./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/recursive-simple/sum_15x0-1.c --full-output --witness-type correctness_witness --validate ../results/automizer-verification-files/SV-COMP24_unreach-call/sum_15x0-1.yml/witness-2.1.yml --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5189fb62 Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReachWitnessValidation.xml -i ../sv-benchmarks/c/recursive-simple/sum_15x0-1.c ../results/automizer-verification-files/SV-COMP24_unreach-call/sum_15x0-1.yml/witness-2.1.yml -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --traceabstraction.positions.where.we.compute.the.hoare.annotation None --- Real Ultimate output --- This is Ultimate 0.2.4-dev-5189fb6-m [2024-09-13 06:27:58,662 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-13 06:27:58,740 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-13 06:27:58,746 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-13 06:27:58,747 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-13 06:27:58,774 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-13 06:27:58,774 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-13 06:27:58,775 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-13 06:27:58,775 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-13 06:27:58,776 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-13 06:27:58,776 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-13 06:27:58,776 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-13 06:27:58,777 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-13 06:27:58,777 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-13 06:27:58,778 INFO L153 SettingsManager]: * Use SBE=true [2024-09-13 06:27:58,778 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-13 06:27:58,780 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-13 06:27:58,783 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-13 06:27:58,783 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-13 06:27:58,783 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-13 06:27:58,784 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-13 06:27:58,784 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-13 06:27:58,785 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-13 06:27:58,785 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-13 06:27:58,785 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-13 06:27:58,785 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-13 06:27:58,786 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-13 06:27:58,786 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-13 06:27:58,786 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-13 06:27:58,787 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-13 06:27:58,787 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-13 06:27:58,787 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-13 06:27:58,787 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-13 06:27:58,788 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-13 06:27:58,790 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-13 06:27:58,790 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-13 06:27:58,790 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-13 06:27:58,791 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-13 06:27:58,791 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-13 06:27:58,791 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-13 06:27:58,792 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-13 06:27:58,792 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-13 06:27:58,792 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> None [2024-09-13 06:27:59,037 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-13 06:27:59,063 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-13 06:27:59,065 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-13 06:27:59,066 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-13 06:27:59,067 INFO L274 PluginConnector]: CDTParser initialized [2024-09-13 06:27:59,068 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/recursive-simple/sum_15x0-1.c [2024-09-13 06:28:00,519 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-13 06:28:00,681 INFO L384 CDTParser]: Found 1 translation units. [2024-09-13 06:28:00,681 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursive-simple/sum_15x0-1.c [2024-09-13 06:28:00,690 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/fb28b1881/c82261f3f3504bd0ad325a2006f9ed8e/FLAGf9c2f30e6 [2024-09-13 06:28:01,089 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/fb28b1881/c82261f3f3504bd0ad325a2006f9ed8e [2024-09-13 06:28:01,091 INFO L270 PluginConnector]: Initializing Witness Parser... [2024-09-13 06:28:01,092 INFO L274 PluginConnector]: Witness Parser initialized [2024-09-13 06:28:01,092 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../results/automizer-verification-files/SV-COMP24_unreach-call/sum_15x0-1.yml/witness-2.1.yml [2024-09-13 06:28:01,140 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-13 06:28:01,141 INFO L133 ToolchainWalker]: Walking toolchain with 5 elements. [2024-09-13 06:28:01,142 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-13 06:28:01,142 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-13 06:28:01,147 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-13 06:28:01,148 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.09 06:28:01" (1/2) ... [2024-09-13 06:28:01,149 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2ddab23b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.09 06:28:01, skipping insertion in model container [2024-09-13 06:28:01,149 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.09 06:28:01" (1/2) ... [2024-09-13 06:28:01,150 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@692d6d0c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.09 06:28:01, skipping insertion in model container [2024-09-13 06:28:01,150 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 13.09 06:28:01" (2/2) ... [2024-09-13 06:28:01,150 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2ddab23b and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01, skipping insertion in model container [2024-09-13 06:28:01,151 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 13.09 06:28:01" (2/2) ... [2024-09-13 06:28:01,155 INFO L93 nessWitnessExtractor]: Found the following entries in the witness: [2024-09-13 06:28:01,156 INFO L1541 ArrayList]: Function contract at [L5]: requires null, ensures (\result == (\old(n) + \old(m))) [2024-09-13 06:28:01,174 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-13 06:28:01,327 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursive-simple/sum_15x0-1.c[481,494] [2024-09-13 06:28:01,332 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-13 06:28:01,340 INFO L200 MainTranslator]: Completed pre-run Start Parsing Global [2024-09-13 06:28:01,377 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursive-simple/sum_15x0-1.c[481,494] [2024-09-13 06:28:01,377 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-13 06:28:01,395 INFO L204 MainTranslator]: Completed translation [2024-09-13 06:28:01,396 INFO L201 PluginConnector]: Adding new model witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01 WrapperNode [2024-09-13 06:28:01,396 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-13 06:28:01,397 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-13 06:28:01,397 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-13 06:28:01,397 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-13 06:28:01,404 