call predecessors, (8), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-11 20:40:01,998 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:01,998 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 99 transitions. [2024-09-11 20:40:01,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2024-09-11 20:40:01,998 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:40:01,998 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:40:02,011 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2024-09-11 20:40:02,202 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:40:02,203 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:40:02,203 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:02,203 INFO L85 PathProgramCache]: Analyzing trace with hash -61793774, now seen corresponding path program 1 times [2024-09-11 20:40:02,203 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:40:02,203 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [197104124] [2024-09-11 20:40:02,203 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:02,203 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:40:02,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:40:02,219 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1594004711] [2024-09-11 20:40:02,219 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:02,219 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:40:02,219 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:40:02,221 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:40:02,222 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-11 20:40:02,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:02,294 INFO L262 TraceCheckSpWp]: Trace formula consists of 226 conjuncts, 21 conjuncts are in the unsatisfiable core [2024-09-11 20:40:02,295 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:40:02,298 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:40:02,389 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-11 20:40:02,389 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:40:02,491 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-11 20:40:02,491 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:40:02,491 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [197104124] [2024-09-11 20:40:02,491 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:40:02,491 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1594004711] [2024-09-11 20:40:02,492 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1594004711] provided 1 perfect and 1 imperfect interpolant sequences [2024-09-11 20:40:02,492 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:40:02,492 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [11] total 14 [2024-09-11 20:40:02,492 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [652977985] [2024-09-11 20:40:02,492 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:40:02,492 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2024-09-11 20:40:02,492 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:40:02,493 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2024-09-11 20:40:02,493 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=144, Unknown=0, NotChecked=0, Total=182 [2024-09-11 20:40:02,493 INFO L87 Difference]: Start difference. First operand 78 states and 99 transitions. Second operand has 9 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-11 20:40:02,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:40:02,636 INFO L93 Difference]: Finished difference Result 83 states and 107 transitions. [2024-09-11 20:40:02,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-09-11 20:40:02,637 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 27 [2024-09-11 20:40:02,637 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:40:02,638 INFO L225 Difference]: With dead ends: 83 [2024-09-11 20:40:02,638 INFO L226 Difference]: Without dead ends: 68 [2024-09-11 20:40:02,638 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 36 SyntacticMatches, 4 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 59 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=48, Invalid=192, Unknown=0, NotChecked=0, Total=240 [2024-09-11 20:40:02,638 INFO L434 NwaCegarLoop]: 25 mSDtfsCounter, 15 mSDsluCounter, 118 mSDsCounter, 0 mSdLazyCounter, 161 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 143 SdHoareTripleChecker+Invalid, 161 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 161 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:40:02,638 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 143 Invalid, 161 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 161 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:40:02,639 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2024-09-11 20:40:02,666 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 65. [2024-09-11 20:40:02,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 46 states have (on average 1.2826086956521738) internal successors, (59), 50 states have internal predecessors, (59), 9 states have call successors, (9), 6 states have call predecessors, (9), 9 states have return successors, (17), 8 states have call predecessors, (17), 8 states have call successors, (17) [2024-09-11 20:40:02,667 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 85 transitions. [2024-09-11 20:40:02,667 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 85 transitions. Word has length 27 [2024-09-11 20:40:02,668 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:40:02,668 INFO L474 AbstractCegarLoop]: Abstraction has 65 states and 85 transitions. [2024-09-11 20:40:02,668 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 2.125) internal successors, (17), 8 states have internal predecessors, (17), 4 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-11 20:40:02,668 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:02,668 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 85 transitions. [2024-09-11 20:40:02,669 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2024-09-11 20:40:02,669 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:40:02,669 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:40:02,681 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2024-09-11 20:40:02,873 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:40:02,873 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:40:02,874 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:02,874 INFO L85 PathProgramCache]: Analyzing trace with hash -736922499, now seen corresponding path program 1 times [2024-09-11 20:40:02,874 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:40:02,874 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2024713915] [2024-09-11 20:40:02,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:02,874 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:40:02,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:03,302 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:40:03,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:03,557 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:40:03,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:03,560 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2024-09-11 20:40:03,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:03,612 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:40:03,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:03,615 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 3 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-09-11 20:40:03,615 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:40:03,615 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2024713915] [2024-09-11 20:40:03,616 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2024713915] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:40:03,616 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2128397521] [2024-09-11 20:40:03,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:03,616 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:40:03,616 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:40:03,617 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:40:03,619 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-11 20:40:03,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:03,717 INFO L262 TraceCheckSpWp]: Trace formula consists of 323 conjuncts, 37 conjuncts are in the unsatisfiable core [2024-09-11 20:40:03,720 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:40:03,745 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:40:03,749 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:40:03,956 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 3 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-09-11 20:40:03,956 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:40:04,429 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-11 20:40:04,429 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2128397521] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:40:04,430 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:40:04,430 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 12, 14] total 29 [2024-09-11 20:40:04,430 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [142823447] [2024-09-11 20:40:04,430 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:40:04,430 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2024-09-11 20:40:04,430 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:40:04,431 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2024-09-11 20:40:04,431 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=132, Invalid=680, Unknown=0, NotChecked=0, Total=812 [2024-09-11 20:40:04,431 INFO L87 Difference]: Start difference. First operand 65 states and 85 transitions. Second operand has 29 states, 23 states have (on average 1.9565217391304348) internal successors, (45), 25 states have internal predecessors, (45), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2024-09-11 20:40:05,833 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:40:05,834 INFO L93 Difference]: Finished difference Result 101 states and 171 transitions. [2024-09-11 20:40:05,834 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2024-09-11 20:40:05,834 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 23 states have (on average 1.9565217391304348) internal successors, (45), 25 states have internal predecessors, (45), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) Word has length 36 [2024-09-11 20:40:05,834 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:40:05,835 INFO L225 Difference]: With dead ends: 101 [2024-09-11 20:40:05,835 INFO L226 Difference]: Without dead ends: 87 [2024-09-11 20:40:05,836 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 58 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 335 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=275, Invalid=1131, Unknown=0, NotChecked=0, Total=1406 [2024-09-11 20:40:05,836 INFO L434 NwaCegarLoop]: 12 mSDtfsCounter, 65 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 514 mSolverCounterSat, 99 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 88 SdHoareTripleChecker+Invalid, 613 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 99 IncrementalHoareTripleChecker+Valid, 514 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:40:05,837 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 88 Invalid, 613 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [99 Valid, 514 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2024-09-11 20:40:05,837 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87 states. [2024-09-11 20:40:05,863 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87 to 63. [2024-09-11 20:40:05,864 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 45 states have (on average 1.2666666666666666) internal successors, (57), 49 states have internal predecessors, (57), 9 states have call successors, (9), 6 states have call predecessors, (9), 8 states have return successors, (14), 8 states have call predecessors, (14), 8 states have call successors, (14) [2024-09-11 20:40:05,864 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 80 transitions. [2024-09-11 20:40:05,865 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 80 transitions. Word has length 36 [2024-09-11 20:40:05,865 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:40:05,865 INFO L474 AbstractCegarLoop]: Abstraction has 63 states and 80 transitions. [2024-09-11 20:40:05,865 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 23 states have (on average 1.9565217391304348) internal successors, (45), 25 states have internal predecessors, (45), 10 states have call successors, (10), 6 states have call predecessors, (10), 6 states have return successors, (9), 7 states have call predecessors, (9), 9 states have call successors, (9) [2024-09-11 20:40:05,865 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:05,865 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 80 transitions. [2024-09-11 20:40:05,866 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2024-09-11 20:40:05,866 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:40:05,866 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:40:05,879 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2024-09-11 20:40:06,070 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2024-09-11 20:40:06,071 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:40:06,071 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:06,071 INFO L85 PathProgramCache]: Analyzing trace with hash -35857921, now seen corresponding path program 1 times [2024-09-11 20:40:06,071 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:40:06,071 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [452501537] [2024-09-11 20:40:06,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:06,071 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:40:06,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:06,489 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:40:06,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:06,740 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:40:06,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:06,742 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2024-09-11 20:40:06,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:06,796 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:40:06,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:06,800 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 9 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-11 20:40:06,801 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:40:06,801 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [452501537] [2024-09-11 20:40:06,801 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [452501537] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:40:06,801 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [717038175] [2024-09-11 20:40:06,801 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:06,801 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:40:06,801 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:40:06,803 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:40:06,804 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-11 20:40:06,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:06,900 INFO L262 TraceCheckSpWp]: Trace formula consists of 320 conjuncts, 32 conjuncts are in the unsatisfiable core [2024-09-11 20:40:06,902 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:40:06,998 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 35 treesize of output 19 [2024-09-11 20:40:07,056 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 10 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-11 20:40:07,056 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:40:07,197 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 10 proven. 2 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-11 20:40:07,197 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [717038175] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:40:07,197 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:40:07,197 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 11, 10] total 20 [2024-09-11 20:40:07,197 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1523044179] [2024-09-11 20:40:07,197 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:40:07,198 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2024-09-11 20:40:07,198 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:40:07,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2024-09-11 20:40:07,198 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=80, Invalid=300, Unknown=0, NotChecked=0, Total=380 [2024-09-11 20:40:07,198 INFO L87 Difference]: Start difference. First operand 63 states and 80 transitions. Second operand has 20 states, 20 states have (on average 2.0) internal successors, (40), 17 states have internal predecessors, (40), 7 states have call successors, (10), 5 states have call predecessors, (10), 4 states have return successors, (7), 5 states have call predecessors, (7), 6 states have call successors, (7) [2024-09-11 20:40:07,670 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:40:07,670 INFO L93 Difference]: Finished difference Result 102 states and 200 transitions. [2024-09-11 20:40:07,670 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2024-09-11 20:40:07,671 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 2.0) internal successors, (40), 17 states have internal predecessors, (40), 7 states have call successors, (10), 5 states have call predecessors, (10), 4 states have return successors, (7), 5 states have call predecessors, (7), 6 states have call successors, (7) Word has length 36 [2024-09-11 20:40:07,671 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:40:07,672 INFO L225 Difference]: With dead ends: 102 [2024-09-11 20:40:07,672 INFO L226 Difference]: Without dead ends: 85 [2024-09-11 20:40:07,672 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 100 GetRequests, 69 SyntacticMatches, 2 SemanticMatches, 29 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 184 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=228, Invalid=702, Unknown=0, NotChecked=0, Total=930 [2024-09-11 20:40:07,673 INFO L434 NwaCegarLoop]: 18 mSDtfsCounter, 152 mSDsluCounter, 64 mSDsCounter, 0 mSdLazyCounter, 341 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 155 SdHoareTripleChecker+Valid, 82 SdHoareTripleChecker+Invalid, 384 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 341 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-11 20:40:07,673 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [155 Valid, 82 Invalid, 384 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 341 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-09-11 20:40:07,673 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85 states. [2024-09-11 20:40:07,700 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85 to 65. [2024-09-11 20:40:07,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 47 states have (on average 1.3404255319148937) internal successors, (63), 52 states have internal predecessors, (63), 11 states have call successors, (11), 6 states have call predecessors, (11), 6 states have return successors, (16), 7 states have call predecessors, (16), 10 states have call successors, (16) [2024-09-11 20:40:07,701 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 90 transitions. [2024-09-11 20:40:07,702 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 90 transitions. Word has length 36 [2024-09-11 20:40:07,702 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:40:07,702 INFO L474 AbstractCegarLoop]: Abstraction has 65 states and 90 transitions. [2024-09-11 20:40:07,702 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 2.0) internal successors, (40), 17 states have internal predecessors, (40), 7 states have call successors, (10), 5 states have call predecessors, (10), 4 states have return successors, (7), 5 states have call predecessors, (7), 6 states have call successors, (7) [2024-09-11 20:40:07,702 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:07,702 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 90 transitions. [2024-09-11 20:40:07,703 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2024-09-11 20:40:07,704 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:40:07,704 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:40:07,716 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2024-09-11 20:40:07,907 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:40:07,908 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:40:07,908 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:07,908 INFO L85 PathProgramCache]: Analyzing trace with hash 800419013, now seen corresponding path program 1 times [2024-09-11 20:40:07,908 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:40:07,908 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [328991752] [2024-09-11 20:40:07,908 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:07,908 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:40:07,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:40:07,930 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1918272502] [2024-09-11 20:40:07,930 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:07,930 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:40:07,930 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:40:07,935 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:40:07,937 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-11 20:40:08,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:08,044 INFO L262 TraceCheckSpWp]: Trace formula consists of 321 conjuncts, 97 conjuncts are in the unsatisfiable core [2024-09-11 20:40:08,047 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:40:08,049 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:40:08,054 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:40:08,060 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:08,064 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:08,067 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:40:08,079 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:08,086 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:08,452 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 19 [2024-09-11 20:40:08,458 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2024-09-11 20:40:08,474 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:40:08,476 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-11 20:40:08,503 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 8 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-11 20:40:08,503 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:40:09,036 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:40:09,036 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [328991752] [2024-09-11 20:40:09,037 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:40:09,037 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1918272502] [2024-09-11 20:40:09,037 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1918272502] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:40:09,037 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:40:09,037 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15] total 15 [2024-09-11 20:40:09,037 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1661255586] [2024-09-11 20:40:09,037 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:40:09,037 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-09-11 20:40:09,037 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:40:09,038 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-09-11 20:40:09,038 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=329, Unknown=0, NotChecked=0, Total=380 [2024-09-11 20:40:09,038 INFO L87 Difference]: Start difference. First operand 65 states and 90 transitions. Second operand has 15 states, 12 states have (on average 2.1666666666666665) internal successors, (26), 11 states have internal predecessors, (26), 5 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-11 20:40:09,649 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:40:09,649 INFO L93 Difference]: Finished difference Result 81 states and 122 transitions. [2024-09-11 20:40:09,650 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2024-09-11 20:40:09,650 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 12 states have (on average 2.1666666666666665) internal successors, (26), 11 states have internal predecessors, (26), 5 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Word has length 38 [2024-09-11 20:40:09,650 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:40:09,651 INFO L225 Difference]: With dead ends: 81 [2024-09-11 20:40:09,651 INFO L226 Difference]: Without dead ends: 79 [2024-09-11 20:40:09,651 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 27 SyntacticMatches, 2 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 109 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=93, Invalid=557, Unknown=0, NotChecked=0, Total=650 [2024-09-11 20:40:09,652 INFO L434 NwaCegarLoop]: 23 mSDtfsCounter, 23 mSDsluCounter, 127 mSDsCounter, 0 mSdLazyCounter, 477 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 486 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 477 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-11 20:40:09,652 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 150 Invalid, 486 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 477 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-11 20:40:09,652 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2024-09-11 20:40:09,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 73. [2024-09-11 20:40:09,674 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 73 states, 52 states have (on average 1.3076923076923077) internal successors, (68), 57 states have internal predecessors, (68), 12 states have call successors, (12), 7 states have call predecessors, (12), 8 states have return successors, (23), 9 states have call predecessors, (23), 11 states have call successors, (23) [2024-09-11 20:40:09,674 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 103 transitions. [2024-09-11 20:40:09,674 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 103 transitions. Word has length 38 [2024-09-11 20:40:09,675 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:40:09,675 INFO L474 AbstractCegarLoop]: Abstraction has 73 states and 103 transitions. [2024-09-11 20:40:09,675 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 12 states have (on average 2.1666666666666665) internal successors, (26), 11 states have internal predecessors, (26), 5 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-11 20:40:09,675 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:09,675 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 103 transitions. [2024-09-11 20:40:09,676 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-09-11 20:40:09,676 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:40:09,676 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:40:09,689 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2024-09-11 20:40:09,877 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:40:09,877 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:40:09,878 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:09,878 INFO L85 PathProgramCache]: Analyzing trace with hash 2055654893, now seen corresponding path program 1 times [2024-09-11 20:40:09,878 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:40:09,878 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1136771732] [2024-09-11 20:40:09,878 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:09,878 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:40:09,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:10,100 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:40:10,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:10,203 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:40:10,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:10,205 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:40:10,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:10,208 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:40:10,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:10,210 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-11 20:40:10,210 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:40:10,210 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1136771732] [2024-09-11 20:40:10,210 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1136771732] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:40:10,210 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-11 20:40:10,210 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-09-11 20:40:10,210 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1595086098] [2024-09-11 20:40:10,210 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:40:10,211 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-09-11 20:40:10,211 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:40:10,211 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-09-11 20:40:10,211 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2024-09-11 20:40:10,211 INFO L87 Difference]: Start difference. First operand 73 states and 103 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-09-11 20:40:10,367 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:40:10,368 INFO L93 Difference]: Finished difference Result 129 states and 215 transitions. [2024-09-11 20:40:10,368 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-11 20:40:10,368 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 40 [2024-09-11 20:40:10,368 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:40:10,369 INFO L225 Difference]: With dead ends: 129 [2024-09-11 20:40:10,369 INFO L226 Difference]: Without dead ends: 79 [2024-09-11 20:40:10,370 