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01" (1/1) ... [2024-09-13 06:28:01,411 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01" (1/1) ... [2024-09-13 06:28:01,425 INFO L138 Inliner]: procedures = 12, calls = 9, calls flagged for inlining = 2, calls inlined = 2, statements flattened = 19 [2024-09-13 06:28:01,426 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-13 06:28:01,427 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-13 06:28:01,427 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-13 06:28:01,427 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-13 06:28:01,436 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01" (1/1) ... [2024-09-13 06:28:01,437 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01" (1/1) ... [2024-09-13 06:28:01,439 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01" (1/1) ... [2024-09-13 06:28:01,446 WARN L109 MemorySlicer]: Omit memory slicing because it failed with the following exception: Unsupported: Procedure sum is not part of the Ultimate memory model but has specification other that is not a ModifiesSpecification [2024-09-13 06:28:01,446 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01" (1/1) ... [2024-09-13 06:28:01,447 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01" (1/1) ... [2024-09-13 06:28:01,453 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01" (1/1) ... [2024-09-13 06:28:01,455 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01" (1/1) ... [2024-09-13 06:28:01,456 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01" (1/1) ... [2024-09-13 06:28:01,457 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01" (1/1) ... [2024-09-13 06:28:01,458 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-13 06:28:01,460 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-13 06:28:01,460 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-13 06:28:01,460 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-13 06:28:01,461 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01" (1/1) ... [2024-09-13 06:28:01,466 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-13 06:28:01,474 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 06:28:01,493 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-13 06:28:01,496 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-13 06:28:01,538 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-13 06:28:01,539 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-13 06:28:01,540 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-13 06:28:01,540 INFO L130 BoogieDeclarations]: Found specification of procedure sum [2024-09-13 06:28:01,540 INFO L138 BoogieDeclarations]: Found implementation of procedure sum [2024-09-13 06:28:01,540 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2024-09-13 06:28:01,593 INFO L242 CfgBuilder]: Building ICFG [2024-09-13 06:28:01,595 INFO L268 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-13 06:28:01,689 INFO L? ?]: Removed 13 outVars from TransFormulas that were not future-live. [2024-09-13 06:28:01,690 INFO L291 CfgBuilder]: Performing block encoding [2024-09-13 06:28:01,714 INFO L313 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-13 06:28:01,714 INFO L318 CfgBuilder]: Removed 0 assume(true) statements. [2024-09-13 06:28:01,715 INFO L201 PluginConnector]: Adding new model witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.09 06:28:01 BoogieIcfgContainer [2024-09-13 06:28:01,715 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-13 06:28:01,718 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-13 06:28:01,718 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-13 06:28:01,721 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-13 06:28:01,721 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.09 06:28:01" (1/4) ... [2024-09-13 06:28:01,722 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d127173 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.09 06:28:01, skipping insertion in model container [2024-09-13 06:28:01,722 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 13.09 06:28:01" (2/4) ... [2024-09-13 06:28:01,722 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d127173 and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CORRECTNESS_WITNESS 13.09 06:28:01, skipping insertion in model container [2024-09-13 06:28:01,722 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 06:28:01" (3/4) ... [2024-09-13 06:28:01,723 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d127173 and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CORRECTNESS_WITNESS 13.09 06:28:01, skipping insertion in model container [2024-09-13 06:28:01,723 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.09 06:28:01" (4/4) ... [2024-09-13 06:28:01,724 INFO L112 eAbstractionObserver]: Analyzing ICFG sum_15x0-1.c [2024-09-13 06:28:01,744 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:None NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-13 06:28:01,744 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 2 error locations. [2024-09-13 06:28:01,809 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-13 06:28:01,815 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=None, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@14ec7cfc, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-13 06:28:01,815 INFO L337 AbstractCegarLoop]: Starting to check reachability of 2 error locations. [2024-09-13 06:28:01,818 INFO L276 IsEmpty]: Start isEmpty. Operand has 15 states, 9 states have (on average 1.4444444444444444) internal successors, (13), 11 states have internal predecessors, (13), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-13 06:28:01,824 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 6 [2024-09-13 06:28:01,824 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 06:28:01,825 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1] [2024-09-13 06:28:01,825 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting sumErr0ENSURES_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, sumErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 06:28:01,842 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 06:28:01,842 INFO L85 PathProgramCache]: Analyzing trace with hash 56172024, now seen corresponding path program 1 times [2024-09-13 06:28:01,852 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 06:28:01,853 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1129176455] [2024-09-13 06:28:01,853 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 06:28:01,854 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 06:28:01,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:02,070 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 06:28:02,070 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 06:28:02,070 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1129176455] [2024-09-13 06:28:02,071 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1129176455] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-13 06:28:02,071 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-13 06:28:02,071 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-09-13 06:28:02,072 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1329065349] [2024-09-13 06:28:02,073 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-13 06:28:02,076 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-13 06:28:02,076 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 06:28:02,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-13 06:28:02,101 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-09-13 06:28:02,103 INFO L87 Difference]: Start difference. First operand has 15 states, 9 states have (on average 1.4444444444444444) internal successors, (13), 11 states have internal predecessors, (13), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 3 states have internal predecessors, (4), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 06:28:02,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 06:28:02,208 INFO L93 Difference]: Finished difference Result 22 states and 23 transitions. [2024-09-13 06:28:02,210 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-13 06:28:02,211 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 3 states have internal predecessors, (4), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 5 [2024-09-13 06:28:02,212 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 06:28:02,218 INFO L225 Difference]: With dead ends: 22 [2024-09-13 06:28:02,218 INFO L226 Difference]: Without dead ends: 20 [2024-09-13 06:28:02,221 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2024-09-13 06:28:02,226 INFO L434 NwaCegarLoop]: 9 mSDtfsCounter, 10 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 35 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 29 SdHoareTripleChecker+Invalid, 37 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 35 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-13 06:28:02,228 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 29 Invalid, 37 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 35 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-13 06:28:02,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20 states. [2024-09-13 06:28:02,257 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20 to 19. [2024-09-13 06:28:02,258 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 12 states have (on average 1.25) internal successors, (15), 13 states have internal predecessors, (15), 3 states have call successors, (3), 2 states have call predecessors, (3), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-13 06:28:02,259 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 21 transitions. [2024-09-13 06:28:02,260 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 21 transitions. Word has length 5 [2024-09-13 06:28:02,260 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 06:28:02,261 INFO L474 AbstractCegarLoop]: Abstraction has 19 states and 21 transitions. [2024-09-13 06:28:02,261 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 3 states have internal predecessors, (4), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 06:28:02,261 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 21 transitions. [2024-09-13 06:28:02,262 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2024-09-13 06:28:02,262 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 06:28:02,262 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1] [2024-09-13 06:28:02,263 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-13 06:28:02,263 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting sumErr0ENSURES_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, sumErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 06:28:02,264 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 06:28:02,264 INFO L85 PathProgramCache]: Analyzing trace with hash -1615449573, now seen corresponding path program 1 times [2024-09-13 06:28:02,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 06:28:02,264 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1345343510] [2024-09-13 06:28:02,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 06:28:02,265 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 06:28:02,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:02,391 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 06:28:02,392 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 06:28:02,392 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1345343510] [2024-09-13 06:28:02,392 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1345343510] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 06:28:02,392 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1906095526] [2024-09-13 06:28:02,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 06:28:02,393 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 06:28:02,393 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 06:28:02,396 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 06:28:02,400 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-13 06:28:02,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:02,460 INFO L262 TraceCheckSpWp]: Trace formula consists of 50 conjuncts, 6 conjuncts are in the unsatisfiable core [2024-09-13 06:28:02,464 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 06:28:02,519 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 06:28:02,520 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-13 06:28:02,600 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 06:28:02,601 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1906095526] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-13 06:28:02,601 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-13 06:28:02,601 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 6] total 11 [2024-09-13 06:28:02,602 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1356199353] [2024-09-13 06:28:02,603 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-13 06:28:02,603 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 12 states [2024-09-13 06:28:02,604 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 06:28:02,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 12 interpolants. [2024-09-13 06:28:02,606 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=98, Unknown=0, NotChecked=0, Total=132 [2024-09-13 06:28:02,607 INFO L87 Difference]: Start difference. First operand 19 states and 21 transitions. Second operand has 12 states, 10 states have (on average 1.1) internal successors, (11), 7 states have internal predecessors, (11), 4 states have call successors, (4), 4 states have call predecessors, (4), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 06:28:02,773 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 06:28:02,773 INFO L93 Difference]: Finished difference Result 44 states and 46 transitions. [2024-09-13 06:28:02,774 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-09-13 06:28:02,774 INFO L78 Accepts]: Start accepts. Automaton has has 12 states, 10 states have (on average 1.1) internal successors, (11), 7 states have internal predecessors, (11), 4 states have call successors, (4), 4 states have call predecessors, (4), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2024-09-13 06:28:02,774 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 06:28:02,776 INFO L225 Difference]: With dead ends: 44 [2024-09-13 06:28:02,776 INFO L226 Difference]: Without dead ends: 44 [2024-09-13 06:28:02,777 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 10 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=68, Invalid=172, Unknown=0, NotChecked=0, Total=240 [2024-09-13 06:28:02,779 INFO L434 NwaCegarLoop]: 12 mSDtfsCounter, 40 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 42 SdHoareTripleChecker+Valid, 64 SdHoareTripleChecker+Invalid, 130 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-13 06:28:02,781 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [42 Valid, 64 Invalid, 130 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-13 06:28:02,782 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44 states. [2024-09-13 06:28:02,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44 to 37. [2024-09-13 