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=33, Invalid=57, Unknown=0, NotChecked=0, Total=90 [2024-09-11 20:40:10,370 INFO L434 NwaCegarLoop]: 22 mSDtfsCounter, 42 mSDsluCounter, 37 mSDsCounter, 0 mSdLazyCounter, 92 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 43 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 92 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:40:10,371 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [43 Valid, 59 Invalid, 101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 92 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:40:10,371 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2024-09-11 20:40:10,392 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 74. [2024-09-11 20:40:10,393 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74 states, 53 states have (on average 1.2641509433962264) internal successors, (67), 58 states have internal predecessors, (67), 12 states have call successors, (12), 7 states have call predecessors, (12), 8 states have return successors, (23), 9 states have call predecessors, (23), 11 states have call successors, (23) [2024-09-11 20:40:10,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 102 transitions. [2024-09-11 20:40:10,393 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 102 transitions. Word has length 40 [2024-09-11 20:40:10,393 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:40:10,394 INFO L474 AbstractCegarLoop]: Abstraction has 74 states and 102 transitions. [2024-09-11 20:40:10,394 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-09-11 20:40:10,394 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:10,394 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 102 transitions. [2024-09-11 20:40:10,395 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-09-11 20:40:10,395 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:40:10,395 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:40:10,395 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2024-09-11 20:40:10,395 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:40:10,395 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:10,396 INFO L85 PathProgramCache]: Analyzing trace with hash 1921641387, now seen corresponding path program 1 times [2024-09-11 20:40:10,396 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:40:10,396 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [95873892] [2024-09-11 20:40:10,396 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:10,396 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:40:10,414 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:40:10,415 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [614443211] [2024-09-11 20:40:10,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:10,416 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:40:10,416 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:40:10,417 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:40:10,418 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-11 20:40:10,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:10,531 INFO L262 TraceCheckSpWp]: Trace formula consists of 332 conjuncts, 129 conjuncts are in the unsatisfiable core [2024-09-11 20:40:10,534 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:40:10,543 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:40:10,555 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:10,558 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:10,563 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:40:10,568 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:40:10,585 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:10,592 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:11,472 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 19 [2024-09-11 20:40:11,474 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2024-09-11 20:40:11,503 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:40:11,505 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-11 20:40:11,547 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-11 20:40:11,547 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:40:12,336 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:40:12,337 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [95873892] [2024-09-11 20:40:12,337 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:40:12,337 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [614443211] [2024-09-11 20:40:12,337 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [614443211] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:40:12,337 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:40:12,337 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2024-09-11 20:40:12,337 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [202212205] [2024-09-11 20:40:12,337 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:40:12,338 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2024-09-11 20:40:12,338 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:40:12,338 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2024-09-11 20:40:12,338 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=104, Invalid=598, Unknown=0, NotChecked=0, Total=702 [2024-09-11 20:40:12,338 INFO L87 Difference]: Start difference. First operand 74 states and 102 transitions. Second operand has 22 states, 19 states have (on average 1.4736842105263157) internal successors, (28), 17 states have internal predecessors, (28), 5 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-11 20:40:16,358 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-11 20:40:17,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:40:17,083 INFO L93 Difference]: Finished difference Result 88 states and 129 transitions. [2024-09-11 20:40:17,083 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2024-09-11 20:40:17,083 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 19 states have (on average 1.4736842105263157) internal successors, (28), 17 states have internal predecessors, (28), 5 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Word has length 40 [2024-09-11 20:40:17,083 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:40:17,084 INFO L225 Difference]: With dead ends: 88 [2024-09-11 20:40:17,084 INFO L226 Difference]: Without dead ends: 86 [2024-09-11 20:40:17,084 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 21 SyntacticMatches, 2 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 330 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=139, Invalid=853, Unknown=0, NotChecked=0, Total=992 [2024-09-11 20:40:17,088 INFO L434 NwaCegarLoop]: 14 mSDtfsCounter, 31 mSDsluCounter, 86 mSDsCounter, 0 mSdLazyCounter, 504 mSolverCounterSat, 11 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 100 SdHoareTripleChecker+Invalid, 516 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 504 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.6s IncrementalHoareTripleChecker+Time [2024-09-11 20:40:17,088 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 100 Invalid, 516 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 504 Invalid, 1 Unknown, 0 Unchecked, 4.6s Time] [2024-09-11 20:40:17,088 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86 states. [2024-09-11 20:40:17,114 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86 to 77. [2024-09-11 20:40:17,114 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 77 states, 54 states have (on average 1.2592592592592593) internal successors, (68), 60 states have internal predecessors, (68), 13 states have call successors, (13), 7 states have call predecessors, (13), 9 states have return successors, (31), 9 states have call predecessors, (31), 12 states have call successors, (31) [2024-09-11 20:40:17,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 112 transitions. [2024-09-11 20:40:17,117 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 112 transitions. Word has length 40 [2024-09-11 20:40:17,118 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:40:17,118 INFO L474 AbstractCegarLoop]: Abstraction has 77 states and 112 transitions. [2024-09-11 20:40:17,118 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 19 states have (on average 1.4736842105263157) internal successors, (28), 17 states have internal predecessors, (28), 5 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-11 20:40:17,118 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:17,118 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 112 transitions. [2024-09-11 20:40:17,119 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-09-11 20:40:17,119 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:40:17,119 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:40:17,132 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2024-09-11 20:40:17,319 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:40:17,320 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:40:17,320 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:17,320 INFO L85 PathProgramCache]: Analyzing trace with hash -1950624083, now seen corresponding path program 1 times [2024-09-11 20:40:17,320 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:40:17,320 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [915881703] [2024-09-11 20:40:17,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:17,320 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:40:17,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:17,602 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:40:17,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:17,712 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:40:17,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:17,714 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:40:17,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:17,755 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:40:17,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:17,758 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-11 20:40:17,758 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:40:17,758 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [915881703] [2024-09-11 20:40:17,759 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [915881703] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:40:17,759 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-11 20:40:17,759 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2024-09-11 20:40:17,759 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1756373555] [2024-09-11 20:40:17,759 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:40:17,759 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-09-11 20:40:17,759 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:40:17,760 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-09-11 20:40:17,760 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2024-09-11 20:40:17,760 INFO L87 Difference]: Start difference. First operand 77 states and 112 transitions. Second operand has 8 states, 7 states have (on average 4.0) internal successors, (28), 7 states have internal predecessors, (28), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-09-11 20:40:18,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:40:18,012 INFO L93 Difference]: Finished difference Result 105 states and 203 transitions. [2024-09-11 20:40:18,012 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-09-11 20:40:18,012 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 4.0) internal successors, (28), 7 states have internal predecessors, (28), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 40 [2024-09-11 20:40:18,012 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:40:18,013 INFO L225 Difference]: With dead ends: 105 [2024-09-11 20:40:18,013 INFO L226 Difference]: Without dead ends: 93 [2024-09-11 20:40:18,013 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=47, Invalid=109, Unknown=0, NotChecked=0, Total=156 [2024-09-11 20:40:18,014 INFO L434 NwaCegarLoop]: 25 mSDtfsCounter, 44 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 187 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 205 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 187 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-11 20:40:18,014 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 71 Invalid, 205 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 187 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-11 20:40:18,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93 states. [2024-09-11 20:40:18,048 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93 to 83. [2024-09-11 20:40:18,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 57 states have (on average 1.280701754385965) internal successors, (73), 65 states have internal predecessors, (73), 15 states have call successors, (15), 7 states have call predecessors, (15), 10 states have return successors, (43), 10 states have call predecessors, (43), 14 states have call successors, (43) [2024-09-11 20:40:18,050 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 131 transitions. [2024-09-11 20:40:18,050 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 131 transitions. Word has length 40 [2024-09-11 20:40:18,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:40:18,050 INFO L474 AbstractCegarLoop]: Abstraction has 83 states and 131 transitions. [2024-09-11 20:40:18,051 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 4.0) internal successors, (28), 7 states have internal predecessors, (28), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-09-11 20:40:18,051 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:18,051 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 131 transitions. [2024-09-11 20:40:18,052 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-09-11 20:40:18,052 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:40:18,052 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:40:18,053 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2024-09-11 20:40:18,053 INFO L399 AbstractCegarLoop]: === Iteration 13 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:40:18,053 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:18,053 INFO L85 PathProgramCache]: Analyzing trace with hash -1731769365, now seen corresponding path program 1 times [2024-09-11 20:40:18,053 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:40:18,053 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [507710428] [2024-09-11 20:40:18,053 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:18,054 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:40:18,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:18,255 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:40:18,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:18,366 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:40:18,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:18,368 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:40:18,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:18,371 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:40:18,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:18,372 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-11 20:40:18,372 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:40:18,372 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [507710428] [2024-09-11 20:40:18,372 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [507710428] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:40:18,372 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-11 20:40:18,372 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-09-11 20:40:18,373 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1868062524] [2024-09-11 20:40:18,373 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:40:18,373 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-09-11 20:40:18,373 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:40:18,373 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-09-11 20:40:18,374 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2024-09-11 20:40:18,374 INFO L87 Difference]: Start difference. First operand 83 states and 131 transitions. Second operand has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-09-11 20:40:18,549 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:40:18,549 INFO L93 Difference]: Finished difference Result 144 states and 258 transitions. [2024-09-11 20:40:18,549 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-09-11 20:40:18,550 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 40 [2024-09-11 20:40:18,550 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:40:18,551 INFO L225 Difference]: With dead ends: 144 [2024-09-11 20:40:18,551 INFO L226 Difference]: Without dead ends: 84 [2024-09-11 20:40:18,551 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=28, Invalid=44, Unknown=0, NotChecked=0, Total=72 [2024-09-11 20:40:18,552 INFO L434 NwaCegarLoop]: 22 mSDtfsCounter, 30 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 31 SdHoareTripleChecker+Valid, 67 SdHoareTripleChecker+Invalid, 125 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:40:18,552 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [31 Valid, 67 Invalid, 125 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:40:18,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2024-09-11 20:40:18,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 81. [2024-09-11 20:40:18,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 56 states have (on average 1.25) internal successors, (70), 63 states have internal predecessors, (70), 14 states have call successors, (14), 7 states have call predecessors, (14), 10 states have return successors, (38), 10 states have call predecessors, (38), 13 states have call successors, (38) [2024-09-11 20:40:18,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 122 transitions. [2024-09-11 20:40:18,583 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 122 transitions. Word has length 40 [2024-09-11 20:40:18,583 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:40:18,583 INFO L474 AbstractCegarLoop]: Abstraction has 81 states and 122 transitions. [2024-09-11 20:40:18,583 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.0) internal successors, (24), 5 states have internal predecessors, (24), 2 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-09-11 20:40:18,584 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:18,584 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 122 transitions. [2024-09-11 20:40:18,585 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-09-11 20:40:18,585 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:40:18,585 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:40:18,586 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2024-09-11 20:40:18,586 INFO L399 AbstractCegarLoop]: === Iteration 14 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:40:18,586 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:18,586 INFO L85 PathProgramCache]: Analyzing trace with hash -1053506385, now seen corresponding path program 1 times [2024-09-11 20:40:18,586 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:40:18,586 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [722330566] [2024-09-11 20:40:18,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:18,586 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:40:18,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:18,802 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:40:18,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:18,915 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:40:18,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:18,917 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:40:18,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:18,957 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:40:18,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:18,960 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-11 20:40:18,960 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:40:18,960 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [722330566] [2024-09-11 20:40:18,960 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [722330566] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:40:18,961 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-11 20:40:18,961 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2024-09-11 20:40:18,961 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1133346322] [2024-09-11 20:40:18,961 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:40:18,961 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2024-09-11 20:40:18,961 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:40:18,962 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2024-09-11 20:40:18,962 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=55, Unknown=0, NotChecked=0, Total=72 [2024-09-11 20:40:18,962 INFO L87 Difference]: Start difference. First operand 81 states and 122 transitions. Second operand has 9 states, 8 states have (on average 3.5) internal successors, (28), 8 states have internal predecessors, (28), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-09-11 20:40:19,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:40:19,206 INFO L93 Difference]: Finished difference Result 101 states and 177 transitions. [2024-09-11 20:40:19,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-09-11 20:40:19,207 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 3.5) internal successors, (28), 8 states have internal predecessors, (28), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) Word has length 40 [2024-09-11 20:40:19,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:40:19,208 INFO L225 Difference]: With dead ends: 101 [2024-09-11 20:40:19,208 INFO L226 Difference]: Without dead ends: 89 [2024-09-11 20:40:19,208 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 12 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=65, Invalid=175, Unknown=0, NotChecked=0, Total=240 [2024-09-11 20:40:19,208 INFO L434 NwaCegarLoop]: 26 mSDtfsCounter, 49 mSDsluCounter, 45 mSDsCounter, 0 mSdLazyCounter, 198 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 71 SdHoareTripleChecker+Invalid, 215 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 198 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:40:19,209 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 71 Invalid, 215 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 198 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:40:19,209 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2024-09-11 20:40:19,238 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 79. [2024-09-11 20:40:19,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 55 states have (on average 1.2363636363636363) internal successors, (68), 61 states have internal predecessors, (68), 13 states have call successors, (13), 7 states have call predecessors, (13), 10 states have return successors, (34), 10 states have call predecessors, (34), 12 states have call successors, (34) [2024-09-11 20:40:19,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 115 transitions. [2024-09-11 20:40:19,240 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 115 transitions. Word has length 40 [2024-09-11 20:40:19,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:40:19,240 INFO L474 AbstractCegarLoop]: Abstraction has 79 states and 115 transitions. [2024-09-11 20:40:19,240 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 3.5) internal successors, (28), 8 states have internal predecessors, (28), 4 states have call successors, (5), 3 states have call predecessors, (5), 3 states have return successors, (4), 3 states have call predecessors, (4), 3 states have call successors, (4) [2024-09-11 20:40:19,240 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:19,240 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 115 transitions. [2024-09-11 20:40:19,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-09-11 20:40:19,241 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:40:19,241 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:40:19,241 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2024-09-11 20:40:19,241 INFO L399 AbstractCegarLoop]: === Iteration 15 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:40:19,242 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:19,242 INFO L85 PathProgramCache]: Analyzing trace with hash -1535716245, now seen corresponding path program 1 times [2024-09-11 20:40:19,242 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:40:19,242 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2146527943] [2024-09-11 20:40:19,242 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:19,242 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:40:19,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:40:19,264 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [828152338] [2024-09-11 20:40:19,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:19,264 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:40:19,264 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:40:19,266 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:40:19,267 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-11 20:40:19,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:19,404 WARN L260 TraceCheckSpWp]: Trace formula consists of 333 conjuncts, 182 conjuncts are in the unsatisfiable core [2024-09-11 20:40:19,409 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:40:19,415 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:40:19,418 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:40:19,436 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:40:19,442 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:19,448 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:19,453 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:40:19,473 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:19,478 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:21,216 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 42 treesize of output 26 [2024-09-11 20:40:21,223 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 3 [2024-09-11 20:40:21,309 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:40:21,311 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 30 treesize of output 14 [2024-09-11 20:40:21,378 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 3 proven. 