06:28:02,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 37 states, 24 states have (on average 1.25) internal successors, (30), 25 states have internal predecessors, (30), 6 states have call successors, (6), 5 states have call predecessors, (6), 5 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-13 06:28:02,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 37 states to 37 states and 42 transitions. [2024-09-13 06:28:02,794 INFO L78 Accepts]: Start accepts. Automaton has 37 states and 42 transitions. Word has length 8 [2024-09-13 06:28:02,794 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 06:28:02,795 INFO L474 AbstractCegarLoop]: Abstraction has 37 states and 42 transitions. [2024-09-13 06:28:02,795 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 12 states, 10 states have (on average 1.1) internal successors, (11), 7 states have internal predecessors, (11), 4 states have call successors, (4), 4 states have call predecessors, (4), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 06:28:02,795 INFO L276 IsEmpty]: Start isEmpty. Operand 37 states and 42 transitions. [2024-09-13 06:28:02,796 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-09-13 06:28:02,796 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 06:28:02,796 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 1, 1, 1, 1] [2024-09-13 06:28:02,815 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2024-09-13 06:28:02,997 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 06:28:02,997 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting sumErr0ENSURES_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, sumErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 06:28:02,998 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 06:28:02,998 INFO L85 PathProgramCache]: Analyzing trace with hash 1295816760, now seen corresponding path program 2 times [2024-09-13 06:28:02,998 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 06:28:02,998 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2001250052] [2024-09-13 06:28:02,998 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 06:28:02,999 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 06:28:03,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:03,257 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 0 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 06:28:03,257 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 06:28:03,257 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2001250052] [2024-09-13 06:28:03,257 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2001250052] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 06:28:03,258 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [785811031] [2024-09-13 06:28:03,258 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-13 06:28:03,258 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 06:28:03,258 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 06:28:03,260 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 06:28:03,261 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-13 06:28:03,302 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-09-13 06:28:03,303 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-13 06:28:03,303 INFO L262 TraceCheckSpWp]: Trace formula consists of 39 conjuncts, 7 conjuncts are in the unsatisfiable core [2024-09-13 06:28:03,305 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 06:28:03,346 INFO L134 CoverageAnalysis]: Checked inductivity of 26 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2024-09-13 06:28:03,346 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-13 06:28:03,346 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [785811031] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-13 06:28:03,347 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-13 06:28:03,347 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [12] total 15 [2024-09-13 06:28:03,347 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [484657224] [2024-09-13 06:28:03,347 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-13 06:28:03,347 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-09-13 06:28:03,347 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 06:28:03,348 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-09-13 06:28:03,348 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2024-09-13 06:28:03,348 INFO L87 Difference]: Start difference. First operand 37 states and 42 transitions. Second operand has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 06:28:03,387 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 06:28:03,387 INFO L93 Difference]: Finished difference Result 39 states and 45 transitions. [2024-09-13 06:28:03,388 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-13 06:28:03,388 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 17 [2024-09-13 06:28:03,388 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 06:28:03,389 INFO L225 Difference]: With dead ends: 39 [2024-09-13 06:28:03,389 INFO L226 Difference]: Without dead ends: 39 [2024-09-13 06:28:03,390 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=51, Invalid=189, Unknown=0, NotChecked=0, Total=240 [2024-09-13 06:28:03,391 INFO L434 NwaCegarLoop]: 7 mSDtfsCounter, 5 mSDsluCounter, 6 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 26 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-13 06:28:03,391 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 13 Invalid, 26 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-13 06:28:03,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2024-09-13 06:28:03,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 38. [2024-09-13 06:28:03,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 38 states, 25 states have (on average 1.24) internal successors, (31), 26 states have internal predecessors, (31), 6 states have call successors, (6), 5 states have call predecessors, (6), 5 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-13 06:28:03,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 38 states to 38 states and 43 transitions. [2024-09-13 06:28:03,401 INFO L78 Accepts]: Start accepts. Automaton has 38 states and 43 transitions. Word has length 17 [2024-09-13 06:28:03,401 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 06:28:03,401 INFO L474 AbstractCegarLoop]: Abstraction has 38 states and 43 transitions. [2024-09-13 06:28:03,402 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 2.0) internal successors, (6), 4 states have internal predecessors, (6), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 06:28:03,402 INFO L276 IsEmpty]: Start isEmpty. Operand 38 states and 43 transitions. [2024-09-13 06:28:03,402 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2024-09-13 06:28:03,402 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 06:28:03,402 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 06:28:03,419 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-09-13 06:28:03,603 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 06:28:03,604 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting sumErr0ENSURES_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, sumErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 06:28:03,604 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 06:28:03,604 INFO L85 PathProgramCache]: Analyzing trace with hash 511038535, now seen corresponding path program 1 times [2024-09-13 06:28:03,604 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 06:28:03,605 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1076849129] [2024-09-13 06:28:03,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 06:28:03,605 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 06:28:03,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:03,772 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2024-09-13 06:28:03,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:03,833 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 06:28:03,833 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 06:28:03,833 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1076849129] [2024-09-13 06:28:03,834 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1076849129] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 06:28:03,834 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [129312752] [2024-09-13 06:28:03,834 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 06:28:03,838 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 06:28:03,838 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 06:28:03,840 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 06:28:03,848 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-13 06:28:03,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:03,884 INFO L262 TraceCheckSpWp]: Trace formula consists of 91 conjuncts, 12 conjuncts are in the unsatisfiable core [2024-09-13 06:28:03,885 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 06:28:03,957 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 06:28:03,958 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-13 06:28:04,202 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 1 proven. 26 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 06:28:04,202 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [129312752] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-13 06:28:04,202 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-13 06:28:04,202 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 13, 13] total 25 [2024-09-13 06:28:04,202 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1496482870] [2024-09-13 06:28:04,202 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-13 06:28:04,203 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2024-09-13 06:28:04,203 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 06:28:04,204 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2024-09-13 06:28:04,204 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=114, Invalid=486, Unknown=0, NotChecked=0, Total=600 [2024-09-13 06:28:04,205 INFO L87 Difference]: Start difference. First operand 38 states and 43 transitions. Second operand has 25 states, 23 states have (on average 1.2173913043478262) internal successors, (28), 16 states have internal predecessors, (28), 10 states have call successors, (10), 9 states have call predecessors, (10), 1 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-13 06:28:04,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 06:28:04,588 INFO L93 Difference]: Finished difference Result 71 states and 72 transitions. [2024-09-13 06:28:04,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2024-09-13 06:28:04,589 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 23 states have (on average 1.2173913043478262) internal successors, (28), 16 states have internal predecessors, (28), 10 states have call successors, (10), 9 states have call predecessors, (10), 1 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 20 [2024-09-13 06:28:04,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 06:28:04,590 INFO L225 Difference]: With dead ends: 71 [2024-09-13 06:28:04,590 INFO L226 Difference]: Without dead ends: 71 [2024-09-13 06:28:04,591 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 28 SyntacticMatches, 1 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 186 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=272, Invalid=918, Unknown=0, NotChecked=0, Total=1190 [2024-09-13 06:28:04,592 INFO L434 NwaCegarLoop]: 13 mSDtfsCounter, 127 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 291 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 128 SdHoareTripleChecker+Valid, 73 SdHoareTripleChecker+Invalid, 319 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 291 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-13 06:28:04,592 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [128 Valid, 73 Invalid, 319 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 291 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-13 06:28:04,593 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2024-09-13 06:28:04,599 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 63. [2024-09-13 06:28:04,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 41 states have (on average 1.2439024390243902) internal successors, (51), 43 states have internal predecessors, (51), 10 states have call successors, (10), 9 states have call predecessors, (10), 10 states have return successors, (11), 10 states have call predecessors, (11), 10 states have call successors, (11) [2024-09-13 06:28:04,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 72 transitions. [2024-09-13 06:28:04,600 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 72 transitions. Word has length 20 [2024-09-13 06:28:04,601 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 06:28:04,601 INFO L474 AbstractCegarLoop]: Abstraction has 63 states and 72 transitions. [2024-09-13 06:28:04,601 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 23 states have (on average 1.2173913043478262) internal successors, (28), 16 states have internal predecessors, (28), 10 states have call successors, (10), 9 states have call predecessors, (10), 1 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-13 06:28:04,601 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 72 transitions. [2024-09-13 06:28:04,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2024-09-13 06:28:04,602 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 06:28:04,602 INFO L216 NwaCegarLoop]: trace histogram [10, 9, 9, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 06:28:04,615 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2024-09-13 06:28:04,804 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 06:28:04,804 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting sumErr0ENSURES_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, sumErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 06:28:04,805 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 06:28:04,805 INFO L85 PathProgramCache]: Analyzing trace with hash 756088836, now seen corresponding path program 2 times [2024-09-13 06:28:04,805 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 06:28:04,805 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1346174872] [2024-09-13 06:28:04,805 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 06:28:04,806 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 06:28:04,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:05,127 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2024-09-13 06:28:05,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:05,198 INFO L134 CoverageAnalysis]: Checked inductivity of 127 backedges. 1 proven. 