10 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-09-11 20:40:21,378 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:40:38,282 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:40:38,282 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2146527943] [2024-09-11 20:40:38,285 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:40:38,285 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [828152338] [2024-09-11 20:40:38,285 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [828152338] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:40:38,285 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:40:38,285 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2024-09-11 20:40:38,285 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [780945272] [2024-09-11 20:40:38,285 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:40:38,286 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2024-09-11 20:40:38,286 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:40:38,286 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2024-09-11 20:40:38,286 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=135, Invalid=984, Unknown=3, NotChecked=0, Total=1122 [2024-09-11 20:40:38,286 INFO L87 Difference]: Start difference. First operand 79 states and 115 transitions. Second operand has 25 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 20 states have internal predecessors, (30), 5 states have call successors, (5), 3 states have call predecessors, (5), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-11 20:40:42,320 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-11 20:40:46,078 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:40:46,078 INFO L93 Difference]: Finished difference Result 97 states and 161 transitions. [2024-09-11 20:40:46,079 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2024-09-11 20:40:46,079 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 20 states have internal predecessors, (30), 5 states have call successors, (5), 3 states have call predecessors, (5), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Word has length 40 [2024-09-11 20:40:46,079 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:40:46,080 INFO L225 Difference]: With dead ends: 97 [2024-09-11 20:40:46,080 INFO L226 Difference]: Without dead ends: 95 [2024-09-11 20:40:46,081 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 20 SyntacticMatches, 2 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 578 ImplicationChecksByTransitivity, 16.9s TimeCoverageRelationStatistics Valid=291, Invalid=2058, Unknown=3, NotChecked=0, Total=2352 [2024-09-11 20:40:46,081 INFO L434 NwaCegarLoop]: 14 mSDtfsCounter, 61 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 891 mSolverCounterSat, 10 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 63 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 902 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 891 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.4s IncrementalHoareTripleChecker+Time [2024-09-11 20:40:46,081 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [63 Valid, 119 Invalid, 902 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 891 Invalid, 1 Unknown, 0 Unchecked, 6.4s Time] [2024-09-11 20:40:46,081 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2024-09-11 20:40:46,116 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 82. [2024-09-11 20:40:46,117 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 57 states have (on average 1.263157894736842) internal successors, (72), 64 states have internal predecessors, (72), 14 states have call successors, (14), 7 states have call predecessors, (14), 10 states have return successors, (40), 10 states have call predecessors, (40), 13 states have call successors, (40) [2024-09-11 20:40:46,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 126 transitions. [2024-09-11 20:40:46,118 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 126 transitions. Word has length 40 [2024-09-11 20:40:46,118 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:40:46,118 INFO L474 AbstractCegarLoop]: Abstraction has 82 states and 126 transitions. [2024-09-11 20:40:46,118 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 21 states have (on average 1.4285714285714286) internal successors, (30), 20 states have internal predecessors, (30), 5 states have call successors, (5), 3 states have call predecessors, (5), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-11 20:40:46,118 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:46,118 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 126 transitions. [2024-09-11 20:40:46,119 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-09-11 20:40:46,119 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:40:46,119 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:40:46,132 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2024-09-11 20:40:46,319 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2024-09-11 20:40:46,320 INFO L399 AbstractCegarLoop]: === Iteration 16 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:40:46,320 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:46,320 INFO L85 PathProgramCache]: Analyzing trace with hash -834651667, now seen corresponding path program 1 times [2024-09-11 20:40:46,320 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:40:46,320 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1983887572] [2024-09-11 20:40:46,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:46,320 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:40:46,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:40:46,343 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1318019193] [2024-09-11 20:40:46,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:46,344 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:40:46,344 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:40:46,345 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:40:46,346 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-09-11 20:40:46,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:46,498 INFO L262 TraceCheckSpWp]: Trace formula consists of 330 conjuncts, 135 conjuncts are in the unsatisfiable core [2024-09-11 20:40:46,501 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:40:46,504 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:40:46,505 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:40:46,507 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:40:46,511 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:40:46,515 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:46,519 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:46,532 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:46,538 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:47,298 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 19 [2024-09-11 20:40:47,301 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2024-09-11 20:40:47,319 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:40:47,321 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-11 20:40:47,378 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 8 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-11 20:40:47,378 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:40:48,237 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 38 treesize of output 34 [2024-09-11 20:40:48,240 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 34 treesize of output 30 [2024-09-11 20:40:48,243 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 30 treesize of output 26 [2024-09-11 20:40:48,246 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 22 [2024-09-11 20:40:49,496 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:40:49,496 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1983887572] [2024-09-11 20:40:49,496 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:40:49,496 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1318019193] [2024-09-11 20:40:49,496 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1318019193] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:40:49,496 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:40:49,496 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16] total 16 [2024-09-11 20:40:49,497 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [892468501] [2024-09-11 20:40:49,497 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:40:49,497 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2024-09-11 20:40:49,497 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:40:49,497 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2024-09-11 20:40:49,497 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=71, Invalid=480, Unknown=1, NotChecked=0, Total=552 [2024-09-11 20:40:49,497 INFO L87 Difference]: Start difference. First operand 82 states and 126 transitions. Second operand has 16 states, 13 states have (on average 2.1538461538461537) internal successors, (28), 12 states have internal predecessors, (28), 5 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-11 20:40:52,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:40:52,201 INFO L93 Difference]: Finished difference Result 97 states and 162 transitions. [2024-09-11 20:40:52,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2024-09-11 20:40:52,201 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 13 states have (on average 2.1538461538461537) internal successors, (28), 12 states have internal predecessors, (28), 5 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Word has length 40 [2024-09-11 20:40:52,202 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:40:52,202 INFO L225 Difference]: With dead ends: 97 [2024-09-11 20:40:52,202 INFO L226 Difference]: Without dead ends: 95 [2024-09-11 20:40:52,203 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 31 SyntacticMatches, 2 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 176 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=124, Invalid=745, Unknown=1, NotChecked=0, Total=870 [2024-09-11 20:40:52,203 INFO L434 NwaCegarLoop]: 23 mSDtfsCounter, 27 mSDsluCounter, 123 mSDsCounter, 0 mSdLazyCounter, 448 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 146 SdHoareTripleChecker+Invalid, 457 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 448 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2024-09-11 20:40:52,203 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 146 Invalid, 457 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 448 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2024-09-11 20:40:52,204 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2024-09-11 20:40:52,239 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 82. [2024-09-11 20:40:52,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 82 states, 57 states have (on average 1.263157894736842) internal successors, (72), 64 states have internal predecessors, (72), 14 states have call successors, (14), 7 states have call predecessors, (14), 10 states have return successors, (40), 10 states have call predecessors, (40), 13 states have call successors, (40) [2024-09-11 20:40:52,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 126 transitions. [2024-09-11 20:40:52,240 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 126 transitions. Word has length 40 [2024-09-11 20:40:52,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:40:52,240 INFO L474 AbstractCegarLoop]: Abstraction has 82 states and 126 transitions. [2024-09-11 20:40:52,241 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 13 states have (on average 2.1538461538461537) internal successors, (28), 12 states have internal predecessors, (28), 5 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-11 20:40:52,241 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:52,241 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 126 transitions. [2024-09-11 20:40:52,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-09-11 20:40:52,242 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:40:52,242 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:40:52,255 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2024-09-11 20:40:52,442 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2024-09-11 20:40:52,442 INFO L399 AbstractCegarLoop]: === Iteration 17 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:40:52,442 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:40:52,443 INFO L85 PathProgramCache]: Analyzing trace with hash -1669729751, now seen corresponding path program 1 times [2024-09-11 20:40:52,443 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:40:52,443 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2111397896] [2024-09-11 20:40:52,443 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:52,443 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:40:52,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:40:52,468 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1667386686] [2024-09-11 20:40:52,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:40:52,472 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:40:52,472 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:40:52,473 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:40:52,474 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-09-11 20:40:52,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:40:52,632 WARN L260 TraceCheckSpWp]: Trace formula consists of 330 conjuncts, 180 conjuncts are in the unsatisfiable core [2024-09-11 20:40:52,636 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:40:52,641 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:40:52,643 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:40:52,662 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:40:52,668 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:52,672 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:40:52,692 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:52,695 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:40:53,627 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-09-11 20:40:54,322 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 19 [2024-09-11 20:40:54,363 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:40:54,365 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 34 treesize of output 18 [2024-09-11 20:40:54,445 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 10 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-11 20:40:54,445 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:41:04,839 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:41:04,839 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2111397896] [2024-09-11 20:41:04,839 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:41:04,839 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1667386686] [2024-09-11 20:41:04,839 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1667386686] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:41:04,839 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:41:04,840 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27] total 27 [2024-09-11 20:41:04,840 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1565996795] [2024-09-11 20:41:04,840 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:41:04,840 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2024-09-11 20:41:04,840 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:41:04,840 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2024-09-11 20:41:04,841 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=155, Invalid=1103, Unknown=2, NotChecked=0, Total=1260 [2024-09-11 20:41:04,841 INFO L87 Difference]: Start difference. First operand 82 states and 126 transitions. Second operand has 28 states, 24 states have (on average 1.2916666666666667) internal successors, (31), 23 states have internal predecessors, (31), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-11 20:41:08,875 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-11 20:41:11,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:41:11,866 INFO L93 Difference]: Finished difference Result 149 states and 268 transitions. [2024-09-11 20:41:11,866 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2024-09-11 20:41:11,867 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 24 states have (on average 1.2916666666666667) internal successors, (31), 23 states have internal predecessors, (31), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Word has length 40 [2024-09-11 20:41:11,867 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:41:11,868 INFO L225 Difference]: With dead ends: 149 [2024-09-11 20:41:11,868 INFO L226 Difference]: Without dead ends: 96 [2024-09-11 20:41:11,869 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 18 SyntacticMatches, 2 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 753 ImplicationChecksByTransitivity, 11.1s TimeCoverageRelationStatistics Valid=396, Invalid=2572, Unknown=2, NotChecked=0, Total=2970 [2024-09-11 20:41:11,869 INFO L434 NwaCegarLoop]: 15 mSDtfsCounter, 76 mSDsluCounter, 113 mSDsCounter, 0 mSdLazyCounter, 833 mSolverCounterSat, 18 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 79 SdHoareTripleChecker+Valid, 128 SdHoareTripleChecker+Invalid, 852 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 833 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.5s IncrementalHoareTripleChecker+Time [2024-09-11 20:41:11,869 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [79 Valid, 128 Invalid, 852 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 833 Invalid, 1 Unknown, 0 Unchecked, 5.5s Time] [2024-09-11 20:41:11,869 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 96 states. [2024-09-11 20:41:11,915 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 96 to 86. [2024-09-11 20:41:11,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 59 states have (on average 1.2542372881355932) internal successors, (74), 67 states have internal predecessors, (74), 15 states have call successors, (15), 7 states have call predecessors, (15), 11 states have return successors, (50), 11 states have call predecessors, (50), 14 states have call successors, (50) [2024-09-11 20:41:11,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 139 transitions. [2024-09-11 20:41:11,916 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 139 transitions. Word has length 40 [2024-09-11 20:41:11,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:41:11,916 INFO L474 AbstractCegarLoop]: Abstraction has 86 states and 139 transitions. [2024-09-11 20:41:11,916 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 24 states have (on average 1.2916666666666667) internal successors, (31), 23 states have internal predecessors, (31), 5 states have call successors, (5), 4 states have call predecessors, (5), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-11 20:41:11,917 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:41:11,917 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 139 transitions. [2024-09-11 20:41:11,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2024-09-11 20:41:11,918 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:41:11,918 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:41:11,930 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2024-09-11 20:41:12,121 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2024-09-11 20:41:12,122 INFO L399 AbstractCegarLoop]: === Iteration 18 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:41:12,122 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:41:12,122 INFO L85 PathProgramCache]: Analyzing trace with hash 14393446, now seen corresponding path program 1 times [2024-09-11 20:41:12,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:41:12,122 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1913830211] [2024-09-11 20:41:12,122 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:41:12,122 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:41:12,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:41:12,156 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1963112841] [2024-09-11 20:41:12,156 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:41:12,156 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:41:12,156 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:41:12,158 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:41:12,158 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-09-11 20:41:12,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:41:12,304 INFO L262 TraceCheckSpWp]: Trace formula consists of 428 conjuncts, 175 conjuncts are in the unsatisfiable core [2024-09-11 20:41:12,311 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:41:12,326 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:41:12,331 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:41:12,335 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:12,341 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:12,356 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:12,360 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:13,536 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 40 treesize of output 28 [2024-09-11 20:41:13,539 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 19 [2024-09-11 20:41:13,545 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 30 treesize of output 18 [2024-09-11 20:41:13,580 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2024-09-11 20:41:13,582 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 16 [2024-09-11 20:41:13,587 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 14 [2024-09-11 20:41:13,683 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 6 proven. 19 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-09-11 20:41:13,683 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:41:16,116 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:41:16,117 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1913830211] [2024-09-11 20:41:16,117 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:41:16,117 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1963112841] [2024-09-11 20:41:16,117 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1963112841] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:41:16,117 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:41:16,117 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18] total 18 [2024-09-11 20:41:16,117 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [274465045] [2024-09-11 20:41:16,117 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:41:16,117 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2024-09-11 20:41:16,117 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:41:16,118 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2024-09-11 20:41:16,118 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=60, Invalid=446, Unknown=0, NotChecked=0, Total=506 [2024-09-11 20:41:16,118 INFO L87 Difference]: Start difference. First operand 86 states and 139 transitions. Second operand has 18 states, 14 states have (on average 2.142857142857143) internal successors, (30), 15 states have internal predecessors, (30), 6 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:41:17,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:41:17,422 INFO L93 Difference]: Finished difference Result 103 states and 182 transitions. [2024-09-11 20:41:17,423 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2024-09-11 20:41:17,423 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 14 states have (on average 2.142857142857143) internal successors, (30), 15 states have internal predecessors, (30), 6 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 53 [2024-09-11 20:41:17,423 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:41:17,424 INFO L225 Difference]: With dead ends: 103 [2024-09-11 20:41:17,424 INFO L226 Difference]: Without dead ends: 101 [2024-09-11 20:41:17,425 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 39 SyntacticMatches, 2 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 140 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=98, Invalid=714, Unknown=0, NotChecked=0, Total=812 [2024-09-11 20:41:17,425 INFO L434 NwaCegarLoop]: 24 mSDtfsCounter, 19 mSDsluCounter, 164 mSDsCounter, 0 mSdLazyCounter, 694 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 188 SdHoareTripleChecker+Invalid, 700 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 694 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2024-09-11 20:41:17,425 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 188 Invalid, 700 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 694 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2024-09-11 20:41:17,425 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2024-09-11 20:41:17,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 88. [2024-09-11 20:41:17,485 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 60 states have (on average 1.25) internal successors, (75), 68 states have internal predecessors, (75), 15 states have call successors, (15), 7 states have call predecessors, (15), 12 states have return successors, (59), 12 states have call predecessors, (59), 14 states have call successors, (59) [2024-09-11 20:41:17,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 149 transitions. [2024-09-11 20:41:17,486 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 149 transitions. Word has length 53 [2024-09-11 20:41:17,486 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:41:17,486 INFO L474 AbstractCegarLoop]: Abstraction has 88 states and 149 transitions. [2024-09-11 20:41:17,486 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 14 states have (on average 2.142857142857143) internal successors, (30), 15 states have internal predecessors, (30), 6 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:41:17,486 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:41:17,486 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 149 transitions. [2024-09-11 20:41:17,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-09-11 20:41:17,487 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:41:17,487 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:41:17,500 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2024-09-11 20:41:17,687 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2024-09-11 20:41:17,688 INFO L399 AbstractCegarLoop]: === Iteration 19 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:41:17,688 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:41:17,688 INFO L85 PathProgramCache]: Analyzing trace with hash -1063511988, now seen corresponding path program 1 times [2024-09-11 20:41:17,688 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:41:17,688 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [119662848] [2024-09-11 20:41:17,688 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:41:17,688 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:41:17,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:41:17,712 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [672046398] [2024-09-11 20:41:17,712 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:41:17,712 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:41:17,712 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:41:17,714 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:41:17,715 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2024-09-11 20:41:17,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:41:17,877 INFO L262 TraceCheckSpWp]: Trace formula consists of 439 conjuncts, 197 conjuncts are in the unsatisfiable core [2024-09-11 20:41:17,881 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:41:17,884 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:41:17,887 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:41:17,890 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:17,893 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:17,897 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:41:17,914 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:17,916 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:19,242 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 30 treesize of output 18 [2024-09-11 20:41:19,249 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 40 treesize of output 28 [2024-09-11 20:41:19,251 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 19 [2024-09-11 20:41:19,286 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 14 [2024-09-11 20:41:19,291 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2024-09-11 20:41:19,293 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 16 [2024-09-11 20:41:19,362 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 6 proven. 21 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-11 20:41:19,363 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:41:21,809 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:41:21,809 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [119662848] [2024-09-11 20:41:21,809 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:41:21,809 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [672046398] [2024-09-11 20:41:21,809 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [672046398] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:41:21,809 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:41:21,809 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20] total 20 [2024-09-11 20:41:21,809 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [861782675] [2024-09-11 20:41:21,809 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:41:21,809 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2024-09-11 20:41:21,810 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:41:21,810 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2024-09-11 20:41:21,810 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=72, Invalid=528, Unknown=0, NotChecked=0, Total=600 [2024-09-11 20:41:21,810 INFO L87 Difference]: Start difference. First operand 88 states and 149 transitions. Second operand has 20 states, 16 states have (on average 2.0) internal successors, (32), 16 states have internal predecessors, (32), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:41:23,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:41:23,353 INFO L93 Difference]: Finished difference Result 103 states and 186 transitions. [2024-09-11 20:41:23,353 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2024-09-11 20:41:23,354 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 16 states have (on average 2.0) internal successors, (32), 16 states have internal predecessors, (32), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 55 [2024-09-11 20:41:23,354 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:41:23,355 INFO L225 Difference]: With dead ends: 103 [2024-09-11 20:41:23,355 INFO L226 Difference]: Without dead ends: 101 [2024-09-11 20:41:23,355 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 39 SyntacticMatches, 2 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 196 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=106, Invalid=764, Unknown=0, NotChecked=0, Total=870 [2024-09-11 20:41:23,356 INFO L434 NwaCegarLoop]: 22 mSDtfsCounter, 24 mSDsluCounter, 157 mSDsCounter, 0 mSdLazyCounter, 775 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 25 SdHoareTripleChecker+Valid, 179 SdHoareTripleChecker+Invalid, 785 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 775 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2024-09-11 20:41:23,356 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [25 Valid, 179 Invalid, 785 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 775 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2024-09-11 20:41:23,356 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2024-09-11 20:41:23,410 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 88. [2024-09-11 20:41:23,410 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 60 states have (on average 1.25) internal successors, (75), 68 states have internal predecessors, (75), 15 states have call successors, (15), 7 states have call predecessors, (15), 12 states have return successors, (59), 12 states have call predecessors, (59), 14 states have call successors, (59) [2024-09-11 20:41:23,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 149 transitions. [2024-09-11 20:41:23,411 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 149 transitions. Word has length 55 [2024-09-11 20:41:23,411 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:41:23,411 INFO L474 AbstractCegarLoop]: Abstraction has 88 states and 149 transitions. [2024-09-11 20:41:23,411 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 16 states have (on average 2.0) internal successors, (32), 16 states have internal predecessors, (32), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:41:23,411 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:41:23,411 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 149 transitions. [2024-09-11 20:41:23,412 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-09-11 20:41:23,412 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:41:23,412 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:41:23,425 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2024-09-11 20:41:23,616 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,14 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:41:23,616 INFO L399 AbstractCegarLoop]: === Iteration 20 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:41:23,617 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:41:23,617 INFO L85 PathProgramCache]: Analyzing trace with hash 720490764, now seen corresponding path program 1 times [2024-09-11 20:41:23,617 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:41:23,617 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1197830201] [2024-09-11 20:41:23,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:41:23,617 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:41:23,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:41:23,641 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1359539936] [2024-09-11 20:41:23,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:41:23,641 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:41:23,642 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:41:23,643 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:41:23,644 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2024-09-11 20:41:23,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:41:23,846 WARN L260 TraceCheckSpWp]: Trace formula consists of 440 conjuncts, 262 conjuncts are in the unsatisfiable core [2024-09-11 20:41:23,851 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:41:23,855 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:41:23,862 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:41:23,873 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:23,878 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:23,881 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:41:23,885 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:41:23,900 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:23,905 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:27,992 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 59 treesize of output 39 [2024-09-11 20:41:27,999 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 19 [2024-09-11 20:41:28,035 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 30 treesize of output 18 [2024-09-11 20:41:28,199 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-11 20:41:28,199 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 32 treesize of output 32 [2024-09-11 20:41:28,203 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 55 treesize of output 35 [2024-09-11 20:41:28,205 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 16 [2024-09-11 20:41:28,429 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 8 proven. 