126 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 06:28:05,198 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 06:28:05,198 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1346174872] [2024-09-13 06:28:05,198 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1346174872] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 06:28:05,198 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [552119759] [2024-09-13 06:28:05,199 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-13 06:28:05,199 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 06:28:05,199 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 06:28:05,200 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 06:28:05,202 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-13 06:28:05,258 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-13 06:28:05,259 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-13 06:28:05,261 INFO L262 TraceCheckSpWp]: Trace formula consists of 146 conjuncts, 22 conjuncts are in the unsatisfiable core [2024-09-13 06:28:05,263 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 06:28:05,342 INFO L134 CoverageAnalysis]: Checked inductivity of 127 backedges. 1 proven. 126 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 06:28:05,342 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-13 06:28:05,789 INFO L134 CoverageAnalysis]: Checked inductivity of 127 backedges. 1 proven. 126 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 06:28:05,790 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [552119759] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-13 06:28:05,790 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-13 06:28:05,790 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 23, 23] total 37 [2024-09-13 06:28:05,790 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1938166643] [2024-09-13 06:28:05,790 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-13 06:28:05,790 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2024-09-13 06:28:05,791 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 06:28:05,792 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2024-09-13 06:28:05,792 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=270, Invalid=1062, Unknown=0, NotChecked=0, Total=1332 [2024-09-13 06:28:05,793 INFO L87 Difference]: Start difference. First operand 63 states and 72 transitions. Second operand has 37 states, 35 states have (on average 1.1428571428571428) internal successors, (40), 22 states have internal predecessors, (40), 16 states have call successors, (17), 15 states have call predecessors, (17), 1 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-13 06:28:06,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 06:28:06,461 INFO L93 Difference]: Finished difference Result 113 states and 114 transitions. [2024-09-13 06:28:06,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 33 states. [2024-09-13 06:28:06,462 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 35 states have (on average 1.1428571428571428) internal successors, (40), 22 states have internal predecessors, (40), 16 states have call successors, (17), 15 states have call predecessors, (17), 1 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 35 [2024-09-13 06:28:06,462 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 06:28:06,463 INFO L225 Difference]: With dead ends: 113 [2024-09-13 06:28:06,463 INFO L226 Difference]: Without dead ends: 113 [2024-09-13 06:28:06,465 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 108 GetRequests, 48 SyntacticMatches, 9 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 634 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=665, Invalid=2091, Unknown=0, NotChecked=0, Total=2756 [2024-09-13 06:28:06,466 INFO L434 NwaCegarLoop]: 19 mSDtfsCounter, 192 mSDsluCounter, 134 mSDsCounter, 0 mSdLazyCounter, 585 mSolverCounterSat, 40 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 193 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 625 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 40 IncrementalHoareTripleChecker+Valid, 585 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-13 06:28:06,466 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [193 Valid, 153 Invalid, 625 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [40 Valid, 585 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-09-13 06:28:06,467 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113 states. [2024-09-13 06:28:06,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113 to 99. [2024-09-13 06:28:06,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 99 states, 65 states have (on average 1.2461538461538462) internal successors, (81), 67 states have internal predecessors, (81), 16 states have call successors, (16), 15 states have call predecessors, (16), 16 states have return successors, (17), 16 states have call predecessors, (17), 16 states have call successors, (17) [2024-09-13 06:28:06,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 114 transitions. [2024-09-13 06:28:06,475 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 114 transitions. Word has length 35 [2024-09-13 06:28:06,475 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 06:28:06,476 INFO L474 AbstractCegarLoop]: Abstraction has 99 states and 114 transitions. [2024-09-13 06:28:06,476 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 35 states have (on average 1.1428571428571428) internal successors, (40), 22 states have internal predecessors, (40), 16 states have call successors, (17), 15 states have call predecessors, (17), 1 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-13 06:28:06,476 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 114 transitions. [2024-09-13 06:28:06,477 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2024-09-13 06:28:06,477 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 06:28:06,477 INFO L216 NwaCegarLoop]: trace histogram [16, 15, 15, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 06:28:06,491 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2024-09-13 06:28:06,681 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 06:28:06,681 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting sumErr0ENSURES_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, sumErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 06:28:06,682 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 06:28:06,682 INFO L85 PathProgramCache]: Analyzing trace with hash -952693916, now seen corresponding path program 3 times [2024-09-13 06:28:06,682 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 06:28:06,682 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [229482814] [2024-09-13 06:28:06,682 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 06:28:06,682 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 06:28:06,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:07,503 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2024-09-13 06:28:07,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:07,536 INFO L134 CoverageAnalysis]: Checked inductivity of 346 backedges. 302 proven. 44 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 06:28:07,536 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 06:28:07,536 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [229482814] [2024-09-13 06:28:07,536 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [229482814] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 06:28:07,537 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1080634005] [2024-09-13 06:28:07,537 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-13 06:28:07,537 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 06:28:07,537 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 06:28:07,539 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 06:28:07,541 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-13 06:28:07,586 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2024-09-13 06:28:07,586 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-13 06:28:07,586 INFO L262 TraceCheckSpWp]: Trace formula consists of 69 conjuncts, 19 conjuncts are in the unsatisfiable core [2024-09-13 06:28:07,589 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 06:28:07,644 INFO L134 CoverageAnalysis]: Checked inductivity of 346 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 304 trivial. 0 not checked. [2024-09-13 06:28:07,645 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-13 06:28:07,645 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1080634005] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-13 06:28:07,645 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-13 06:28:07,645 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [35] total 36 [2024-09-13 06:28:07,646 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1291080536] [2024-09-13 06:28:07,646 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-13 06:28:07,646 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-13 06:28:07,646 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 06:28:07,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-13 06:28:07,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=282, Invalid=1050, Unknown=0, NotChecked=0, Total=1332 [2024-09-13 06:28:07,648 INFO L87 Difference]: Start difference. First operand 99 states and 114 transitions. Second operand has 5 states, 4 states have (on average 2.25) internal successors, (9), 4 states have internal predecessors, (9), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-13 06:28:07,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 06:28:07,688 INFO L93 Difference]: Finished difference Result 98 states and 99 transitions. [2024-09-13 06:28:07,688 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-13 06:28:07,688 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.25) internal successors, (9), 4 states have internal predecessors, (9), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 53 [2024-09-13 06:28:07,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 06:28:07,690 INFO L225 Difference]: With dead ends: 98 [2024-09-13 06:28:07,690 INFO L226 Difference]: Without dead ends: 98 [2024-09-13 06:28:07,690 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 91 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 365 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=292, Invalid=1190, Unknown=0, NotChecked=0, Total=1482 [2024-09-13 06:28:07,691 INFO L434 NwaCegarLoop]: 6 mSDtfsCounter, 2 mSDsluCounter, 9 mSDsCounter, 0 mSdLazyCounter, 33 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 15 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 33 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-13 06:28:07,692 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 15 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 33 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-13 06:28:07,692 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 98 states. [2024-09-13 06:28:07,697 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 98 to 98. [2024-09-13 06:28:07,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 98 states, 65 states have (on average 1.0153846153846153) internal successors, (66), 66 states have internal predecessors, (66), 16 states have call successors, (16), 15 states have call predecessors, (16), 16 states have return successors, (17), 16 states have call predecessors, (17), 16 states have call successors, (17) [2024-09-13 06:28:07,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 98 states to 98 states and 99 transitions. [2024-09-13 06:28:07,699 INFO L78 Accepts]: Start accepts. Automaton has 98 states and 99 transitions. Word has length 53 [2024-09-13 06:28:07,699 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 06:28:07,699 INFO L474 AbstractCegarLoop]: Abstraction has 98 states and 99 transitions. [2024-09-13 06:28:07,699 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.25) internal successors, (9), 4 states have internal predecessors, (9), 2 states have call successors, (3), 1 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-13 06:28:07,699 INFO L276 IsEmpty]: Start isEmpty. Operand 98 states and 99 transitions. [2024-09-13 06:28:07,702 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2024-09-13 06:28:07,702 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 06:28:07,702 INFO L216 NwaCegarLoop]: trace histogram [16, 16, 15, 15, 15, 15, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 06:28:07,718 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2024-09-13 06:28:07,906 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2024-09-13 06:28:07,907 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, sumErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 06:28:07,907 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 06:28:07,907 INFO L85 PathProgramCache]: Analyzing trace with hash -1843413041, now seen corresponding path program 1 times [2024-09-13 06:28:07,907 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 06:28:07,907 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1096166928] [2024-09-13 06:28:07,907 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 06:28:07,908 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 06:28:07,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,128 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2024-09-13 06:28:08,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,243 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,267 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,289 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,306 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,323 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,339 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,371 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,383 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,400 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,410 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,419 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,421 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,426 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,432 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,439 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,442 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2024-09-13 06:28:08,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 06:28:08,449 INFO L134 CoverageAnalysis]: Checked inductivity of 690 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 675 trivial. 