23 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-09-11 20:41:28,429 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:41:43,044 WARN L854 $PredicateComparison]: unable to prove that (let ((.cse1 (select |c_old(#memory_int#3)| |c_func_to_recursive_line_0_to_51_0_#in~q.base|)) (.cse3 (select (select |c_old(#memory_int#4)| |c_func_to_recursive_line_0_to_51_0_#in~a.base|) |c_func_to_recursive_line_0_to_51_0_#in~a.offset|))) (let ((.cse2 (+ (select .cse1 |c_func_to_recursive_line_0_to_51_0_#in~q.offset|) (* (select (select |c_old(#memory_int#5)| |c_func_to_recursive_line_0_to_51_0_#in~p.base|) |c_func_to_recursive_line_0_to_51_0_#in~p.offset|) .cse3))) (.cse4 (forall ((|v_func_to_recursive_line_0_to_51_0_#in~y.offset_BEFORE_CALL_17| Int) (|v_func_to_recursive_line_0_to_51_0_#in~q.offset_BEFORE_CALL_29| Int) (|v_func_to_recursive_line_0_to_51_0_#in~x.offset_BEFORE_CALL_23| Int) (|v_func_to_recursive_line_0_to_51_0_#in~y.base_BEFORE_CALL_17| Int) (|v_func_to_recursive_line_0_to_51_0_#in~x.base_BEFORE_CALL_23| Int) (|v_func_to_recursive_line_0_to_51_0_#in~q.base_BEFORE_CALL_29| Int)) (= (select (select |c_#memory_int#3| |v_func_to_recursive_line_0_to_51_0_#in~q.base_BEFORE_CALL_29|) |v_func_to_recursive_line_0_to_51_0_#in~q.offset_BEFORE_CALL_29|) (* (select (select |c_#memory_int#1| |v_func_to_recursive_line_0_to_51_0_#in~x.base_BEFORE_CALL_23|) |v_func_to_recursive_line_0_to_51_0_#in~x.offset_BEFORE_CALL_23|) (select (select |c_#memory_int#6| |v_func_to_recursive_line_0_to_51_0_#in~y.base_BEFORE_CALL_17|) |v_func_to_recursive_line_0_to_51_0_#in~y.offset_BEFORE_CALL_17|)))))) (and (forall ((|v_func_to_recursive_line_0_to_51_0_#in~q.offset_BEFORE_CALL_29| Int) (|v_func_to_recursive_line_0_to_51_0_#in~y.offset_BEFORE_CALL_17| Int) (|v_func_to_recursive_line_0_to_51_0_#in~x.offset_BEFORE_CALL_23| Int) (|v_func_to_recursive_line_0_to_51_0_#in~y.base_BEFORE_CALL_17| Int) (|v_func_to_recursive_line_0_to_51_0_#in~q.base_BEFORE_CALL_29| Int) (|v_func_to_recursive_line_0_to_51_0_#in~x.base_BEFORE_CALL_23| Int)) (let ((.cse0 (* (select (select |c_#memory_int#1| |v_func_to_recursive_line_0_to_51_0_#in~x.base_BEFORE_CALL_23|) |v_func_to_recursive_line_0_to_51_0_#in~x.offset_BEFORE_CALL_23|) (select (select |c_#memory_int#6| |v_func_to_recursive_line_0_to_51_0_#in~y.base_BEFORE_CALL_17|) |v_func_to_recursive_line_0_to_51_0_#in~y.offset_BEFORE_CALL_17|)))) (or (= (select (select |c_#memory_int#3| |v_func_to_recursive_line_0_to_51_0_#in~q.base_BEFORE_CALL_29|) |v_func_to_recursive_line_0_to_51_0_#in~q.offset_BEFORE_CALL_29|) .cse0) (not (= (select (select (store |c_old(#memory_int#3)| |c_func_to_recursive_line_0_to_51_0_#in~q.base| (store .cse1 |c_func_to_recursive_line_0_to_51_0_#in~q.offset| .cse2)) |v_func_to_recursive_line_0_to_51_0_#in~q.base_BEFORE_CALL_29|) |v_func_to_recursive_line_0_to_51_0_#in~q.offset_BEFORE_CALL_29|) .cse0))))) (or (not (= .cse3 1)) .cse4) (or (= (* (select (select |c_#memory_int#6| |c_func_to_recursive_line_0_to_51_0_#in~y.base|) |c_func_to_recursive_line_0_to_51_0_#in~y.offset|) (select (select |c_#memory_int#1| |c_func_to_recursive_line_0_to_51_0_#in~x.base|) |c_func_to_recursive_line_0_to_51_0_#in~x.offset|)) .cse2) .cse4) (or (< 0 .cse3) .cse4) (or .cse4 (= (select (select |c_old(#memory_int#2)| |c_func_to_recursive_line_0_to_51_0_#in~b.base|) |c_func_to_recursive_line_0_to_51_0_#in~b.offset|) 1))))) is different from false [2024-09-11 20:41:43,873 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:41:43,873 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1197830201] [2024-09-11 20:41:43,873 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:41:43,873 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1359539936] [2024-09-11 20:41:43,873 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1359539936] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:41:43,873 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:41:43,873 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [29] total 29 [2024-09-11 20:41:43,874 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2058731688] [2024-09-11 20:41:43,874 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:41:43,874 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 30 states [2024-09-11 20:41:43,874 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:41:43,874 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 30 interpolants. [2024-09-11 20:41:43,874 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=137, Invalid=1055, Unknown=2, NotChecked=66, Total=1260 [2024-09-11 20:41:43,875 INFO L87 Difference]: Start difference. First operand 88 states and 149 transitions. Second operand has 30 states, 25 states have (on average 1.44) internal successors, (36), 25 states have internal predecessors, (36), 6 states have call successors, (6), 3 states have call predecessors, (6), 5 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:41:47,909 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-11 20:41:54,663 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.47s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2024-09-11 20:41:56,602 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:41:56,602 INFO L93 Difference]: Finished difference Result 107 states and 208 transitions. [2024-09-11 20:41:56,603 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2024-09-11 20:41:56,603 INFO L78 Accepts]: Start accepts. Automaton has has 30 states, 25 states have (on average 1.44) internal successors, (36), 25 states have internal predecessors, (36), 6 states have call successors, (6), 3 states have call predecessors, (6), 5 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 55 [2024-09-11 20:41:56,603 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:41:56,604 INFO L225 Difference]: With dead ends: 107 [2024-09-11 20:41:56,604 INFO L226 Difference]: Without dead ends: 105 [2024-09-11 20:41:56,605 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 83 GetRequests, 30 SyntacticMatches, 2 SemanticMatches, 51 ConstructedPredicates, 1 IntricatePredicates, 0 DeprecatedPredicates, 634 ImplicationChecksByTransitivity, 12.7s TimeCoverageRelationStatistics Valid=292, Invalid=2362, Unknown=2, NotChecked=100, Total=2756 [2024-09-11 20:41:56,605 INFO L434 NwaCegarLoop]: 15 mSDtfsCounter, 62 mSDsluCounter, 125 mSDsCounter, 0 mSdLazyCounter, 1197 mSolverCounterSat, 11 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 140 SdHoareTripleChecker+Invalid, 1209 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 1197 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.9s IncrementalHoareTripleChecker+Time [2024-09-11 20:41:56,605 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 140 Invalid, 1209 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 1197 Invalid, 1 Unknown, 0 Unchecked, 10.9s Time] [2024-09-11 20:41:56,606 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2024-09-11 20:41:56,669 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 88. [2024-09-11 20:41:56,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 60 states have (on average 1.25) internal successors, (75), 68 states have internal predecessors, (75), 15 states have call successors, (15), 7 states have call predecessors, (15), 12 states have return successors, (59), 12 states have call predecessors, (59), 14 states have call successors, (59) [2024-09-11 20:41:56,670 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 149 transitions. [2024-09-11 20:41:56,671 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 149 transitions. Word has length 55 [2024-09-11 20:41:56,671 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:41:56,671 INFO L474 AbstractCegarLoop]: Abstraction has 88 states and 149 transitions. [2024-09-11 20:41:56,671 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 30 states, 25 states have (on average 1.44) internal successors, (36), 25 states have internal predecessors, (36), 6 states have call successors, (6), 3 states have call predecessors, (6), 5 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:41:56,671 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:41:56,671 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 149 transitions. [2024-09-11 20:41:56,673 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-09-11 20:41:56,673 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:41:56,673 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:41:56,687 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2024-09-11 20:41:56,873 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,15 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:41:56,874 INFO L399 AbstractCegarLoop]: === Iteration 21 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:41:56,874 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:41:56,874 INFO L85 PathProgramCache]: Analyzing trace with hash 133684750, now seen corresponding path program 1 times [2024-09-11 20:41:56,874 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:41:56,874 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1507181883] [2024-09-11 20:41:56,874 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:41:56,874 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:41:56,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:41:56,905 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1371163680] [2024-09-11 20:41:56,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:41:56,905 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:41:56,905 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:41:56,907 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:41:56,908 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2024-09-11 20:41:57,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:41:57,126 INFO L262 TraceCheckSpWp]: Trace formula consists of 437 conjuncts, 186 conjuncts are in the unsatisfiable core [2024-09-11 20:41:57,130 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:41:57,135 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:41:57,141 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:41:57,153 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:41:57,156 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:41:57,160 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:57,164 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:57,180 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:57,184 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:41:58,906 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 30 treesize of output 18 [2024-09-11 20:41:58,914 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 40 treesize of output 28 [2024-09-11 20:41:58,918 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 19 [2024-09-11 20:41:58,997 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-11 20:41:58,997 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 46 treesize of output 38 [2024-09-11 20:41:59,002 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:41:59,007 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 26 treesize of output 14 [2024-09-11 20:41:59,087 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 25 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-09-11 20:41:59,087 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:42:03,310 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:42:03,311 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1507181883] [2024-09-11 20:42:03,311 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:42:03,311 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1371163680] [2024-09-11 20:42:03,311 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1371163680] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:42:03,311 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:42:03,311 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20] total 20 [2024-09-11 20:42:03,311 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1496498786] [2024-09-11 20:42:03,311 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:42:03,311 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-11 20:42:03,311 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:42:03,311 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-11 20:42:03,312 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=82, Invalid=568, Unknown=0, NotChecked=0, Total=650 [2024-09-11 20:42:03,312 INFO L87 Difference]: Start difference. First operand 88 states and 149 transitions. Second operand has 21 states, 17 states have (on average 1.8823529411764706) internal successors, (32), 17 states have internal predecessors, (32), 6 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:42:07,337 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-11 20:42:12,061 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:42:12,062 INFO L93 Difference]: Finished difference Result 107 states and 204 transitions. [2024-09-11 20:42:12,063 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2024-09-11 20:42:12,063 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 17 states have (on average 1.8823529411764706) internal successors, (32), 17 states have internal predecessors, (32), 6 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 55 [2024-09-11 20:42:12,063 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:42:12,064 INFO L225 Difference]: With dead ends: 107 [2024-09-11 20:42:12,064 INFO L226 Difference]: Without dead ends: 105 [2024-09-11 20:42:12,064 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 70 GetRequests, 37 SyntacticMatches, 2 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 267 ImplicationChecksByTransitivity, 4.1s TimeCoverageRelationStatistics Valid=131, Invalid=925, Unknown=0, NotChecked=0, Total=1056 [2024-09-11 20:42:12,065 INFO L434 NwaCegarLoop]: 20 mSDtfsCounter, 30 mSDsluCounter, 141 mSDsCounter, 0 mSdLazyCounter, 774 mSolverCounterSat, 10 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 785 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 774 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.3s IncrementalHoareTripleChecker+Time [2024-09-11 20:42:12,065 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 161 Invalid, 785 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 774 Invalid, 1 Unknown, 0 Unchecked, 7.3s Time] [2024-09-11 20:42:12,065 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 105 states. [2024-09-11 20:42:12,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 105 to 90. [2024-09-11 20:42:12,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 61 states have (on average 1.2459016393442623) internal successors, (76), 69 states have internal predecessors, (76), 15 states have call successors, (15), 7 states have call predecessors, (15), 13 states have return successors, (66), 13 states have call predecessors, (66), 14 states have call successors, (66) [2024-09-11 20:42:12,131 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 157 transitions. [2024-09-11 20:42:12,131 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 157 transitions. Word has length 55 [2024-09-11 20:42:12,131 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:42:12,131 INFO L474 AbstractCegarLoop]: Abstraction has 90 states and 157 transitions. [2024-09-11 20:42:12,131 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 17 states have (on average 1.8823529411764706) internal successors, (32), 17 states have internal predecessors, (32), 6 states have call successors, (6), 3 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:42:12,132 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:12,132 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 157 transitions. [2024-09-11 20:42:12,132 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-09-11 20:42:12,132 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:42:12,133 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:42:12,147 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2024-09-11 20:42:12,333 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2024-09-11 20:42:12,333 INFO L399 AbstractCegarLoop]: === Iteration 22 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:42:12,333 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:12,334 INFO L85 PathProgramCache]: Analyzing trace with hash 782530378, now seen corresponding path program 1 times [2024-09-11 20:42:12,334 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:42:12,334 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [805722960] [2024-09-11 20:42:12,334 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:12,334 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:42:12,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:42:12,363 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [632222877] [2024-09-11 20:42:12,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:12,363 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:12,363 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:42:12,364 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:42:12,366 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2024-09-11 20:42:12,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:12,573 INFO L262 TraceCheckSpWp]: Trace formula consists of 437 conjuncts, 192 conjuncts are in the unsatisfiable core [2024-09-11 20:42:12,576 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:42:12,589 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:42:12,604 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:42:12,608 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:42:12,613 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:42:12,617 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:42:12,631 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:42:12,633 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:42:14,270 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 40 treesize of output 28 [2024-09-11 20:42:14,273 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 19 [2024-09-11 20:42:14,287 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 30 treesize of output 18 [2024-09-11 20:42:14,334 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2024-09-11 20:42:14,337 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 16 [2024-09-11 20:42:14,348 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-11 20:42:14,348 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 33 treesize of output 29 [2024-09-11 20:42:14,430 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 27 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-11 20:42:14,430 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:42:16,928 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:42:16,928 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [805722960] [2024-09-11 20:42:16,928 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:42:16,928 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [632222877] [2024-09-11 20:42:16,928 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [632222877] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:42:16,928 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:42:16,928 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22] total 22 [2024-09-11 20:42:16,928 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [569805989] [2024-09-11 20:42:16,928 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:42:16,929 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2024-09-11 20:42:16,929 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:42:16,929 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2024-09-11 20:42:16,929 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=96, Invalid=660, Unknown=0, NotChecked=0, Total=756 [2024-09-11 20:42:16,929 INFO L87 Difference]: Start difference. First operand 90 states and 157 transitions. Second operand has 23 states, 19 states have (on average 1.6842105263157894) internal successors, (32), 18 states have internal predecessors, (32), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:42:20,961 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-11 20:42:23,292 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:42:23,293 INFO L93 Difference]: Finished difference Result 119 states and 238 transitions. [2024-09-11 20:42:23,294 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-11 20:42:23,294 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 19 states have (on average 1.6842105263157894) internal successors, (32), 18 states have internal predecessors, (32), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 55 [2024-09-11 20:42:23,295 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:42:23,296 INFO L225 Difference]: With dead ends: 119 [2024-09-11 20:42:23,296 INFO L226 Difference]: Without dead ends: 117 [2024-09-11 20:42:23,296 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 71 GetRequests, 35 SyntacticMatches, 2 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 355 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=159, Invalid=1101, Unknown=0, NotChecked=0, Total=1260 [2024-09-11 20:42:23,297 INFO L434 NwaCegarLoop]: 18 mSDtfsCounter, 42 mSDsluCounter, 132 mSDsCounter, 0 mSdLazyCounter, 837 mSolverCounterSat, 21 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 46 SdHoareTripleChecker+Valid, 150 SdHoareTripleChecker+Invalid, 859 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 837 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.9s IncrementalHoareTripleChecker+Time [2024-09-11 20:42:23,299 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [46 Valid, 150 Invalid, 859 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 837 Invalid, 1 Unknown, 0 Unchecked, 5.9s Time] [2024-09-11 20:42:23,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117 states. [2024-09-11 20:42:23,360 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117 to 92. [2024-09-11 20:42:23,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 92 states, 62 states have (on average 1.2419354838709677) internal successors, (77), 70 states have internal predecessors, (77), 15 states have call successors, (15), 7 states have call predecessors, (15), 14 states have return successors, (75), 14 states have call predecessors, (75), 14 states have call successors, (75) [2024-09-11 20:42:23,362 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 92 states to 92 states and 167 transitions. [2024-09-11 20:42:23,362 INFO L78 Accepts]: Start accepts. Automaton has 92 states and 167 transitions. Word has length 55 [2024-09-11 20:42:23,362 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:42:23,362 INFO L474 AbstractCegarLoop]: Abstraction has 92 states and 167 transitions. [2024-09-11 20:42:23,362 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 19 states have (on average 1.6842105263157894) internal successors, (32), 18 states have internal predecessors, (32), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:42:23,363 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:23,363 INFO L276 IsEmpty]: Start isEmpty. Operand 92 states and 167 transitions. [2024-09-11 20:42:23,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-09-11 20:42:23,366 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:42:23,366 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:42:23,382 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Ended with exit code 0 [2024-09-11 20:42:23,570 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21,17 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:23,570 INFO L399 AbstractCegarLoop]: === Iteration 23 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:42:23,571 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:23,571 INFO L85 PathProgramCache]: Analyzing trace with hash 1613946227, now seen corresponding path program 1 times [2024-09-11 20:42:23,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:42:23,571 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1528894904] [2024-09-11 20:42:23,571 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:23,571 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:42:23,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:42:23,588 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1768349614] [2024-09-11 20:42:23,588 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:23,588 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:23,588 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:42:23,590 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:42:23,590 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2024-09-11 20:42:23,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:23,759 INFO L262 TraceCheckSpWp]: Trace formula consists of 346 conjuncts, 79 conjuncts are in the unsatisfiable core [2024-09-11 20:42:23,761 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:42:23,777 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:42:23,780 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:42:24,040 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 13 [2024-09-11 20:42:24,262 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 13 [2024-09-11 20:42:24,368 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 11 [2024-09-11 20:42:24,418 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 16 proven. 6 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-11 20:42:24,418 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:42:24,828 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 40 treesize of output 24 [2024-09-11 20:42:24,879 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:42:24,879 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1528894904] [2024-09-11 20:42:24,879 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:42:24,879 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1768349614] [2024-09-11 20:42:24,879 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1768349614] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:42:24,879 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:42:24,879 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24] total 24 [2024-09-11 20:42:24,880 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1484731816] [2024-09-11 20:42:24,880 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:42:24,880 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2024-09-11 20:42:24,880 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:42:24,880 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2024-09-11 20:42:24,880 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=81, Invalid=621, Unknown=0, NotChecked=0, Total=702 [2024-09-11 20:42:24,881 INFO L87 Difference]: Start difference. First operand 92 states and 167 transitions. Second operand has 24 states, 21 states have (on average 1.5238095238095237) internal successors, (32), 21 states have internal predecessors, (32), 6 states have call successors, (6), 5 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:42:25,946 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:42:25,946 INFO L93 Difference]: Finished difference Result 134 states and 287 transitions. [2024-09-11 20:42:25,947 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2024-09-11 20:42:25,947 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 21 states have (on average 1.5238095238095237) internal successors, (32), 21 states have internal predecessors, (32), 6 states have call successors, (6), 5 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) Word has length 46 [2024-09-11 20:42:25,947 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:42:25,948 INFO L225 Difference]: With dead ends: 134 [2024-09-11 20:42:25,948 INFO L226 Difference]: Without dead ends: 118 [2024-09-11 20:42:25,949 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 72 GetRequests, 31 SyntacticMatches, 3 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 320 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=174, Invalid=1386, Unknown=0, NotChecked=0, Total=1560 [2024-09-11 20:42:25,949 INFO L434 NwaCegarLoop]: 18 mSDtfsCounter, 43 mSDsluCounter, 133 mSDsCounter, 0 mSdLazyCounter, 1099 mSolverCounterSat, 17 mSolverCounterUnsat, 7 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 151 SdHoareTripleChecker+Invalid, 1123 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 1099 IncrementalHoareTripleChecker+Invalid, 7 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-09-11 20:42:25,949 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 151 Invalid, 1123 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 1099 Invalid, 7 Unknown, 0 Unchecked, 0.7s Time] [2024-09-11 20:42:25,949 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118 states. [2024-09-11 20:42:26,013 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118 to 102. [2024-09-11 20:42:26,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 102 states, 68 states have (on average 1.2352941176470589) internal successors, (84), 76 states have internal predecessors, (84), 17 states have call successors, (17), 8 states have call predecessors, (17), 16 states have return successors, (103), 17 states have call predecessors, (103), 15 states have call successors, (103) [2024-09-11 20:42:26,014 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 102 states to 102 states and 204 transitions. [2024-09-11 20:42:26,014 INFO L78 Accepts]: Start accepts. Automaton has 102 states and 204 transitions. Word has length 46 [2024-09-11 20:42:26,014 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:42:26,014 INFO L474 AbstractCegarLoop]: Abstraction has 102 states and 204 transitions. [2024-09-11 20:42:26,014 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 21 states have (on average 1.5238095238095237) internal successors, (32), 21 states have internal predecessors, (32), 6 states have call successors, (6), 5 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:42:26,015 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:26,015 INFO L276 IsEmpty]: Start isEmpty. Operand 102 states and 204 transitions. [2024-09-11 20:42:26,015 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2024-09-11 20:42:26,015 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:42:26,016 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:42:26,029 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2024-09-11 20:42:26,216 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22,18 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:26,216 INFO L399 AbstractCegarLoop]: === Iteration 24 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:42:26,216 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:26,216 INFO L85 PathProgramCache]: Analyzing trace with hash -2057151944, now seen corresponding path program 1 times [2024-09-11 20:42:26,216 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:42:26,217 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1160224068] [2024-09-11 20:42:26,217 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:26,217 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:42:26,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:26,561 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:42:26,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:26,754 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:26,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:26,756 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:42:26,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:26,900 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:26,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:26,903 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-09-11 20:42:26,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:26,949 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:26,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:26,951 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 22 proven. 7 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-11 20:42:26,952 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:42:26,952 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1160224068] [2024-09-11 20:42:26,952 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1160224068] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:42:26,952 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [358448667] [2024-09-11 20:42:26,952 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:26,952 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:26,952 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:42:26,953 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:42:26,955 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2024-09-11 20:42:27,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:27,125 INFO L262 TraceCheckSpWp]: Trace formula consists of 438 conjuncts, 36 conjuncts are in the unsatisfiable core [2024-09-11 20:42:27,126 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:42:27,182 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 34 treesize of output 18 [2024-09-11 20:42:27,360 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 24 proven. 7 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-09-11 20:42:27,361 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:42:27,710 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 24 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-11 20:42:27,710 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [358448667] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:42:27,710 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:42:27,710 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 11, 13] total 25 [2024-09-11 20:42:27,710 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1529603819] [2024-09-11 20:42:27,710 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:42:27,710 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2024-09-11 20:42:27,710 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:42:27,711 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2024-09-11 20:42:27,711 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=94, Invalid=506, Unknown=0, NotChecked=0, Total=600 [2024-09-11 20:42:27,711 INFO L87 Difference]: Start difference. First operand 102 states and 204 transitions. Second operand has 25 states, 20 states have (on average 3.25) internal successors, (65), 21 states have internal predecessors, (65), 10 states have call successors, (13), 6 states have call predecessors, (13), 6 states have return successors, (10), 7 states have call predecessors, (10), 9 states have call successors, (10) [2024-09-11 20:42:29,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:42:29,334 INFO L93 Difference]: Finished difference Result 203 states and 720 transitions. [2024-09-11 20:42:29,334 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2024-09-11 20:42:29,334 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 20 states have (on average 3.25) internal successors, (65), 21 states have internal predecessors, (65), 10 states have call successors, (13), 6 states have call predecessors, (13), 6 states have return successors, (10), 7 states have call predecessors, (10), 9 states have call successors, (10) Word has length 57 [2024-09-11 20:42:29,335 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:42:29,337 INFO L225 Difference]: With dead ends: 203 [2024-09-11 20:42:29,337 INFO L226 Difference]: Without dead ends: 171 [2024-09-11 20:42:29,338 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 953 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=687, Invalid=2973, Unknown=0, NotChecked=0, Total=3660 [2024-09-11 20:42:29,338 INFO L434 NwaCegarLoop]: 29 mSDtfsCounter, 161 mSDsluCounter, 177 mSDsCounter, 0 mSdLazyCounter, 1064 mSolverCounterSat, 199 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 206 SdHoareTripleChecker+Invalid, 1263 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 199 IncrementalHoareTripleChecker+Valid, 1064 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-09-11 20:42:29,338 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [161 Valid, 206 Invalid, 1263 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [199 Valid, 1064 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-09-11 20:42:29,339 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 171 states. [2024-09-11 20:42:29,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 171 to 113. [2024-09-11 20:42:29,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 113 states, 72 states have (on average 1.2222222222222223) internal successors, (88), 82 states have internal predecessors, (88), 17 states have call successors, (17), 7 states have call predecessors, (17), 23 states have return successors, (164), 23 states have call predecessors, (164), 16 states have call successors, (164) [2024-09-11 20:42:29,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 113 states to 113 states and 269 transitions. [2024-09-11 20:42:29,425 INFO L78 Accepts]: Start accepts. Automaton has 113 states and 269 transitions. Word has length 57 [2024-09-11 20:42:29,425 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:42:29,425 INFO L474 AbstractCegarLoop]: Abstraction has 113 states and 269 transitions. [2024-09-11 20:42:29,425 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 20 states have (on average 3.25) internal successors, (65), 21 states have internal predecessors, (65), 10 states have call successors, (13), 6 states have call predecessors, (13), 6 states have return successors, (10), 7 states have call predecessors, (10), 9 states have call successors, (10) [2024-09-11 20:42:29,425 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:29,425 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 269 transitions. [2024-09-11 20:42:29,426 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2024-09-11 20:42:29,426 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:42:29,427 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:42:29,440 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Ended with exit code 0 [2024-09-11 20:42:29,627 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2024-09-11 20:42:29,627 INFO L399 AbstractCegarLoop]: === Iteration 25 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:42:29,628 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:29,628 INFO L85 PathProgramCache]: Analyzing trace with hash -51936077, now seen corresponding path program 1 times [2024-09-11 20:42:29,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:42:29,628 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1867609070] [2024-09-11 20:42:29,628 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:29,628 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:42:29,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:42:29,644 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [921699246] [2024-09-11 20:42:29,645 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:29,645 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:29,645 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:42:29,646 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:42:29,648 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2024-09-11 20:42:29,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:29,844 INFO L262 TraceCheckSpWp]: Trace formula consists of 345 conjuncts, 28 conjuncts are in the unsatisfiable core [2024-09-11 20:42:29,846 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:42:29,880 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-09-11 20:42:29,992 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 17 proven. 5 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-11 20:42:29,993 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:42:30,247 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:42:30,247 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1867609070] [2024-09-11 20:42:30,247 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:42:30,247 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [921699246] [2024-09-11 20:42:30,247 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [921699246] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:42:30,247 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:42:30,247 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13] total 13 [2024-09-11 20:42:30,247 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1967121624] [2024-09-11 20:42:30,247 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:42:30,247 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2024-09-11 20:42:30,247 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:42:30,248 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2024-09-11 20:42:30,248 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=218, Unknown=0, NotChecked=0, Total=272 [2024-09-11 20:42:30,248 INFO L87 Difference]: Start difference. First operand 113 states and 269 transitions. Second operand has 13 states, 12 states have (on average 2.6666666666666665) internal successors, (32), 11 states have internal predecessors, (32), 5 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2024-09-11 20:42:30,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:42:30,577 INFO L93 Difference]: Finished difference Result 141 states and 322 transitions. [2024-09-11 20:42:30,577 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-09-11 20:42:30,578 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 2.6666666666666665) internal successors, (32), 11 states have internal predecessors, (32), 5 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 46 [2024-09-11 20:42:30,578 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:42:30,579 INFO L225 Difference]: With dead ends: 141 [2024-09-11 20:42:30,579 INFO L226 Difference]: Without dead ends: 125 [2024-09-11 20:42:30,579 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 49 SyntacticMatches, 4 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 110 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=106, Invalid=446, Unknown=0, NotChecked=0, Total=552 [2024-09-11 20:42:30,580 INFO L434 NwaCegarLoop]: 18 mSDtfsCounter, 31 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 315 mSolverCounterSat, 12 mSolverCounterUnsat, 4 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 331 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 315 IncrementalHoareTripleChecker+Invalid, 4 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-11 20:42:30,580 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 111 Invalid, 331 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 315 Invalid, 4 Unknown, 0 Unchecked, 0.2s Time] [2024-09-11 20:42:30,580 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2024-09-11 20:42:30,667 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 121. [2024-09-11 20:42:30,667 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 121 states, 77 states have (on average 1.2077922077922079) internal successors, (93), 86 states have internal predecessors, (93), 18 states have call successors, (18), 8 states have call predecessors, (18), 25 states have return successors, (178), 26 states have call predecessors, (178), 16 states have call successors, (178) [2024-09-11 20:42:30,668 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 121 states to 121 states and 289 transitions. [2024-09-11 20:42:30,668 INFO L78 Accepts]: Start accepts. Automaton has 121 states and 289 transitions. Word has length 46 [2024-09-11 20:42:30,668 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:42:30,668 INFO L474 AbstractCegarLoop]: Abstraction has 121 states and 289 transitions. [2024-09-11 20:42:30,669 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 2.6666666666666665) internal successors, (32), 11 states have internal predecessors, (32), 5 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2024-09-11 20:42:30,669 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:30,669 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 289 transitions. [2024-09-11 20:42:30,670 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2024-09-11 20:42:30,670 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:42:30,670 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:42:30,684 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2024-09-11 20:42:30,871 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2024-09-11 20:42:30,871 INFO L399 AbstractCegarLoop]: === Iteration 26 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:42:30,871 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:30,871 INFO L85 PathProgramCache]: Analyzing trace with hash 211861944, now seen corresponding path program 1 times [2024-09-11 20:42:30,871 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:42:30,871 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1181200706] [2024-09-11 20:42:30,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:30,872 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:42:30,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:31,220 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:42:31,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:31,415 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:31,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:31,417 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:42:31,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:31,563 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:31,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:31,566 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-09-11 20:42:31,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:31,608 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:31,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:31,611 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 20 proven. 9 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-11 20:42:31,611 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:42:31,612 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1181200706] [2024-09-11 20:42:31,612 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1181200706] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:42:31,612 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [173643880] [2024-09-11 20:42:31,612 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:31,612 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:31,612 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:42:31,613 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:42:31,614 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2024-09-11 20:42:31,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:31,788 INFO L262 TraceCheckSpWp]: Trace formula consists of 438 conjuncts, 10 conjuncts are in the unsatisfiable core [2024-09-11 20:42:31,790 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:42:31,836 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-11 20:42:31,837 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-11 20:42:31,837 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [173643880] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-11 20:42:31,837 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:42:31,837 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [12] total 15 [2024-09-11 20:42:31,837 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [197442967] [2024-09-11 20:42:31,837 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-11 20:42:31,837 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-11 20:42:31,837 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:42:31,837 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-11 20:42:31,837 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=35, Invalid=175, Unknown=0, NotChecked=0, Total=210 [2024-09-11 20:42:31,838 INFO L87 Difference]: Start difference. First operand 121 states and 289 transitions. Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2024-09-11 20:42:31,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:42:31,993 INFO L93 Difference]: Finished difference Result 200 states and 523 transitions. [2024-09-11 20:42:31,994 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-11 20:42:31,994 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 57 [2024-09-11 20:42:31,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:42:31,995 INFO L225 Difference]: With dead ends: 200 [2024-09-11 20:42:31,995 INFO L226 Difference]: Without dead ends: 108 [2024-09-11 20:42:31,996 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 82 GetRequests, 67 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=49, Invalid=223, Unknown=0, NotChecked=0, Total=272 [2024-09-11 20:42:31,996 INFO L434 NwaCegarLoop]: 35 mSDtfsCounter, 5 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 50 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5 SdHoareTripleChecker+Valid, 112 SdHoareTripleChecker+Invalid, 51 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 50 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:42:31,997 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [5 Valid, 112 Invalid, 51 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 50 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:42:31,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108 states. [2024-09-11 20:42:32,065 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108 to 106. [2024-09-11 20:42:32,069 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 106 states, 70 states have (on average 1.1428571428571428) internal successors, (80), 76 states have internal predecessors, (80), 15 states have call successors, (15), 8 states have call predecessors, (15), 20 states have return successors, (99), 21 states have call predecessors, (99), 13 states have call successors, (99) [2024-09-11 20:42:32,070 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 194 transitions. [2024-09-11 20:42:32,070 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 194 transitions. Word has length 57 [2024-09-11 20:42:32,071 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:42:32,071 INFO L474 AbstractCegarLoop]: Abstraction has 106 states and 194 transitions. [2024-09-11 20:42:32,071 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 2 states have call successors, (5), 2 states have call predecessors, (5), 2 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2024-09-11 20:42:32,071 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:32,072 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 194 transitions. [2024-09-11 20:42:32,072 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2024-09-11 20:42:32,073 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:42:32,073 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:42:32,086 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Ended with exit code 0 [2024-09-11 20:42:32,273 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2024-09-11 20:42:32,273 INFO L399 AbstractCegarLoop]: === Iteration 27 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:42:32,273 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:32,274 INFO L85 PathProgramCache]: Analyzing trace with hash 1360022093, now seen corresponding path program 1 times [2024-09-11 20:42:32,274 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:42:32,274 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1544942437] [2024-09-11 20:42:32,274 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:32,274 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:42:32,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:42:32,295 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [2038902921] [2024-09-11 20:42:32,295 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:32,296 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:32,296 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:42:32,297 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:42:32,298 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2024-09-11 20:42:32,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:32,503 INFO L262 TraceCheckSpWp]: Trace formula consists of 334 conjuncts, 28 conjuncts are in the unsatisfiable core [2024-09-11 20:42:32,504 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:42:32,528 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-09-11 20:42:32,638 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 16 proven. 6 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-11 20:42:32,638 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:42:32,894 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:42:32,895 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1544942437] [2024-09-11 20:42:32,895 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:42:32,895 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2038902921] [2024-09-11 20:42:32,895 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2038902921] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:42:32,896 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:42:32,896 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13] total 13 [2024-09-11 20:42:32,896 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1762883116] [2024-09-11 20:42:32,896 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:42:32,896 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2024-09-11 20:42:32,896 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:42:32,896 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2024-09-11 20:42:32,896 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=218, Unknown=0, NotChecked=0, Total=272 [2024-09-11 20:42:32,896 INFO L87 Difference]: Start difference. First operand 106 states and 194 transitions. Second operand has 13 states, 12 states have (on average 2.5) internal successors, (30), 11 states have internal predecessors, (30), 5 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2024-09-11 20:42:33,192 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:42:33,192 INFO L93 Difference]: Finished difference Result 114 states and 200 transitions. [2024-09-11 20:42:33,192 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2024-09-11 20:42:33,192 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 12 states have (on average 2.5) internal successors, (30), 11 states have internal predecessors, (30), 5 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) Word has length 44 [2024-09-11 20:42:33,192 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:42:33,193 INFO L225 Difference]: With dead ends: 114 [2024-09-11 20:42:33,193 INFO L226 Difference]: Without dead ends: 98 [2024-09-11 20:42:33,194 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 47 SyntacticMatches, 4 SemanticMatches, 23 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 117 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=123, Invalid=477, Unknown=0, NotChecked=0, Total=600 [2024-09-11 20:42:33,194 INFO L434 NwaCegarLoop]: 19 mSDtfsCounter, 52 mSDsluCounter, 81 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 10 mSolverCounterUnsat, 5 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 55 SdHoareTripleChecker+Valid, 100 SdHoareTripleChecker+Invalid, 280 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 5 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:42:33,194 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [55 Valid, 100 Invalid, 280 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 265 Invalid, 5 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:42:33,195 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2024-09-11 20:42:33,256 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 88. [2024-09-11 20:42:33,256 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 59 states have (on average 1.152542372881356) internal successors, (68), 65 states have internal predecessors, (68), 12 states have call successors, (12), 6 states have call predecessors, (12), 16 states have return successors, (79), 16 states have call predecessors, (79), 11 states have call successors, (79) [2024-09-11 20:42:33,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 159 transitions. [2024-09-11 20:42:33,257 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 159 transitions. Word has length 44 [2024-09-11 20:42:33,257 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:42:33,257 INFO L474 AbstractCegarLoop]: Abstraction has 88 states and 159 transitions. [2024-09-11 20:42:33,257 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 12 states have (on average 2.5) internal successors, (30), 11 states have internal predecessors, (30), 5 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 4 states have call successors, (5) [2024-09-11 20:42:33,257 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:33,257 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 159 transitions. [2024-09-11 20:42:33,258 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2024-09-11 20:42:33,258 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:42:33,258 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:42:33,272 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2024-09-11 20:42:33,458 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2024-09-11 20:42:33,459 INFO L399 AbstractCegarLoop]: === Iteration 28 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:42:33,459 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:33,459 INFO L85 PathProgramCache]: Analyzing trace with hash -1569546762, now seen corresponding path program 1 times [2024-09-11 20:42:33,459 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:42:33,459 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [328172101] [2024-09-11 20:42:33,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:33,459 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:42:33,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:33,564 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:42:33,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:33,639 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:33,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:33,641 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:42:33,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:33,693 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:33,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:33,695 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-09-11 20:42:33,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:33,743 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:33,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:33,746 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 25 proven. 1 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-11 20:42:33,746 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:42:33,746 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [328172101] [2024-09-11 20:42:33,746 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [328172101] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:42:33,746 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [386639128] [2024-09-11 20:42:33,746 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:33,746 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:33,746 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:42:33,747 INFO L229 MonitoredProcess]: Starting monitored process 23 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:42:33,749 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2024-09-11 20:42:33,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:33,935 INFO L262 TraceCheckSpWp]: Trace formula consists of 440 conjuncts, 29 conjuncts are in the unsatisfiable core [2024-09-11 20:42:33,937 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:42:33,939 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-09-11 20:42:34,059 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 27 proven. 1 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2024-09-11 20:42:34,059 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:42:34,205 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 27 proven. 1 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2024-09-11 20:42:34,205 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [386639128] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:42:34,205 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:42:34,205 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 8] total 15 [2024-09-11 20:42:34,205 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1537667299] [2024-09-11 20:42:34,205 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:42:34,206 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-09-11 20:42:34,206 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:42:34,206 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-09-11 20:42:34,206 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=59, Invalid=151, Unknown=0, NotChecked=0, Total=210 [2024-09-11 20:42:34,206 INFO L87 Difference]: Start difference. First operand 88 states and 159 transitions. Second operand has 15 states, 15 states have (on average 3.2666666666666666) internal successors, (49), 12 states have internal predecessors, (49), 6 states have call successors, (12), 5 states have call predecessors, (12), 4 states have return successors, (7), 4 states have call predecessors, (7), 5 states have call successors, (7) [2024-09-11 20:42:34,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:42:34,475 INFO L93 Difference]: Finished difference Result 106 states and 208 transitions. [2024-09-11 20:42:34,475 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-09-11 20:42:34,475 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 3.2666666666666666) internal successors, (49), 12 states have internal predecessors, (49), 6 states have call successors, (12), 5 states have call predecessors, (12), 4 states have return successors, (7), 4 states have call predecessors, (7), 5 states have call successors, (7) Word has length 57 [2024-09-11 20:42:34,476 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:42:34,477 INFO L225 Difference]: With dead ends: 106 [2024-09-11 20:42:34,477 INFO L226 Difference]: Without dead ends: 92 [2024-09-11 20:42:34,477 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 139 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 67 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=111, Invalid=269, Unknown=0, NotChecked=0, Total=380 [2024-09-11 20:42:34,477 INFO L434 NwaCegarLoop]: 18 mSDtfsCounter, 49 mSDsluCounter, 65 mSDsCounter, 0 mSdLazyCounter, 245 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 83 SdHoareTripleChecker+Invalid, 254 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 245 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:42:34,477 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [49 Valid, 83 Invalid, 254 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 245 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-11 20:42:34,478 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92 states. [2024-09-11 20:42:34,537 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92 to 86. [2024-09-11 20:42:34,537 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 86 states, 58 states have (on average 1.1551724137931034) internal successors, (67), 64 states have internal predecessors, (67), 12 states have call successors, (12), 6 states have call predecessors, (12), 15 states have return successors, (75), 15 states have call predecessors, (75), 11 states have call successors, (75) [2024-09-11 20:42:34,538 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 154 transitions. [2024-09-11 20:42:34,538 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 154 transitions. Word has length 57 [2024-09-11 20:42:34,538 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:42:34,538 INFO L474 AbstractCegarLoop]: Abstraction has 86 states and 154 transitions. [2024-09-11 20:42:34,538 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 3.2666666666666666) internal successors, (49), 12 states have internal predecessors, (49), 6 states have call successors, (12), 5 states have call predecessors, (12), 4 states have return successors, (7), 4 states have call predecessors, (7), 5 states have call successors, (7) [2024-09-11 20:42:34,539 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:34,539 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 154 transitions. [2024-09-11 20:42:34,539 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2024-09-11 20:42:34,539 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:42:34,539 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:42:34,556 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2024-09-11 20:42:34,740 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable27 [2024-09-11 20:42:34,740 INFO L399 AbstractCegarLoop]: === Iteration 29 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:42:34,740 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:34,740 INFO L85 PathProgramCache]: Analyzing trace with hash -1633505222, now seen corresponding path program 1 times [2024-09-11 20:42:34,740 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:42:34,740 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [390613739] [2024-09-11 20:42:34,741 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:34,741 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:42:34,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:35,053 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:42:35,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:35,249 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:35,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:35,251 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:42:35,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:35,414 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:35,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:35,438 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-09-11 20:42:35,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:35,486 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:35,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:35,488 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 28 proven. 8 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-09-11 20:42:35,488 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:42:35,489 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [390613739] [2024-09-11 20:42:35,489 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [390613739] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:42:35,489 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1187650393] [2024-09-11 20:42:35,489 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:35,489 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:35,489 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:42:35,490 INFO L229 MonitoredProcess]: Starting monitored process 24 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:42:35,491 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2024-09-11 20:42:35,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:35,695 INFO L262 TraceCheckSpWp]: Trace formula consists of 435 conjuncts, 37 conjuncts are in the unsatisfiable core [2024-09-11 20:42:35,697 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:42:35,790 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 48 treesize of output 21 [2024-09-11 20:42:35,967 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 22 proven. 9 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-09-11 20:42:35,967 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:42:36,530 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 24 proven. 11 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-11 20:42:36,530 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1187650393] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:42:36,530 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:42:36,530 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 13, 15] total 38 [2024-09-11 20:42:36,530 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1789654684] [2024-09-11 20:42:36,530 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:42:36,531 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-11 20:42:36,531 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:42:36,531 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-11 20:42:36,531 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=194, Invalid=1212, Unknown=0, NotChecked=0, Total=1406 [2024-09-11 20:42:36,532 INFO L87 Difference]: Start difference. First operand 86 states and 154 transitions. Second operand has 38 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 34 states have internal predecessors, (82), 12 states have call successors, (14), 6 states have call predecessors, (14), 9 states have return successors, (12), 8 states have call predecessors, (12), 11 states have call successors, (12) [2024-09-11 20:42:39,083 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:42:39,083 INFO L93 Difference]: Finished difference Result 266 states and 696 transitions. [2024-09-11 20:42:39,083 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 57 states. [2024-09-11 20:42:39,083 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 34 states have internal predecessors, (82), 12 states have call successors, (14), 6 states have call predecessors, (14), 9 states have return successors, (12), 8 states have call predecessors, (12), 11 states have call successors, (12) Word has length 57 [2024-09-11 20:42:39,084 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:42:39,086 INFO L225 Difference]: With dead ends: 266 [2024-09-11 20:42:39,086 INFO L226 Difference]: Without dead ends: 203 [2024-09-11 20:42:39,088 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 195 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 87 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1899 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=1323, Invalid=6509, Unknown=0, NotChecked=0, Total=7832 [2024-09-11 20:42:39,088 INFO L434 NwaCegarLoop]: 26 mSDtfsCounter, 189 mSDsluCounter, 247 mSDsCounter, 0 mSdLazyCounter, 1632 mSolverCounterSat, 193 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 189 SdHoareTripleChecker+Valid, 273 SdHoareTripleChecker+Invalid, 1825 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 193 IncrementalHoareTripleChecker+Valid, 1632 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:42:39,088 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [189 Valid, 273 Invalid, 1825 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [193 Valid, 1632 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2024-09-11 20:42:39,089 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 203 states. [2024-09-11 20:42:39,183 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 203 to 115. [2024-09-11 20:42:39,183 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 115 states, 77 states have (on average 1.1818181818181819) internal successors, (91), 86 states have internal predecessors, (91), 16 states have call successors, (16), 7 states have call predecessors, (16), 21 states have return successors, (112), 21 states have call predecessors, (112), 15 states have call successors, (112) [2024-09-11 20:42:39,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 115 states to 115 states and 219 transitions. [2024-09-11 20:42:39,185 INFO L78 Accepts]: Start accepts. Automaton has 115 states and 219 transitions. Word has length 57 [2024-09-11 20:42:39,185 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:42:39,185 INFO L474 AbstractCegarLoop]: Abstraction has 115 states and 219 transitions. [2024-09-11 20:42:39,185 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 31 states have (on average 2.6451612903225805) internal successors, (82), 34 states have internal predecessors, (82), 12 states have call successors, (14), 6 states have call predecessors, (14), 9 states have return successors, (12), 8 states have call predecessors, (12), 11 states have call successors, (12) [2024-09-11 20:42:39,185 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:39,185 INFO L276 IsEmpty]: Start isEmpty. Operand 115 states and 219 transitions. [2024-09-11 20:42:39,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2024-09-11 20:42:39,186 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:42:39,186 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:42:39,199 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Forceful destruction successful, exit code 0 [2024-09-11 20:42:39,386 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2024-09-11 20:42:39,386 INFO L399 AbstractCegarLoop]: === Iteration 30 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:42:39,387 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:39,387 INFO L85 PathProgramCache]: Analyzing trace with hash 1109255222, now seen corresponding path program 1 times [2024-09-11 20:42:39,387 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:42:39,387 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [856666066] [2024-09-11 20:42:39,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:39,387 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:42:39,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:39,774 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:42:39,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:40,035 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:40,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:40,037 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:42:40,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:40,203 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:40,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:40,206 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-09-11 20:42:40,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:40,217 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:40,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:40,218 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 13 proven. 11 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-09-11 20:42:40,218 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:42:40,219 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [856666066] [2024-09-11 20:42:40,219 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [856666066] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:42:40,219 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1048598270] [2024-09-11 20:42:40,219 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:40,219 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:40,219 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:42:40,220 INFO L229 MonitoredProcess]: Starting monitored process 25 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:42:40,221 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2024-09-11 20:42:40,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:40,430 INFO L262 TraceCheckSpWp]: Trace formula consists of 441 conjuncts, 34 conjuncts are in the unsatisfiable core [2024-09-11 20:42:40,431 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:42:40,454 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:42:40,456 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:42:40,648 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 10 proven. 22 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-11 20:42:40,648 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:42:41,025 INFO L134 CoverageAnalysis]: Checked inductivity of 47 backedges. 10 proven. 17 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-09-11 20:42:41,025 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1048598270] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:42:41,025 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:42:41,025 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 13, 11] total 29 [2024-09-11 20:42:41,025 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [750107742] [2024-09-11 20:42:41,026 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:42:41,026 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2024-09-11 20:42:41,026 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:42:41,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2024-09-11 20:42:41,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=124, Invalid=688, Unknown=0, NotChecked=0, Total=812 [2024-09-11 20:42:41,027 INFO L87 Difference]: Start difference. First operand 115 states and 219 transitions. Second operand has 29 states, 24 states have (on average 3.0) internal successors, (72), 26 states have internal predecessors, (72), 11 states have call successors, (14), 5 states have call predecessors, (14), 4 states have return successors, (13), 8 states have call predecessors, (13), 10 states have call successors, (13) [2024-09-11 20:42:42,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:42:42,131 INFO L93 Difference]: Finished difference Result 268 states and 578 transitions. [2024-09-11 20:42:42,132 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2024-09-11 20:42:42,132 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 24 states have (on average 3.0) internal successors, (72), 26 states have internal predecessors, (72), 11 states have call successors, (14), 5 states have call predecessors, (14), 4 states have return successors, (13), 8 states have call predecessors, (13), 10 states have call successors, (13) Word has length 57 [2024-09-11 20:42:42,132 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:42:42,134 INFO L225 Difference]: With dead ends: 268 [2024-09-11 20:42:42,134 INFO L226 Difference]: Without dead ends: 168 [2024-09-11 20:42:42,135 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 474 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=393, Invalid=1769, Unknown=0, NotChecked=0, Total=2162 [2024-09-11 20:42:42,136 INFO L434 NwaCegarLoop]: 21 mSDtfsCounter, 118 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 710 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 121 SdHoareTripleChecker+Valid, 179 SdHoareTripleChecker+Invalid, 761 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 710 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-11 20:42:42,136 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [121 Valid, 179 Invalid, 761 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 710 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-11 20:42:42,136 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168 states. [2024-09-11 20:42:42,278 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168 to 156. [2024-09-11 20:42:42,278 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 105 states have (on average 1.1714285714285715) internal successors, (123), 115 states have internal predecessors, (123), 18 states have call successors, (18), 8 states have call predecessors, (18), 32 states have return successors, (180), 32 states have call predecessors, (180), 17 states have call successors, (180) [2024-09-11 20:42:42,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 321 transitions. [2024-09-11 20:42:42,280 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 321 transitions. Word has length 57 [2024-09-11 20:42:42,280 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:42:42,280 INFO L474 AbstractCegarLoop]: Abstraction has 156 states and 321 transitions. [2024-09-11 20:42:42,280 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 24 states have (on average 3.0) internal successors, (72), 26 states have internal predecessors, (72), 11 states have call successors, (14), 5 states have call predecessors, (14), 4 states have return successors, (13), 8 states have call predecessors, (13), 10 states have call successors, (13) [2024-09-11 20:42:42,280 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:42,280 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 321 transitions. [2024-09-11 20:42:42,281 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-09-11 20:42:42,281 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:42:42,281 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:42:42,298 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Ended with exit code 0 [2024-09-11 20:42:42,481 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,25 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:42,482 INFO L399 AbstractCegarLoop]: === Iteration 31 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:42:42,482 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:42,482 INFO L85 PathProgramCache]: Analyzing trace with hash 547645104, now seen corresponding path program 2 times [2024-09-11 20:42:42,482 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:42:42,482 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1487167740] [2024-09-11 20:42:42,482 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:42,482 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:42:42,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:42,926 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:42:42,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:43,228 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:43,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:43,229 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:42:43,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:43,421 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:43,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:43,423 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2024-09-11 20:42:43,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:43,466 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:43,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:43,468 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 22 proven. 4 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2024-09-11 20:42:43,468 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:42:43,468 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1487167740] [2024-09-11 20:42:43,469 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1487167740] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:42:43,469 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1298489366] [2024-09-11 20:42:43,469 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-11 20:42:43,469 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:43,469 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:42:43,470 INFO L229 MonitoredProcess]: Starting monitored process 26 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:42:43,471 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2024-09-11 20:42:43,685 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-11 20:42:43,685 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-11 20:42:43,687 INFO L262 TraceCheckSpWp]: Trace formula consists of 439 conjuncts, 30 conjuncts are in the unsatisfiable core [2024-09-11 20:42:43,688 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:42:43,773 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 35 treesize of output 19 [2024-09-11 20:42:43,852 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 29 proven. 1 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-11 20:42:43,852 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:42:44,098 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 25 proven. 1 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2024-09-11 20:42:44,098 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1298489366] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:42:44,098 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:42:44,098 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [13, 10, 9] total 25 [2024-09-11 20:42:44,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1551971008] [2024-09-11 20:42:44,098 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:42:44,098 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2024-09-11 20:42:44,098 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:42:44,099 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2024-09-11 20:42:44,099 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=103, Invalid=497, Unknown=0, NotChecked=0, Total=600 [2024-09-11 20:42:44,099 INFO L87 Difference]: Start difference. First operand 156 states and 321 transitions. Second operand has 25 states, 23 states have (on average 2.391304347826087) internal successors, (55), 22 states have internal predecessors, (55), 9 states have call successors, (12), 5 states have call predecessors, (12), 5 states have return successors, (10), 6 states have call predecessors, (10), 8 states have call successors, (10) [2024-09-11 20:42:44,669 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:42:44,669 INFO L93 Difference]: Finished difference Result 200 states and 489 transitions. [2024-09-11 20:42:44,669 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2024-09-11 20:42:44,670 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 23 states have (on average 2.391304347826087) internal successors, (55), 22 states have internal predecessors, (55), 9 states have call successors, (12), 5 states have call predecessors, (12), 5 states have return successors, (10), 6 states have call predecessors, (10), 8 states have call successors, (10) Word has length 55 [2024-09-11 20:42:44,670 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:42:44,671 INFO L225 Difference]: With dead ends: 200 [2024-09-11 20:42:44,671 INFO L226 Difference]: Without dead ends: 154 [2024-09-11 20:42:44,672 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 148 GetRequests, 115 SyntacticMatches, 0 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 223 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=243, Invalid=947, Unknown=0, NotChecked=0, Total=1190 [2024-09-11 20:42:44,672 INFO L434 NwaCegarLoop]: 17 mSDtfsCounter, 84 mSDsluCounter, 100 mSDsCounter, 0 mSdLazyCounter, 448 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 89 SdHoareTripleChecker+Valid, 117 SdHoareTripleChecker+Invalid, 476 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 448 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-11 20:42:44,673 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [89 Valid, 117 Invalid, 476 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 448 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-09-11 20:42:44,673 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2024-09-11 20:42:44,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 142. [2024-09-11 20:42:44,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 142 states, 98 states have (on average 1.183673469387755) internal successors, (116), 108 states have internal predecessors, (116), 18 states have call successors, (18), 8 states have call predecessors, (18), 25 states have return successors, (136), 25 states have call predecessors, (136), 17 states have call successors, (136) [2024-09-11 20:42:44,805 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 270 transitions. [2024-09-11 20:42:44,805 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 270 transitions. Word has length 55 [2024-09-11 20:42:44,805 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:42:44,806 INFO L474 AbstractCegarLoop]: Abstraction has 142 states and 270 transitions. [2024-09-11 20:42:44,806 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 23 states have (on average 2.391304347826087) internal successors, (55), 22 states have internal predecessors, (55), 9 states have call successors, (12), 5 states have call predecessors, (12), 5 states have return successors, (10), 6 states have call predecessors, (10), 8 states have call successors, (10) [2024-09-11 20:42:44,806 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:44,806 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 270 transitions. [2024-09-11 20:42:44,807 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2024-09-11 20:42:44,807 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:42:44,807 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:42:44,820 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2024-09-11 20:42:45,007 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable30 [2024-09-11 20:42:45,007 INFO L399 AbstractCegarLoop]: === Iteration 32 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:42:45,008 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:45,008 INFO L85 PathProgramCache]: Analyzing trace with hash 203474526, now seen corresponding path program 2 times [2024-09-11 20:42:45,008 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:42:45,008 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2090333189] [2024-09-11 20:42:45,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:45,008 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:42:45,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:45,329 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:42:45,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:45,511 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:45,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:45,512 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:42:45,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:45,697 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:45,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:45,721 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:42:45,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:45,766 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:45,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:45,768 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 29 proven. 8 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-11 20:42:45,769 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:42:45,769 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2090333189] [2024-09-11 20:42:45,769 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2090333189] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:42:45,769 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [919056521] [2024-09-11 20:42:45,769 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-11 20:42:45,769 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:45,769 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:42:45,770 INFO L229 MonitoredProcess]: Starting monitored process 27 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:42:45,771 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2024-09-11 20:42:45,992 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-11 20:42:45,992 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-11 20:42:45,993 INFO L262 TraceCheckSpWp]: Trace formula consists of 448 conjuncts, 42 conjuncts are in the unsatisfiable core [2024-09-11 20:42:45,995 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:42:46,072 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 34 treesize of output 18 [2024-09-11 20:42:46,265 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 26 proven. 6 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-11 20:42:46,265 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:42:46,611 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 27 proven. 10 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-11 20:42:46,611 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [919056521] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:42:46,611 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:42:46,611 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 12, 12] total 28 [2024-09-11 20:42:46,612 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1944493045] [2024-09-11 20:42:46,612 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:42:46,612 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2024-09-11 20:42:46,612 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:42:46,612 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2024-09-11 20:42:46,612 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=99, Invalid=657, Unknown=0, NotChecked=0, Total=756 [2024-09-11 20:42:46,613 INFO L87 Difference]: Start difference. First operand 142 states and 270 transitions. Second operand has 28 states, 22 states have (on average 3.727272727272727) internal successors, (82), 24 states have internal predecessors, (82), 13 states have call successors, (16), 6 states have call predecessors, (16), 7 states have return successors, (13), 8 states have call predecessors, (13), 12 states have call successors, (13) [2024-09-11 20:42:47,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:42:47,567 INFO L93 Difference]: Finished difference Result 224 states and 593 transitions. [2024-09-11 20:42:47,567 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 27 states. [2024-09-11 20:42:47,568 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 22 states have (on average 3.727272727272727) internal successors, (82), 24 states have internal predecessors, (82), 13 states have call successors, (16), 6 states have call predecessors, (16), 7 states have return successors, (13), 8 states have call predecessors, (13), 12 states have call successors, (13) Word has length 59 [2024-09-11 20:42:47,568 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:42:47,570 INFO L225 Difference]: With dead ends: 224 [2024-09-11 20:42:47,570 INFO L226 Difference]: Without dead ends: 192 [2024-09-11 20:42:47,570 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 166 GetRequests, 119 SyntacticMatches, 0 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 457 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=376, Invalid=1976, Unknown=0, NotChecked=0, Total=2352 [2024-09-11 20:42:47,571 INFO L434 NwaCegarLoop]: 18 mSDtfsCounter, 131 mSDsluCounter, 129 mSDsCounter, 0 mSdLazyCounter, 621 mSolverCounterSat, 94 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 135 SdHoareTripleChecker+Valid, 147 SdHoareTripleChecker+Invalid, 715 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 94 IncrementalHoareTripleChecker+Valid, 621 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-11 20:42:47,571 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [135 Valid, 147 Invalid, 715 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [94 Valid, 621 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-11 20:42:47,571 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 192 states. [2024-09-11 20:42:47,715 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 192 to 156. [2024-09-11 20:42:47,716 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 156 states, 105 states have (on average 1.1714285714285715) internal successors, (123), 115 states have internal predecessors, (123), 18 states have call successors, (18), 8 states have call predecessors, (18), 32 states have return successors, (183), 32 states have call predecessors, (183), 17 states have call successors, (183) [2024-09-11 20:42:47,716 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 156 states to 156 states and 324 transitions. [2024-09-11 20:42:47,717 INFO L78 Accepts]: Start accepts. Automaton has 156 states and 324 transitions. Word has length 59 [2024-09-11 20:42:47,717 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:42:47,717 INFO L474 AbstractCegarLoop]: Abstraction has 156 states and 324 transitions. [2024-09-11 20:42:47,717 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 22 states have (on average 3.727272727272727) internal successors, (82), 24 states have internal predecessors, (82), 13 states have call successors, (16), 6 states have call predecessors, (16), 7 states have return successors, (13), 8 states have call predecessors, (13), 12 states have call successors, (13) [2024-09-11 20:42:47,717 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:47,717 INFO L276 IsEmpty]: Start isEmpty. Operand 156 states and 324 transitions. [2024-09-11 20:42:47,718 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2024-09-11 20:42:47,718 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:42:47,718 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:42:47,735 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Ended with exit code 0 [2024-09-11 20:42:47,919 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable31,27 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:47,919 INFO L399 AbstractCegarLoop]: === Iteration 33 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:42:47,919 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:47,919 INFO L85 PathProgramCache]: Analyzing trace with hash -1113071125, now seen corresponding path program 1 times [2024-09-11 20:42:47,919 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:42:47,919 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [728188462] [2024-09-11 20:42:47,919 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:47,919 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:42:47,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:48,514 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:42:48,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:48,873 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:48,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:48,875 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2024-09-11 20:42:48,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:49,177 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:49,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:49,180 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:42:49,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:49,312 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:49,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:49,315 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-09-11 20:42:49,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:49,328 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:42:49,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:49,330 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 14 proven. 23 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2024-09-11 20:42:49,331 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:42:49,331 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [728188462] [2024-09-11 20:42:49,331 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [728188462] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:42:49,331 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1125517271] [2024-09-11 20:42:49,331 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:49,331 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:49,331 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:42:49,332 INFO L229 MonitoredProcess]: Starting monitored process 28 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:42:49,334 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2024-09-11 20:42:49,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:49,572 INFO L262 TraceCheckSpWp]: Trace formula consists of 548 conjuncts, 56 conjuncts are in the unsatisfiable core [2024-09-11 20:42:49,574 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:42:49,599 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:42:49,601 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:42:49,916 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 16 proven. 40 refuted. 0 times theorem prover too weak. 35 trivial. 0 not checked. [2024-09-11 20:42:49,916 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:42:50,991 INFO L134 CoverageAnalysis]: Checked inductivity of 91 backedges. 16 proven. 43 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2024-09-11 20:42:50,991 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1125517271] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:42:50,991 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:42:50,991 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 16] total 36 [2024-09-11 20:42:50,991 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [432935924] [2024-09-11 20:42:50,991 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:42:50,991 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2024-09-11 20:42:50,991 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:42:50,992 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2024-09-11 20:42:50,992 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=156, Invalid=1104, Unknown=0, NotChecked=0, Total=1260 [2024-09-11 20:42:50,992 INFO L87 Difference]: Start difference. First operand 156 states and 324 transitions. Second operand has 36 states, 28 states have (on average 2.9285714285714284) internal successors, (82), 32 states have internal predecessors, (82), 15 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (17), 10 states have call predecessors, (17), 14 states have call successors, (17) [2024-09-11 20:42:56,635 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 5.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [] [2024-09-11 20:42:58,942 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:42:58,942 INFO L93 Difference]: Finished difference Result 379 states and 1119 transitions. [2024-09-11 20:42:58,942 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2024-09-11 20:42:58,942 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 28 states have (on average 2.9285714285714284) internal successors, (82), 32 states have internal predecessors, (82), 15 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (17), 10 states have call predecessors, (17), 14 states have call successors, (17) Word has length 72 [2024-09-11 20:42:58,943 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:42:58,945 INFO L225 Difference]: With dead ends: 379 [2024-09-11 20:42:58,946 INFO L226 Difference]: Without dead ends: 246 [2024-09-11 20:42:58,948 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 143 SyntacticMatches, 0 SemanticMatches, 61 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 896 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=513, Invalid=3393, Unknown=0, NotChecked=0, Total=3906 [2024-09-11 20:42:58,948 INFO L434 NwaCegarLoop]: 23 mSDtfsCounter, 155 mSDsluCounter, 237 mSDsCounter, 0 mSdLazyCounter, 1411 mSolverCounterSat, 175 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 159 SdHoareTripleChecker+Valid, 260 SdHoareTripleChecker+Invalid, 1587 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 175 IncrementalHoareTripleChecker+Valid, 1411 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.8s IncrementalHoareTripleChecker+Time [2024-09-11 20:42:58,948 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [159 Valid, 260 Invalid, 1587 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [175 Valid, 1411 Invalid, 1 Unknown, 0 Unchecked, 6.8s Time] [2024-09-11 20:42:58,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 246 states. [2024-09-11 20:42:59,122 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 246 to 164. [2024-09-11 20:42:59,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 164 states, 107 states have (on average 1.158878504672897) internal successors, (124), 117 states have internal predecessors, (124), 18 states have call successors, (18), 8 states have call predecessors, (18), 38 states have return successors, (190), 38 states have call predecessors, (190), 17 states have call successors, (190) [2024-09-11 20:42:59,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 164 states to 164 states and 332 transitions. [2024-09-11 20:42:59,124 INFO L78 Accepts]: Start accepts. Automaton has 164 states and 332 transitions. Word has length 72 [2024-09-11 20:42:59,124 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:42:59,124 INFO L474 AbstractCegarLoop]: Abstraction has 164 states and 332 transitions. [2024-09-11 20:42:59,124 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 28 states have (on average 2.9285714285714284) internal successors, (82), 32 states have internal predecessors, (82), 15 states have call successors, (18), 6 states have call predecessors, (18), 5 states have return successors, (17), 10 states have call predecessors, (17), 14 states have call successors, (17) [2024-09-11 20:42:59,125 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:59,125 INFO L276 IsEmpty]: Start isEmpty. Operand 164 states and 332 transitions. [2024-09-11 20:42:59,129 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2024-09-11 20:42:59,129 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:42:59,129 INFO L216 NwaCegarLoop]: trace histogram [4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:42:59,144 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Forceful destruction successful, exit code 0 [2024-09-11 20:42:59,330 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable32,28 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:59,330 INFO L399 AbstractCegarLoop]: === Iteration 34 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:42:59,330 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:42:59,330 INFO L85 PathProgramCache]: Analyzing trace with hash 148800288, now seen corresponding path program 1 times [2024-09-11 20:42:59,330 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:42:59,330 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [858608474] [2024-09-11 20:42:59,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:59,330 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:42:59,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:42:59,352 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [473159248] [2024-09-11 20:42:59,352 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:42:59,352 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:42:59,352 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:42:59,353 INFO L229 MonitoredProcess]: Starting monitored process 29 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:42:59,357 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2024-09-11 20:42:59,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:42:59,622 INFO L262 TraceCheckSpWp]: Trace formula consists of 446 conjuncts, 151 conjuncts are in the unsatisfiable core [2024-09-11 20:42:59,626 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:42:59,628 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:42:59,630 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:42:59,633 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:42:59,636 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:42:59,640 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:42:59,650 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:42:59,656 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:43:02,035 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 48 treesize of output 32 [2024-09-11 20:43:02,040 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 17 [2024-09-11 20:43:02,075 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 40 treesize of output 24 [2024-09-11 20:43:02,078 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2024-09-11 20:43:02,148 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 6 proven. 25 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-11 20:43:02,148 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:43:04,125 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:43:04,125 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [858608474] [2024-09-11 20:43:04,125 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:43:04,125 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [473159248] [2024-09-11 20:43:04,125 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [473159248] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:43:04,125 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:43:04,125 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2024-09-11 20:43:04,125 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2141189081] [2024-09-11 20:43:04,126 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:43:04,126 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-11 20:43:04,126 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:43:04,126 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-11 20:43:04,126 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=79, Invalid=571, Unknown=0, NotChecked=0, Total=650 [2024-09-11 20:43:04,126 INFO L87 Difference]: Start difference. First operand 164 states and 332 transitions. Second operand has 21 states, 17 states have (on average 2.1176470588235294) internal successors, (36), 17 states have internal predecessors, (36), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:43:06,801 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.13s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [] [2024-09-11 20:43:07,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:43:07,791 INFO L93 Difference]: Finished difference Result 210 states and 473 transitions. [2024-09-11 20:43:07,791 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-11 20:43:07,792 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 17 states have (on average 2.1176470588235294) internal successors, (36), 17 states have internal predecessors, (36), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) Word has length 59 [2024-09-11 20:43:07,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:43:07,793 INFO L225 Difference]: With dead ends: 210 [2024-09-11 20:43:07,793 INFO L226 Difference]: Without dead ends: 166 [2024-09-11 20:43:07,794 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 41 SyntacticMatches, 2 SemanticMatches, 32 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 238 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=135, Invalid=987, Unknown=0, NotChecked=0, Total=1122 [2024-09-11 20:43:07,794 INFO L434 NwaCegarLoop]: 20 mSDtfsCounter, 28 mSDsluCounter, 156 mSDsCounter, 0 mSdLazyCounter, 645 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 176 SdHoareTripleChecker+Invalid, 656 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 645 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3.0s IncrementalHoareTripleChecker+Time [2024-09-11 20:43:07,794 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 176 Invalid, 656 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 645 Invalid, 0 Unknown, 0 Unchecked, 3.0s Time] [2024-09-11 20:43:07,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 166 states. [2024-09-11 20:43:07,970 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 166 to 166. [2024-09-11 20:43:07,971 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 166 states, 108 states have (on average 1.1574074074074074) internal successors, (125), 118 states have internal predecessors, (125), 18 states have call successors, (18), 8 states have call predecessors, (18), 39 states have return successors, (196), 39 states have call predecessors, (196), 17 states have call successors, (196) [2024-09-11 20:43:07,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 166 states to 166 states and 339 transitions. [2024-09-11 20:43:07,972 INFO L78 Accepts]: Start accepts. Automaton has 166 states and 339 transitions. Word has length 59 [2024-09-11 20:43:07,972 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:43:07,972 INFO L474 AbstractCegarLoop]: Abstraction has 166 states and 339 transitions. [2024-09-11 20:43:07,972 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 17 states have (on average 2.1176470588235294) internal successors, (36), 17 states have internal predecessors, (36), 6 states have call successors, (6), 4 states have call predecessors, (6), 4 states have return successors, (5), 5 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-11 20:43:07,972 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:43:07,973 INFO L276 IsEmpty]: Start isEmpty. Operand 166 states and 339 transitions. [2024-09-11 20:43:07,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2024-09-11 20:43:07,973 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:43:07,974 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:43:07,987 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2024-09-11 20:43:08,174 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 29 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable33 [2024-09-11 20:43:08,174 INFO L399 AbstractCegarLoop]: === Iteration 35 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:43:08,174 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:43:08,174 INFO L85 PathProgramCache]: Analyzing trace with hash -1188235651, now seen corresponding path program 2 times [2024-09-11 20:43:08,174 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:43:08,174 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [5131370] [2024-09-11 20:43:08,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:43:08,174 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:43:08,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:08,723 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:43:08,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:09,080 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:43:09,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:09,082 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:43:09,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:09,267 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:43:09,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:09,268 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:43:09,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:09,386 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:43:09,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:09,388 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:43:09,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:09,398 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:43:09,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:09,399 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 48 proven. 6 refuted. 0 times theorem prover too weak. 47 trivial. 0 not checked. [2024-09-11 20:43:09,399 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:43:09,399 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [5131370] [2024-09-11 20:43:09,399 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [5131370] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:43:09,399 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1416521691] [2024-09-11 20:43:09,399 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-11 20:43:09,400 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:43:09,400 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:43:09,401 INFO L229 MonitoredProcess]: Starting monitored process 30 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:43:09,402 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2024-09-11 20:43:09,655 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-11 20:43:09,655 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-11 20:43:09,657 INFO L262 TraceCheckSpWp]: Trace formula consists of 566 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-11 20:43:09,659 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:43:09,758 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 37 treesize of output 21 [2024-09-11 20:43:09,949 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 52 proven. 11 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2024-09-11 20:43:09,949 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:43:10,543 INFO L134 CoverageAnalysis]: Checked inductivity of 101 backedges. 56 proven. 12 refuted. 0 times theorem prover too weak. 33 trivial. 0 not checked. [2024-09-11 20:43:10,544 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1416521691] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:43:10,544 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:43:10,544 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 13, 14] total 33 [2024-09-11 20:43:10,544 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [437242568] [2024-09-11 20:43:10,544 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:43:10,544 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2024-09-11 20:43:10,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:43:10,545 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2024-09-11 20:43:10,545 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=141, Invalid=915, Unknown=0, NotChecked=0, Total=1056 [2024-09-11 20:43:10,546 INFO L87 Difference]: Start difference. First operand 166 states and 339 transitions. Second operand has 33 states, 28 states have (on average 3.5714285714285716) internal successors, (100), 29 states have internal predecessors, (100), 13 states have call successors, (18), 6 states have call predecessors, (18), 7 states have return successors, (15), 10 states have call predecessors, (15), 12 states have call successors, (15) [2024-09-11 20:43:13,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:43:13,732 INFO L93 Difference]: Finished difference Result 603 states and 1880 transitions. [2024-09-11 20:43:13,732 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 67 states. [2024-09-11 20:43:13,732 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 28 states have (on average 3.5714285714285716) internal successors, (100), 29 states have internal predecessors, (100), 13 states have call successors, (18), 6 states have call predecessors, (18), 7 states have return successors, (15), 10 states have call predecessors, (15), 12 states have call successors, (15) Word has length 78 [2024-09-11 20:43:13,732 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:43:13,738 INFO L225 Difference]: With dead ends: 603 [2024-09-11 20:43:13,738 INFO L226 Difference]: Without dead ends: 440 [2024-09-11 20:43:13,740 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 290 GetRequests, 198 SyntacticMatches, 0 SemanticMatches, 92 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2476 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=1677, Invalid=7065, Unknown=0, NotChecked=0, Total=8742 [2024-09-11 20:43:13,740 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 268 mSDsluCounter, 269 mSDsCounter, 0 mSdLazyCounter, 1450 mSolverCounterSat, 276 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 268 SdHoareTripleChecker+Valid, 299 SdHoareTripleChecker+Invalid, 1726 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 276 IncrementalHoareTripleChecker+Valid, 1450 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:43:13,740 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [268 Valid, 299 Invalid, 1726 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [276 Valid, 1450 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2024-09-11 20:43:13,741 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 440 states. [2024-09-11 20:43:14,092 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 440 to 315. [2024-09-11 20:43:14,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 315 states, 198 states have (on average 1.1313131313131313) internal successors, (224), 212 states have internal predecessors, (224), 26 states have call successors, (26), 11 states have call predecessors, (26), 90 states have return successors, (559), 91 states have call predecessors, (559), 25 states have call successors, (559) [2024-09-11 20:43:14,095 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 315 states to 315 states and 809 transitions. [2024-09-11 20:43:14,096 INFO L78 Accepts]: Start accepts. Automaton has 315 states and 809 transitions. Word has length 78 [2024-09-11 20:43:14,096 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:43:14,096 INFO L474 AbstractCegarLoop]: Abstraction has 315 states and 809 transitions. [2024-09-11 20:43:14,096 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 28 states have (on average 3.5714285714285716) internal successors, (100), 29 states have internal predecessors, (100), 13 states have call successors, (18), 6 states have call predecessors, (18), 7 states have return successors, (15), 10 states have call predecessors, (15), 12 states have call successors, (15) [2024-09-11 20:43:14,096 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:43:14,096 INFO L276 IsEmpty]: Start isEmpty. Operand 315 states and 809 transitions. [2024-09-11 20:43:14,097 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2024-09-11 20:43:14,097 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:43:14,097 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:43:14,114 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Forceful destruction successful, exit code 0 [2024-09-11 20:43:14,297 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 30 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable34 [2024-09-11 20:43:14,298 INFO L399 AbstractCegarLoop]: === Iteration 36 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:43:14,298 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:43:14,298 INFO L85 PathProgramCache]: Analyzing trace with hash -435264807, now seen corresponding path program 1 times [2024-09-11 20:43:14,298 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:43:14,298 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1766146772] [2024-09-11 20:43:14,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:43:14,298 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:43:14,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:14,770 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-11 20:43:14,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:15,056 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:43:15,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:15,057 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:43:15,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:15,272 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:43:15,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:15,275 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-11 20:43:15,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:15,416 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:43:15,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:15,418 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-09-11 20:43:15,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:15,427 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-11 20:43:15,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:15,428 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 35 proven. 19 refuted. 0 times theorem prover too weak. 43 trivial. 0 not checked. [2024-09-11 20:43:15,428 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:43:15,429 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1766146772] [2024-09-11 20:43:15,429 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1766146772] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:43:15,429 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1003040787] [2024-09-11 20:43:15,429 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:43:15,429 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:43:15,429 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:43:15,430 INFO L229 MonitoredProcess]: Starting monitored process 31 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:43:15,430 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Waiting until timeout for monitored process [2024-09-11 20:43:15,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:15,679 INFO L262 TraceCheckSpWp]: Trace formula consists of 558 conjuncts, 38 conjuncts are in the unsatisfiable core [2024-09-11 20:43:15,681 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:43:15,724 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:43:15,726 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:43:16,041 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 20 proven. 38 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2024-09-11 20:43:16,041 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:43:16,744 INFO L134 CoverageAnalysis]: Checked inductivity of 97 backedges. 16 proven. 49 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2024-09-11 20:43:16,744 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1003040787] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-11 20:43:16,746 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-11 20:43:16,746 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 13, 15] total 32 [2024-09-11 20:43:16,746 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [77622591] [2024-09-11 20:43:16,746 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-11 20:43:16,747 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2024-09-11 20:43:16,747 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:43:16,747 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2024-09-11 20:43:16,747 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=869, Unknown=0, NotChecked=0, Total=992 [2024-09-11 20:43:16,747 INFO L87 Difference]: Start difference. First operand 315 states and 809 transitions. Second operand has 32 states, 25 states have (on average 3.36) internal successors, (84), 28 states have internal predecessors, (84), 13 states have call successors, (15), 6 states have call predecessors, (15), 6 states have return successors, (14), 9 states have call predecessors, (14), 12 states have call successors, (14) [2024-09-11 20:43:19,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:43:19,333 INFO L93 Difference]: Finished difference Result 665 states and 2032 transitions. [2024-09-11 20:43:19,333 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 48 states. [2024-09-11 20:43:19,333 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 25 states have (on average 3.36) internal successors, (84), 28 states have internal predecessors, (84), 13 states have call successors, (15), 6 states have call predecessors, (15), 6 states have return successors, (14), 9 states have call predecessors, (14), 12 states have call successors, (14) Word has length 76 [2024-09-11 20:43:19,334 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:43:19,337 INFO L225 Difference]: With dead ends: 665 [2024-09-11 20:43:19,337 INFO L226 Difference]: Without dead ends: 278 [2024-09-11 20:43:19,340 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 226 GetRequests, 157 SyntacticMatches, 1 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1124 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=746, Invalid=4084, Unknown=0, NotChecked=0, Total=4830 [2024-09-11 20:43:19,340 INFO L434 NwaCegarLoop]: 37 mSDtfsCounter, 199 mSDsluCounter, 312 mSDsCounter, 0 mSdLazyCounter, 1405 mSolverCounterSat, 100 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 204 SdHoareTripleChecker+Valid, 349 SdHoareTripleChecker+Invalid, 1505 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 100 IncrementalHoareTripleChecker+Valid, 1405 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2024-09-11 20:43:19,340 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [204 Valid, 349 Invalid, 1505 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [100 Valid, 1405 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2024-09-11 20:43:19,341 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2024-09-11 20:43:19,548 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 210. [2024-09-11 20:43:19,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 210 states, 140 states have (on average 1.1214285714285714) internal successors, (157), 151 states have internal predecessors, (157), 25 states have call successors, (25), 12 states have call predecessors, (25), 44 states have return successors, (191), 46 states have call predecessors, (191), 24 states have call successors, (191) [2024-09-11 20:43:19,549 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 210 states to 210 states and 373 transitions. [2024-09-11 20:43:19,550 INFO L78 Accepts]: Start accepts. Automaton has 210 states and 373 transitions. Word has length 76 [2024-09-11 20:43:19,550 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:43:19,550 INFO L474 AbstractCegarLoop]: Abstraction has 210 states and 373 transitions. [2024-09-11 20:43:19,550 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 25 states have (on average 3.36) internal successors, (84), 28 states have internal predecessors, (84), 13 states have call successors, (15), 6 states have call predecessors, (15), 6 states have return successors, (14), 9 states have call predecessors, (14), 12 states have call successors, (14) [2024-09-11 20:43:19,550 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:43:19,551 INFO L276 IsEmpty]: Start isEmpty. Operand 210 states and 373 transitions. [2024-09-11 20:43:19,551 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2024-09-11 20:43:19,551 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:43:19,551 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:43:19,566 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (31)] Ended with exit code 0 [2024-09-11 20:43:19,752 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 31 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable35 [2024-09-11 20:43:19,752 INFO L399 AbstractCegarLoop]: === Iteration 37 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:43:19,752 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:43:19,752 INFO L85 PathProgramCache]: Analyzing trace with hash -1654832171, now seen corresponding path program 1 times [2024-09-11 20:43:19,752 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:43:19,752 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1876231802] [2024-09-11 20:43:19,752 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:43:19,752 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:43:19,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:43:19,780 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [805581892] [2024-09-11 20:43:19,780 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:43:19,781 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:43:19,781 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:43:19,782 INFO L229 MonitoredProcess]: Starting monitored process 32 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:43:19,783 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Waiting until timeout for monitored process [2024-09-11 20:43:20,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-11 20:43:20,109 INFO L262 TraceCheckSpWp]: Trace formula consists of 553 conjuncts, 186 conjuncts are in the unsatisfiable core [2024-09-11 20:43:20,113 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:43:20,116 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:43:20,118 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:43:20,119 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:43:20,125 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:43:21,046 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 30 treesize of output 18 [2024-09-11 20:43:21,080 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 17 [2024-09-11 20:43:21,083 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 39 treesize of output 23 [2024-09-11 20:43:21,087 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2024-09-11 20:43:21,145 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 16 proven. 29 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2024-09-11 20:43:21,145 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:43:22,747 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-11 20:43:22,747 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 36 treesize of output 39 [2024-09-11 20:43:31,702 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-11 20:43:31,702 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 87 treesize of output 108 [2024-09-11 20:43:32,145 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:43:32,145 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1876231802] [2024-09-11 20:43:32,146 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:43:32,146 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [805581892] [2024-09-11 20:43:32,146 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [805581892] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:43:32,146 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:43:32,146 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21] total 21 [2024-09-11 20:43:32,146 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [662031095] [2024-09-11 20:43:32,146 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:43:32,146 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-11 20:43:32,146 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:43:32,146 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-11 20:43:32,146 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=73, Invalid=627, Unknown=2, NotChecked=0, Total=702 [2024-09-11 20:43:32,147 INFO L87 Difference]: Start difference. First operand 210 states and 373 transitions. Second operand has 21 states, 16 states have (on average 2.3125) internal successors, (37), 18 states have internal predecessors, (37), 6 states have call successors, (6), 3 states have call predecessors, (6), 6 states have return successors, (6), 6 states have call predecessors, (6), 5 states have call successors, (6) [2024-09-11 20:43:36,723 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=true, quantifiers [0] [2024-09-11 20:43:37,531 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:43:37,531 INFO L93 Difference]: Finished difference Result 246 states and 468 transitions. [2024-09-11 20:43:37,532 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-11 20:43:37,532 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 16 states have (on average 2.3125) internal successors, (37), 18 states have internal predecessors, (37), 6 states have call successors, (6), 3 states have call predecessors, (6), 6 states have return successors, (6), 6 states have call predecessors, (6), 5 states have call successors, (6) Word has length 74 [2024-09-11 20:43:37,532 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:43:37,534 INFO L225 Difference]: With dead ends: 246 [2024-09-11 20:43:37,534 INFO L226 Difference]: Without dead ends: 240 [2024-09-11 20:43:37,534 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 58 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 203 ImplicationChecksByTransitivity, 9.4s TimeCoverageRelationStatistics Valid=152, Invalid=1252, Unknown=2, NotChecked=0, Total=1406 [2024-09-11 20:43:37,535 INFO L434 NwaCegarLoop]: 22 mSDtfsCounter, 38 mSDsluCounter, 202 mSDsCounter, 0 mSdLazyCounter, 687 mSolverCounterSat, 15 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 224 SdHoareTripleChecker+Invalid, 703 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 687 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.7s IncrementalHoareTripleChecker+Time [2024-09-11 20:43:37,535 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 224 Invalid, 703 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 687 Invalid, 1 Unknown, 0 Unchecked, 4.7s Time] [2024-09-11 20:43:37,535 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 240 states. [2024-09-11 20:43:37,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 240 to 222. [2024-09-11 20:43:37,777 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 222 states, 146 states have (on average 1.1164383561643836) internal successors, (163), 157 states have internal predecessors, (163), 25 states have call successors, (25), 12 states have call predecessors, (25), 50 states have return successors, (228), 52 states have call predecessors, (228), 24 states have call successors, (228) [2024-09-11 20:43:37,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 222 states to 222 states and 416 transitions. [2024-09-11 20:43:37,779 INFO L78 Accepts]: Start accepts. Automaton has 222 states and 416 transitions. Word has length 74 [2024-09-11 20:43:37,779 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:43:37,779 INFO L474 AbstractCegarLoop]: Abstraction has 222 states and 416 transitions. [2024-09-11 20:43:37,779 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 16 states have (on average 2.3125) internal successors, (37), 18 states have internal predecessors, (37), 6 states have call successors, (6), 3 states have call predecessors, (6), 6 states have return successors, (6), 6 states have call predecessors, (6), 5 states have call successors, (6) [2024-09-11 20:43:37,779 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:43:37,779 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 416 transitions. [2024-09-11 20:43:37,780 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2024-09-11 20:43:37,780 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:43:37,780 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:43:37,794 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (32)] Forceful destruction successful, exit code 0 [2024-09-11 20:43:37,980 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 32 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable36 [2024-09-11 20:43:37,981 INFO L399 AbstractCegarLoop]: === Iteration 38 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:43:37,981 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:43:37,981 INFO L85 PathProgramCache]: Analyzing trace with hash -794327269, now seen corresponding path program 2 times [2024-09-11 20:43:37,981 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:43:37,981 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1931753236] [2024-09-11 20:43:37,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:43:37,981 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:43:38,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:43:38,011 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1304057510] [2024-09-11 20:43:38,011 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-11 20:43:38,011 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:43:38,011 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:43:38,014 INFO L229 MonitoredProcess]: Starting monitored process 33 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:43:38,015 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Waiting until timeout for monitored process [2024-09-11 20:43:38,330 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-11 20:43:38,330 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-11 20:43:38,334 INFO L262 TraceCheckSpWp]: Trace formula consists of 535 conjuncts, 258 conjuncts are in the unsatisfiable core [2024-09-11 20:43:38,338 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:43:38,340 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:43:38,343 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:43:38,345 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:43:38,348 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:43:38,352 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:43:38,364 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:43:38,366 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:43:40,263 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 41 treesize of output 25 [2024-09-11 20:43:40,271 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 51 treesize of output 35 [2024-09-11 20:43:40,274 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 19 [2024-09-11 20:43:40,327 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 43 treesize of output 27 [2024-09-11 20:43:40,329 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-11 20:43:40,341 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 37 treesize of output 21 [2024-09-11 20:43:40,459 INFO L134 CoverageAnalysis]: Checked inductivity of 89 backedges. 12 proven. 36 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2024-09-11 20:43:40,459 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-11 20:43:46,107 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-11 20:43:46,107 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1931753236] [2024-09-11 20:43:46,107 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-11 20:43:46,107 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1304057510] [2024-09-11 20:43:46,107 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1304057510] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-11 20:43:46,107 INFO L185 FreeRefinementEngine]: Found 0 perfect and 1 imperfect interpolant sequences. [2024-09-11 20:43:46,107 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [25] total 25 [2024-09-11 20:43:46,107 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2029017223] [2024-09-11 20:43:46,107 INFO L85 oduleStraightlineAll]: Using 1 imperfect interpolants to construct interpolant automaton [2024-09-11 20:43:46,108 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2024-09-11 20:43:46,108 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-11 20:43:46,108 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2024-09-11 20:43:46,108 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=106, Invalid=764, Unknown=0, NotChecked=0, Total=870 [2024-09-11 20:43:46,108 INFO L87 Difference]: Start difference. First operand 222 states and 416 transitions. Second operand has 25 states, 21 states have (on average 1.5714285714285714) internal successors, (33), 21 states have internal predecessors, (33), 6 states have call successors, (6), 4 states have call predecessors, (6), 5 states have return successors, (6), 6 states have call predecessors, (6), 5 states have call successors, (6) [2024-09-11 20:43:47,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-11 20:43:47,976 INFO L93 Difference]: Finished difference Result 242 states and 456 transitions. [2024-09-11 20:43:47,976 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-11 20:43:47,977 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 21 states have (on average 1.5714285714285714) internal successors, (33), 21 states have internal predecessors, (33), 6 states have call successors, (6), 4 states have call predecessors, (6), 5 states have return successors, (6), 6 states have call predecessors, (6), 5 states have call successors, (6) Word has length 68 [2024-09-11 20:43:47,977 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-11 20:43:47,979 INFO L225 Difference]: With dead ends: 242 [2024-09-11 20:43:47,979 INFO L226 Difference]: Without dead ends: 236 [2024-09-11 20:43:47,979 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 83 GetRequests, 46 SyntacticMatches, 2 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 342 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=162, Invalid=1170, Unknown=0, NotChecked=0, Total=1332 [2024-09-11 20:43:47,979 INFO L434 NwaCegarLoop]: 15 mSDtfsCounter, 26 mSDsluCounter, 159 mSDsCounter, 0 mSdLazyCounter, 814 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 174 SdHoareTripleChecker+Invalid, 820 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 814 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2024-09-11 20:43:47,980 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 174 Invalid, 820 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 814 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2024-09-11 20:43:47,980 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 236 states. [2024-09-11 20:43:48,232 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 236 to 226. [2024-09-11 20:43:48,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 226 states, 148 states have (on average 1.114864864864865) internal successors, (165), 159 states have internal predecessors, (165), 25 states have call successors, (25), 12 states have call predecessors, (25), 52 states have return successors, (240), 54 states have call predecessors, (240), 24 states have call successors, (240) [2024-09-11 20:43:48,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 226 states to 226 states and 430 transitions. [2024-09-11 20:43:48,234 INFO L78 Accepts]: Start accepts. Automaton has 226 states and 430 transitions. Word has length 68 [2024-09-11 20:43:48,234 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-11 20:43:48,234 INFO L474 AbstractCegarLoop]: Abstraction has 226 states and 430 transitions. [2024-09-11 20:43:48,234 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 21 states have (on average 1.5714285714285714) internal successors, (33), 21 states have internal predecessors, (33), 6 states have call successors, (6), 4 states have call predecessors, (6), 5 states have return successors, (6), 6 states have call predecessors, (6), 5 states have call successors, (6) [2024-09-11 20:43:48,234 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:43:48,234 INFO L276 IsEmpty]: Start isEmpty. Operand 226 states and 430 transitions. [2024-09-11 20:43:48,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2024-09-11 20:43:48,235 INFO L208 NwaCegarLoop]: Found error trace [2024-09-11 20:43:48,235 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-11 20:43:48,249 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (33)] Ended with exit code 0 [2024-09-11 20:43:48,436 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 33 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable37 [2024-09-11 20:43:48,436 INFO L399 AbstractCegarLoop]: === Iteration 39 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-11 20:43:48,436 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-11 20:43:48,436 INFO L85 PathProgramCache]: Analyzing trace with hash 1471759789, now seen corresponding path program 2 times [2024-09-11 20:43:48,436 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-11 20:43:48,436 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [907721484] [2024-09-11 20:43:48,436 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-11 20:43:48,436 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-11 20:43:48,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-11 20:43:48,466 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [966381167] [2024-09-11 20:43:48,467 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-11 20:43:48,467 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-11 20:43:48,467 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-11 20:43:48,468 INFO L229 MonitoredProcess]: Starting monitored process 34 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-11 20:43:48,469 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (34)] Waiting until timeout for monitored process [2024-09-11 20:43:48,847 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-11 20:43:48,847 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-11 20:43:48,852 WARN L260 TraceCheckSpWp]: Trace formula consists of 553 conjuncts, 294 conjuncts are in the unsatisfiable core [2024-09-11 20:43:48,856 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-11 20:43:48,859 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:43:48,860 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 1 [2024-09-11 20:43:48,862 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:43:48,865 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-11 20:43:48,869 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:43:48,877 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:43:48,882 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 11 treesize of output 7 [2024-09-11 20:43:49,305 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 8 treesize of output 1 [2024-09-11 20:43:51,398 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 29 treesize of output 21 [2024-09-11 20:43:51,502 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 34 treesize of output 22 [2024-09-11 20:43:51,509 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 23 treesize of output 15 [2024-09-11 20:43:51,573 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 47 treesize of output 31 [2024-09-11 20:43:51,579 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 32 treesize of output 20 [2024-09-11 20:43:51,583 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2024-09-11 20:43:51,709 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 36 proven. 36 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-11 20:43:51,709 INFO L327 TraceCheckSpWp]: Computing backward predicates...