0 not checked. [2024-09-13 06:28:08,449 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 06:28:08,449 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1096166928] [2024-09-13 06:28:08,449 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1096166928] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-13 06:28:08,450 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-13 06:28:08,450 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-09-13 06:28:08,450 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [844100469] [2024-09-13 06:28:08,450 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-13 06:28:08,450 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-13 06:28:08,451 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 06:28:08,451 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-13 06:28:08,451 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-09-13 06:28:08,452 INFO L87 Difference]: Start difference. First operand 98 states and 99 transitions. Second operand has 5 states, 4 states have (on average 2.5) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-13 06:28:08,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 06:28:08,470 INFO L93 Difference]: Finished difference Result 96 states and 97 transitions. [2024-09-13 06:28:08,470 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-13 06:28:08,470 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 99 [2024-09-13 06:28:08,471 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 06:28:08,471 INFO L225 Difference]: With dead ends: 96 [2024-09-13 06:28:08,471 INFO L226 Difference]: Without dead ends: 0 [2024-09-13 06:28:08,472 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 37 GetRequests, 34 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-09-13 06:28:08,472 INFO L434 NwaCegarLoop]: 7 mSDtfsCounter, 0 mSDsluCounter, 15 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 22 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-13 06:28:08,473 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 22 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-13 06:28:08,474 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-09-13 06:28:08,474 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-09-13 06:28:08,475 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 06:28:08,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-09-13 06:28:08,475 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 99 [2024-09-13 06:28:08,475 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 06:28:08,475 INFO L474 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-09-13 06:28:08,475 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 4 states have internal predecessors, (10), 1 states have call successors, (2), 1 states have call predecessors, (2), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-13 06:28:08,475 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-09-13 06:28:08,475 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-09-13 06:28:08,479 INFO L785 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 2 remaining) [2024-09-13 06:28:08,479 INFO L785 garLoopResultBuilder]: Registering result SAFE for location sumErr0ENSURES_VIOLATIONPOST_CONDITION (0 of 2 remaining) [2024-09-13 06:28:08,479 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2024-09-13 06:28:08,482 INFO L408 BasicCegarLoop]: Path program histogram: [3, 2, 1, 1] [2024-09-13 06:28:08,484 INFO L165 ceAbstractionStarter]: Computing trace abstraction results [2024-09-13 06:28:08,487 INFO L201 PluginConnector]: Adding new model witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.09 06:28:08 BoogieIcfgContainer [2024-09-13 06:28:08,487 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-09-13 06:28:08,488 INFO L158 Benchmark]: Toolchain (without parser) took 7347.01ms. Allocated memory was 176.2MB in the beginning and 243.3MB in the end (delta: 67.1MB). Free memory was 117.5MB in the beginning and 183.3MB in the end (delta: -65.8MB). Peak memory consumption was 3.9MB. Max. memory is 16.1GB. [2024-09-13 06:28:08,488 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 176.2MB. Free memory is still 136.1MB. There was no memory consumed. Max. memory is 16.1GB. [2024-09-13 06:28:08,488 INFO L158 Benchmark]: Witness Parser took 0.14ms. Allocated memory is still 176.2MB. Free memory is still 119.5MB. There was no memory consumed. Max. memory is 16.1GB. [2024-09-13 06:28:08,489 INFO L158 Benchmark]: CACSL2BoogieTranslator took 253.88ms. Allocated memory is still 176.2MB. Free memory was 117.5MB in the beginning and 104.9MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2024-09-13 06:28:08,489 INFO L158 Benchmark]: Boogie Procedure Inliner took 29.33ms. Allocated memory is still 176.2MB. Free memory was 104.9MB in the beginning and 103.5MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2024-09-13 06:28:08,489 INFO L158 Benchmark]: Boogie Preprocessor took 31.74ms. Allocated memory is still 176.2MB. Free memory was 103.5MB in the beginning and 101.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2024-09-13 06:28:08,490 INFO L158 Benchmark]: RCFGBuilder took 255.56ms. Allocated memory is still 176.2MB. Free memory was 101.8MB in the beginning and 91.3MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2024-09-13 06:28:08,490 INFO L158 Benchmark]: TraceAbstraction took 6769.90ms. Allocated memory was 176.2MB in the beginning and 243.3MB in the end (delta: 67.1MB). Free memory was 90.6MB in the beginning and 183.3MB in the end (delta: -92.7MB). There was no memory consumed. Max. memory is 16.1GB. [2024-09-13 06:28:08,492 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 176.2MB. Free memory is still 136.1MB. There was no memory consumed. Max. memory is 16.1GB. * Witness Parser took 0.14ms. Allocated memory is still 176.2MB. Free memory is still 119.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 253.88ms. Allocated memory is still 176.2MB. Free memory was 117.5MB in the beginning and 104.9MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 29.33ms. Allocated memory is still 176.2MB. Free memory was 104.9MB in the beginning and 103.5MB in the end (delta: 1.4MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 31.74ms. Allocated memory is still 176.2MB. Free memory was 103.5MB in the beginning and 101.8MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 255.56ms. Allocated memory is still 176.2MB. Free memory was 101.8MB in the beginning and 91.3MB in the end (delta: 10.5MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * TraceAbstraction took 6769.90ms. Allocated memory was 176.2MB in the beginning and 243.3MB in the end (delta: 67.1MB). Free memory was 90.6MB in the beginning and 183.3MB in the end (delta: -92.7MB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 18]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - PositiveResult [Line: 5]: procedure postcondition always holds For all program executions holds that procedure postcondition always holds at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 2 procedures, 15 locations, 2 error locations. Started 1 CEGAR loops. OverallTime: 6.7s, OverallIterations: 7, TraceHistogramMax: 16, PathProgramHistogramMax: 3, EmptinessCheckTime: 0.0s, AutomataDifference: 1.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 383 SdHoareTripleChecker+Valid, 0.7s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 376 mSDsluCounter, 369 SdHoareTripleChecker+Invalid, 0.6s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 296 mSDsCounter, 81 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1108 IncrementalHoareTripleChecker+Invalid, 1189 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 81 mSolverCounterUnsat, 73 mSDtfsCounter, 1108 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 356 GetRequests, 190 SyntacticMatches, 10 SemanticMatches, 156 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1241 ImplicationChecksByTransitivity, 2.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=99occurred in iteration=5, InterpolantAutomatonStates: 87, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 7 MinimizatonAttempts, 31 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 3.4s InterpolantComputationTime, 370 NumberOfCodeBlocks, 319 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 418 ConstructedInterpolants, 0 QuantifiedInterpolants, 956 SizeOfPredicates, 17 NumberOfNonLiveVariables, 395 ConjunctsInSsa, 66 ConjunctsInUnsatCore, 15 InterpolantComputations, 4 PerfectInterpolantSequences, 1370/1902 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 2 specifications checked. All of them hold RESULT: Ultimate proved your program to be correct! [2024-09-13 06:28:08,520 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE