./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/loops-crafted-1/vnew1.c --full-output --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5189fb62 Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/loops-crafted-1/vnew1.c -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 92c9725cc4c9709a9ab81826fb3481ef81541ab6f68244b6727f50e97bc0f0c0 --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-5189fb6-m [2024-09-12 22:42:23,669 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-12 22:42:23,738 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-12 22:42:23,743 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-12 22:42:23,744 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-12 22:42:23,780 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-12 22:42:23,781 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-12 22:42:23,781 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-12 22:42:23,782 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-12 22:42:23,782 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-12 22:42:23,782 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-12 22:42:23,783 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-12 22:42:23,783 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-12 22:42:23,784 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-12 22:42:23,784 INFO L153 SettingsManager]: * Use SBE=true [2024-09-12 22:42:23,784 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-12 22:42:23,785 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-12 22:42:23,785 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-12 22:42:23,786 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-12 22:42:23,786 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-12 22:42:23,786 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-12 22:42:23,787 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-12 22:42:23,787 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-12 22:42:23,787 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-12 22:42:23,788 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-12 22:42:23,788 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-12 22:42:23,788 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-12 22:42:23,789 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-12 22:42:23,789 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-12 22:42:23,789 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-12 22:42:23,789 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-12 22:42:23,790 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-12 22:42:23,790 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-12 22:42:23,790 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-12 22:42:23,790 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-12 22:42:23,790 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-12 22:42:23,790 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-12 22:42:23,791 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-12 22:42:23,791 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-12 22:42:23,791 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-12 22:42:23,791 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-12 22:42:23,792 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-12 22:42:23,792 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 92c9725cc4c9709a9ab81826fb3481ef81541ab6f68244b6727f50e97bc0f0c0 Applying setting for plugin de.uni_freiburg.informatik.ultimate.boogie.procedureinliner: Inline calls to implemented procedures -> NEVER Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 [2024-09-12 22:42:24,041 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-12 22:42:24,063 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-12 22:42:24,066 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-12 22:42:24,067 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-12 22:42:24,067 INFO L274 PluginConnector]: CDTParser initialized [2024-09-12 22:42:24,068 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/loops-crafted-1/vnew1.c [2024-09-12 22:42:25,377 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-12 22:42:25,535 INFO L384 CDTParser]: Found 1 translation units. [2024-09-12 22:42:25,535 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops-crafted-1/vnew1.c [2024-09-12 22:42:25,543 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/a0ff70fc3/ce6d21040ad24653a09ab7b857d55772/FLAG0e5f05d23 [2024-09-12 22:42:25,936 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/a0ff70fc3/ce6d21040ad24653a09ab7b857d55772 [2024-09-12 22:42:25,938 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-12 22:42:25,939 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-12 22:42:25,940 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-12 22:42:25,940 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-12 22:42:25,952 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-12 22:42:25,952 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.09 10:42:25" (1/1) ... [2024-09-12 22:42:25,953 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@20610952 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:25, skipping insertion in model container [2024-09-12 22:42:25,953 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.09 10:42:25" (1/1) ... [2024-09-12 22:42:25,969 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-12 22:42:26,110 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops-crafted-1/vnew1.c[403,416] [2024-09-12 22:42:26,122 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-12 22:42:26,129 INFO L200 MainTranslator]: Completed pre-run [2024-09-12 22:42:26,142 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops-crafted-1/vnew1.c[403,416] [2024-09-12 22:42:26,146 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-12 22:42:26,169 INFO L204 MainTranslator]: Completed translation [2024-09-12 22:42:26,170 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26 WrapperNode [2024-09-12 22:42:26,170 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-12 22:42:26,171 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-12 22:42:26,171 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-12 22:42:26,171 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-12 22:42:26,178 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26" (1/1) ... [2024-09-12 22:42:26,185 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26" (1/1) ... [2024-09-12 22:42:26,191 INFO L138 Inliner]: procedures = 14, calls = 16, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2024-09-12 22:42:26,192 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-12 22:42:26,192 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-12 22:42:26,192 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-12 22:42:26,192 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-12 22:42:26,202 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26" (1/1) ... [2024-09-12 22:42:26,202 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26" (1/1) ... [2024-09-12 22:42:26,204 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26" (1/1) ... [2024-09-12 22:42:26,219 INFO L175 MemorySlicer]: Split 10 memory accesses to 2 slices as follows [2, 8]. 80 percent of accesses are in the largest equivalence class. The 10 initializations are split as follows [2, 8]. The 0 writes are split as follows [0, 0]. [2024-09-12 22:42:26,221 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26" (1/1) ... [2024-09-12 22:42:26,221 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26" (1/1) ... [2024-09-12 22:42:26,227 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26" (1/1) ... [2024-09-12 22:42:26,230 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26" (1/1) ... [2024-09-12 22:42:26,231 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26" (1/1) ... [2024-09-12 22:42:26,234 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26" (1/1) ... [2024-09-12 22:42:26,236 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-12 22:42:26,236 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-12 22:42:26,240 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-12 22:42:26,240 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-12 22:42:26,241 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26" (1/1) ... [2024-09-12 22:42:26,249 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-12 22:42:26,259 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:42:26,275 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-12 22:42:26,278 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-12 22:42:26,324 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-12 22:42:26,325 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-09-12 22:42:26,325 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-09-12 22:42:26,325 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-12 22:42:26,325 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-12 22:42:26,325 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-09-12 22:42:26,325 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-09-12 22:42:26,325 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-12 22:42:26,326 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-12 22:42:26,326 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-12 22:42:26,326 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-12 22:42:26,388 INFO L242 CfgBuilder]: Building ICFG [2024-09-12 22:42:26,390 INFO L268 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-12 22:42:26,564 INFO L? ?]: Removed 7 outVars from TransFormulas that were not future-live. [2024-09-12 22:42:26,564 INFO L291 CfgBuilder]: Performing block encoding [2024-09-12 22:42:26,587 INFO L313 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-12 22:42:26,588 INFO L318 CfgBuilder]: Removed 2 assume(true) statements. [2024-09-12 22:42:26,588 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.09 10:42:26 BoogieIcfgContainer [2024-09-12 22:42:26,588 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-12 22:42:26,590 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-12 22:42:26,590 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-12 22:42:26,594 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-12 22:42:26,594 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.09 10:42:25" (1/3) ... [2024-09-12 22:42:26,595 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@260901ac and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.09 10:42:26, skipping insertion in model container [2024-09-12 22:42:26,595 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 10:42:26" (2/3) ... [2024-09-12 22:42:26,595 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@260901ac and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.09 10:42:26, skipping insertion in model container [2024-09-12 22:42:26,595 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.09 10:42:26" (3/3) ... [2024-09-12 22:42:26,596 INFO L112 eAbstractionObserver]: Analyzing ICFG vnew1.c [2024-09-12 22:42:26,611 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-12 22:42:26,612 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-12 22:42:26,672 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-12 22:42:26,679 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@7bfc3d0, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-12 22:42:26,680 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-12 22:42:26,683 INFO L276 IsEmpty]: Start isEmpty. Operand has 22 states, 14 states have (on average 1.5) internal successors, (21), 15 states have internal predecessors, (21), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-12 22:42:26,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2024-09-12 22:42:26,690 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:42:26,690 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:42:26,691 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:42:26,696 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:42:26,696 INFO L85 PathProgramCache]: Analyzing trace with hash 1892212544, now seen corresponding path program 1 times [2024-09-12 22:42:26,703 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:42:26,704 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1948643255] [2024-09-12 22:42:26,704 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:42:26,705 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:42:26,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:42:27,423 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:42:27,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:42:27,473 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 22:42:27,474 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:42:27,474 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1948643255] [2024-09-12 22:42:27,475 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1948643255] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-12 22:42:27,475 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-12 22:42:27,475 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2024-09-12 22:42:27,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2019188130] [2024-09-12 22:42:27,477 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-12 22:42:27,481 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2024-09-12 22:42:27,482 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:42:27,501 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2024-09-12 22:42:27,502 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2024-09-12 22:42:27,504 INFO L87 Difference]: Start difference. First operand has 22 states, 14 states have (on average 1.5) internal successors, (21), 15 states have internal predecessors, (21), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Second operand has 10 states, 7 states have (on average 1.2857142857142858) internal successors, (9), 7 states have internal predecessors, (9), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 22:42:27,782 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 22:42:27,782 INFO L93 Difference]: Finished difference Result 46 states and 60 transitions. [2024-09-12 22:42:27,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-09-12 22:42:27,785 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 7 states have (on average 1.2857142857142858) internal successors, (9), 7 states have internal predecessors, (9), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 13 [2024-09-12 22:42:27,786 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 22:42:27,791 INFO L225 Difference]: With dead ends: 46 [2024-09-12 22:42:27,792 INFO L226 Difference]: Without dead ends: 26 [2024-09-12 22:42:27,795 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=67, Invalid=173, Unknown=0, NotChecked=0, Total=240 [2024-09-12 22:42:27,799 INFO L434 NwaCegarLoop]: 4 mSDtfsCounter, 57 mSDsluCounter, 23 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 27 SdHoareTripleChecker+Invalid, 133 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-12 22:42:27,802 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 27 Invalid, 133 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-12 22:42:27,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26 states. [2024-09-12 22:42:27,859 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26 to 25. [2024-09-12 22:42:27,861 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 17 states have (on average 1.1764705882352942) internal successors, (20), 18 states have internal predecessors, (20), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-12 22:42:27,862 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 27 transitions. [2024-09-12 22:42:27,864 INFO L78 Accepts]: Start accepts. Automaton has 25 states and 27 transitions. Word has length 13 [2024-09-12 22:42:27,865 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 22:42:27,865 INFO L474 AbstractCegarLoop]: Abstraction has 25 states and 27 transitions. [2024-09-12 22:42:27,866 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 7 states have (on average 1.2857142857142858) internal successors, (9), 7 states have internal predecessors, (9), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 22:42:27,866 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:42:27,867 INFO L276 IsEmpty]: Start isEmpty. Operand 25 states and 27 transitions. [2024-09-12 22:42:27,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 15 [2024-09-12 22:42:27,868 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:42:27,868 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:42:27,869 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-12 22:42:27,869 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:42:27,870 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:42:27,870 INFO L85 PathProgramCache]: Analyzing trace with hash 706153222, now seen corresponding path program 1 times [2024-09-12 22:42:27,871 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:42:27,871 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1988866690] [2024-09-12 22:42:27,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:42:27,872 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:42:27,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:42:28,276 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:42:28,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:42:28,281 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 22:42:28,281 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:42:28,282 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1988866690] [2024-09-12 22:42:28,282 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1988866690] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 22:42:28,282 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1615338866] [2024-09-12 22:42:28,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:42:28,282 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:42:28,282 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:42:28,284 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 22:42:28,286 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-12 22:42:28,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:42:28,335 INFO L262 TraceCheckSpWp]: Trace formula consists of 72 conjuncts, 15 conjuncts are in the unsatisfiable core [2024-09-12 22:42:28,339 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 22:42:28,633 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 22:42:28,634 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 22:42:28,945 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 22:42:28,946 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1615338866] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 22:42:28,946 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 22:42:28,946 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 9, 8] total 21 [2024-09-12 22:42:28,947 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [540558476] [2024-09-12 22:42:28,947 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 22:42:28,948 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-12 22:42:28,948 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:42:28,949 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-12 22:42:28,949 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=73, Invalid=347, Unknown=0, NotChecked=0, Total=420 [2024-09-12 22:42:28,950 INFO L87 Difference]: Start difference. First operand 25 states and 27 transitions. Second operand has 21 states, 18 states have (on average 1.3888888888888888) internal successors, (25), 18 states have internal predecessors, (25), 5 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-12 22:42:29,599 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 22:42:29,599 INFO L93 Difference]: Finished difference Result 50 states and 58 transitions. [2024-09-12 22:42:29,599 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2024-09-12 22:42:29,600 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 18 states have (on average 1.3888888888888888) internal successors, (25), 18 states have internal predecessors, (25), 5 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 14 [2024-09-12 22:42:29,600 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 22:42:29,602 INFO L225 Difference]: With dead ends: 50 [2024-09-12 22:42:29,602 INFO L226 Difference]: Without dead ends: 48 [2024-09-12 22:42:29,603 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 18 SyntacticMatches, 2 SemanticMatches, 34 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 170 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=247, Invalid=1013, Unknown=0, NotChecked=0, Total=1260 [2024-09-12 22:42:29,604 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 90 mSDsluCounter, 22 mSDsCounter, 0 mSdLazyCounter, 274 mSolverCounterSat, 51 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 25 SdHoareTripleChecker+Invalid, 325 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 51 IncrementalHoareTripleChecker+Valid, 274 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-12 22:42:29,605 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 25 Invalid, 325 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [51 Valid, 274 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-12 22:42:29,605 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2024-09-12 22:42:29,619 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 40. [2024-09-12 22:42:29,620 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40 states, 29 states have (on average 1.206896551724138) internal successors, (35), 30 states have internal predecessors, (35), 6 states have call successors, (6), 5 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-12 22:42:29,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 46 transitions. [2024-09-12 22:42:29,621 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 46 transitions. Word has length 14 [2024-09-12 22:42:29,621 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 22:42:29,621 INFO L474 AbstractCegarLoop]: Abstraction has 40 states and 46 transitions. [2024-09-12 22:42:29,622 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 18 states have (on average 1.3888888888888888) internal successors, (25), 18 states have internal predecessors, (25), 5 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-12 22:42:29,622 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:42:29,622 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 46 transitions. [2024-09-12 22:42:29,623 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-09-12 22:42:29,624 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:42:29,624 INFO L216 NwaCegarLoop]: trace histogram [4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:42:29,641 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2024-09-12 22:42:29,828 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:42:29,829 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:42:29,829 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:42:29,829 INFO L85 PathProgramCache]: Analyzing trace with hash 1759027392, now seen corresponding path program 2 times [2024-09-12 22:42:29,829 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:42:29,829 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [665745561] [2024-09-12 22:42:29,830 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:42:29,830 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:42:29,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:42:30,203 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:42:30,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:42:30,226 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 22:42:30,226 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:42:30,226 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [665745561] [2024-09-12 22:42:30,227 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [665745561] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 22:42:30,227 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1011821810] [2024-09-12 22:42:30,227 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-12 22:42:30,227 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:42:30,227 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:42:30,229 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 22:42:30,230 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-12 22:42:30,277 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-12 22:42:30,277 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 22:42:30,278 INFO L262 TraceCheckSpWp]: Trace formula consists of 87 conjuncts, 28 conjuncts are in the unsatisfiable core [2024-09-12 22:42:30,280 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 22:42:30,540 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 22:42:30,541 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 22:42:30,870 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 22:42:30,871 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1011821810] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 22:42:30,871 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 22:42:30,871 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 10, 10] total 26 [2024-09-12 22:42:30,871 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1037746625] [2024-09-12 22:42:30,871 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 22:42:30,872 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 26 states [2024-09-12 22:42:30,872 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:42:30,873 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 26 interpolants. [2024-09-12 22:42:30,873 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=100, Invalid=550, Unknown=0, NotChecked=0, Total=650 [2024-09-12 22:42:30,874 INFO L87 Difference]: Start difference. First operand 40 states and 46 transitions. Second operand has 26 states, 25 states have (on average 1.32) internal successors, (33), 23 states have internal predecessors, (33), 5 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-12 22:42:32,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 22:42:32,693 INFO L93 Difference]: Finished difference Result 82 states and 101 transitions. [2024-09-12 22:42:32,695 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2024-09-12 22:42:32,696 INFO L78 Accepts]: Start accepts. Automaton has has 26 states, 25 states have (on average 1.32) internal successors, (33), 23 states have internal predecessors, (33), 5 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 17 [2024-09-12 22:42:32,696 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 22:42:32,698 INFO L225 Difference]: With dead ends: 82 [2024-09-12 22:42:32,698 INFO L226 Difference]: Without dead ends: 80 [2024-09-12 22:42:32,702 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 272 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=373, Invalid=1607, Unknown=0, NotChecked=0, Total=1980 [2024-09-12 22:42:32,703 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 154 mSDsluCounter, 25 mSDsCounter, 0 mSdLazyCounter, 389 mSolverCounterSat, 57 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 154 SdHoareTripleChecker+Valid, 28 SdHoareTripleChecker+Invalid, 446 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 57 IncrementalHoareTripleChecker+Valid, 389 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2024-09-12 22:42:32,703 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [154 Valid, 28 Invalid, 446 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [57 Valid, 389 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2024-09-12 22:42:32,704 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2024-09-12 22:42:32,744 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 48. [2024-09-12 22:42:32,745 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 37 states have (on average 1.3783783783783783) internal successors, (51), 38 states have internal predecessors, (51), 6 states have call successors, (6), 5 states have call predecessors, (6), 4 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-12 22:42:32,746 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 62 transitions. [2024-09-12 22:42:32,747 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 62 transitions. Word has length 17 [2024-09-12 22:42:32,747 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 22:42:32,747 INFO L474 AbstractCegarLoop]: Abstraction has 48 states and 62 transitions. [2024-09-12 22:42:32,747 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 26 states, 25 states have (on average 1.32) internal successors, (33), 23 states have internal predecessors, (33), 5 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-12 22:42:32,747 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:42:32,748 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 62 transitions. [2024-09-12 22:42:32,748 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2024-09-12 22:42:32,748 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:42:32,749 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:42:32,766 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-09-12 22:42:32,953 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:42:32,954 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:42:32,954 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:42:32,954 INFO L85 PathProgramCache]: Analyzing trace with hash 447679010, now seen corresponding path program 1 times [2024-09-12 22:42:32,954 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:42:32,954 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [442275423] [2024-09-12 22:42:32,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:42:32,955 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:42:32,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:42:33,319 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:42:33,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:42:33,342 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2024-09-12 22:42:33,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:42:33,348 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 2 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 22:42:33,348 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:42:33,348 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [442275423] [2024-09-12 22:42:33,348 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [442275423] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 22:42:33,348 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2061130458] [2024-09-12 22:42:33,349 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:42:33,349 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:42:33,349 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:42:33,351 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 22:42:33,353 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-12 22:42:33,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:42:33,407 INFO L262 TraceCheckSpWp]: Trace formula consists of 96 conjuncts, 23 conjuncts are in the unsatisfiable core [2024-09-12 22:42:33,409 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 22:42:33,614 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 2 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 22:42:33,614 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 22:42:33,842 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 2 proven. 8 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 22:42:33,843 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2061130458] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 22:42:33,843 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 22:42:33,843 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 10, 9] total 23 [2024-09-12 22:42:33,843 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1223431850] [2024-09-12 22:42:33,843 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 22:42:33,844 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 23 states [2024-09-12 22:42:33,844 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:42:33,845 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 23 interpolants. [2024-09-12 22:42:33,845 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=73, Invalid=433, Unknown=0, NotChecked=0, Total=506 [2024-09-12 22:42:33,845 INFO L87 Difference]: Start difference. First operand 48 states and 62 transitions. Second operand has 23 states, 23 states have (on average 1.6521739130434783) internal successors, (38), 20 states have internal predecessors, (38), 8 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (5), 5 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-12 22:42:35,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 22:42:35,069 INFO L93 Difference]: Finished difference Result 93 states and 116 transitions. [2024-09-12 22:42:35,069 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2024-09-12 22:42:35,069 INFO L78 Accepts]: Start accepts. Automaton has has 23 states, 23 states have (on average 1.6521739130434783) internal successors, (38), 20 states have internal predecessors, (38), 8 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (5), 5 states have call predecessors, (5), 3 states have call successors, (5) Word has length 23 [2024-09-12 22:42:35,070 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 22:42:35,071 INFO L225 Difference]: With dead ends: 93 [2024-09-12 22:42:35,071 INFO L226 Difference]: Without dead ends: 91 [2024-09-12 22:42:35,071 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 36 SyntacticMatches, 3 SemanticMatches, 35 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 247 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=235, Invalid=1097, Unknown=0, NotChecked=0, Total=1332 [2024-09-12 22:42:35,074 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 102 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 485 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 102 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 528 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 485 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-09-12 22:42:35,074 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [102 Valid, 41 Invalid, 528 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 485 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-09-12 22:42:35,075 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2024-09-12 22:42:35,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 89. [2024-09-12 22:42:35,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 65 states have (on average 1.2153846153846153) internal successors, (79), 71 states have internal predecessors, (79), 17 states have call successors, (17), 7 states have call predecessors, (17), 6 states have return successors, (16), 10 states have call predecessors, (16), 16 states have call successors, (16) [2024-09-12 22:42:35,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 112 transitions. [2024-09-12 22:42:35,133 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 112 transitions. Word has length 23 [2024-09-12 22:42:35,134 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 22:42:35,134 INFO L474 AbstractCegarLoop]: Abstraction has 89 states and 112 transitions. [2024-09-12 22:42:35,135 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 23 states, 23 states have (on average 1.6521739130434783) internal successors, (38), 20 states have internal predecessors, (38), 8 states have call successors, (10), 6 states have call predecessors, (10), 2 states have return successors, (5), 5 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-12 22:42:35,136 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:42:35,137 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 112 transitions. [2024-09-12 22:42:35,138 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2024-09-12 22:42:35,138 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:42:35,138 INFO L216 NwaCegarLoop]: trace histogram [12, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:42:35,155 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-09-12 22:42:35,342 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:42:35,343 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:42:35,343 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:42:35,343 INFO L85 PathProgramCache]: Analyzing trace with hash -1692277824, now seen corresponding path program 3 times [2024-09-12 22:42:35,343 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:42:35,343 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1733912990] [2024-09-12 22:42:35,343 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:42:35,344 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:42:35,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:42:36,188 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:42:36,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:42:36,221 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 0 proven. 78 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 22:42:36,222 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:42:36,222 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1733912990] [2024-09-12 22:42:36,222 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1733912990] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 22:42:36,222 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1935137710] [2024-09-12 22:42:36,222 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-12 22:42:36,223 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:42:36,223 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:42:36,224 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 22:42:36,226 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-12 22:42:36,306 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2024-09-12 22:42:36,306 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 22:42:36,312 INFO L262 TraceCheckSpWp]: Trace formula consists of 127 conjuncts, 56 conjuncts are in the unsatisfiable core [2024-09-12 22:42:36,313 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 22:42:36,846 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 0 proven. 78 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 22:42:36,846 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 22:42:37,655 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 0 proven. 78 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 22:42:37,656 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1935137710] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 22:42:37,656 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 22:42:37,656 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 17, 17] total 48 [2024-09-12 22:42:37,656 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1553216362] [2024-09-12 22:42:37,656 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 22:42:37,656 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2024-09-12 22:42:37,657 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:42:37,657 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2024-09-12 22:42:37,658 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=376, Invalid=1880, Unknown=0, NotChecked=0, Total=2256 [2024-09-12 22:42:37,659 INFO L87 Difference]: Start difference. First operand 89 states and 112 transitions. Second operand has 48 states, 47 states have (on average 1.2127659574468086) internal successors, (57), 45 states have internal predecessors, (57), 5 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-12 22:42:49,560 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:42:58,693 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:42:59,478 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 22:42:59,478 INFO L93 Difference]: Finished difference Result 151 states and 195 transitions. [2024-09-12 22:42:59,479 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2024-09-12 22:42:59,479 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 47 states have (on average 1.2127659574468086) internal successors, (57), 45 states have internal predecessors, (57), 5 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 25 [2024-09-12 22:42:59,479 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 22:42:59,481 INFO L225 Difference]: With dead ends: 151 [2024-09-12 22:42:59,481 INFO L226 Difference]: Without dead ends: 149 [2024-09-12 22:42:59,483 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 106 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 83 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 755 ImplicationChecksByTransitivity, 13.9s TimeCoverageRelationStatistics Valid=1319, Invalid=5821, Unknown=0, NotChecked=0, Total=7140 [2024-09-12 22:42:59,484 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 384 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 1459 mSolverCounterSat, 173 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 384 SdHoareTripleChecker+Valid, 76 SdHoareTripleChecker+Invalid, 1634 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 173 IncrementalHoareTripleChecker+Valid, 1459 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.4s IncrementalHoareTripleChecker+Time [2024-09-12 22:42:59,484 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [384 Valid, 76 Invalid, 1634 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [173 Valid, 1459 Invalid, 2 Unknown, 0 Unchecked, 9.4s Time] [2024-09-12 22:42:59,485 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 149 states. [2024-09-12 22:42:59,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 149 to 126. [2024-09-12 22:42:59,558 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 126 states, 96 states have (on average 1.3020833333333333) internal successors, (125), 105 states have internal predecessors, (125), 21 states have call successors, (21), 9 states have call predecessors, (21), 8 states have return successors, (20), 11 states have call predecessors, (20), 20 states have call successors, (20) [2024-09-12 22:42:59,559 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 126 states to 126 states and 166 transitions. [2024-09-12 22:42:59,560 INFO L78 Accepts]: Start accepts. Automaton has 126 states and 166 transitions. Word has length 25 [2024-09-12 22:42:59,560 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 22:42:59,560 INFO L474 AbstractCegarLoop]: Abstraction has 126 states and 166 transitions. [2024-09-12 22:42:59,560 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 47 states have (on average 1.2127659574468086) internal successors, (57), 45 states have internal predecessors, (57), 5 states have call successors, (7), 5 states have call predecessors, (7), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-12 22:42:59,560 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:42:59,561 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 166 transitions. [2024-09-12 22:42:59,562 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2024-09-12 22:42:59,562 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:42:59,562 INFO L216 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:42:59,581 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2024-09-12 22:42:59,762 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:42:59,763 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:42:59,763 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:42:59,763 INFO L85 PathProgramCache]: Analyzing trace with hash 1835559814, now seen corresponding path program 2 times [2024-09-12 22:42:59,763 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:42:59,763 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [377571090] [2024-09-12 22:42:59,763 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:42:59,764 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:42:59,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:43:00,027 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:43:00,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:43:00,030 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-12 22:43:00,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:43:00,035 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2024-09-12 22:43:00,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:43:00,039 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-12 22:43:00,040 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:43:00,040 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [377571090] [2024-09-12 22:43:00,040 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [377571090] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 22:43:00,040 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [764913110] [2024-09-12 22:43:00,040 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-12 22:43:00,040 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:43:00,041 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:43:00,042 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 22:43:00,045 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-12 22:43:00,095 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-12 22:43:00,095 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 22:43:00,096 INFO L262 TraceCheckSpWp]: Trace formula consists of 100 conjuncts, 12 conjuncts are in the unsatisfiable core [2024-09-12 22:43:00,098 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 22:43:00,217 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-12 22:43:00,217 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 22:43:00,578 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 6 proven. 6 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-12 22:43:00,579 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [764913110] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 22:43:00,579 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 22:43:00,579 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 8, 8] total 20 [2024-09-12 22:43:00,579 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2105343998] [2024-09-12 22:43:00,579 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 22:43:00,580 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2024-09-12 22:43:00,580 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:43:00,581 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2024-09-12 22:43:00,582 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=303, Unknown=0, NotChecked=0, Total=380 [2024-09-12 22:43:00,582 INFO L87 Difference]: Start difference. First operand 126 states and 166 transitions. Second operand has 20 states, 20 states have (on average 1.7) internal successors, (34), 19 states have internal predecessors, (34), 8 states have call successors, (10), 3 states have call predecessors, (10), 1 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-12 22:43:01,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 22:43:01,165 INFO L93 Difference]: Finished difference Result 161 states and 204 transitions. [2024-09-12 22:43:01,165 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2024-09-12 22:43:01,165 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 1.7) internal successors, (34), 19 states have internal predecessors, (34), 8 states have call successors, (10), 3 states have call predecessors, (10), 1 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) Word has length 28 [2024-09-12 22:43:01,165 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 22:43:01,167 INFO L225 Difference]: With dead ends: 161 [2024-09-12 22:43:01,167 INFO L226 Difference]: Without dead ends: 118 [2024-09-12 22:43:01,167 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 84 GetRequests, 51 SyntacticMatches, 2 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 181 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=205, Invalid=851, Unknown=0, NotChecked=0, Total=1056 [2024-09-12 22:43:01,168 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 32 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 184 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 31 SdHoareTripleChecker+Invalid, 200 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 184 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-12 22:43:01,168 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 31 Invalid, 200 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 184 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-12 22:43:01,169 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 118 states. [2024-09-12 22:43:01,246 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 118 to 118. [2024-09-12 22:43:01,247 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 118 states, 90 states have (on average 1.288888888888889) internal successors, (116), 98 states have internal predecessors, (116), 20 states have call successors, (20), 8 states have call predecessors, (20), 7 states have return successors, (19), 11 states have call predecessors, (19), 19 states have call successors, (19) [2024-09-12 22:43:01,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 118 states to 118 states and 155 transitions. [2024-09-12 22:43:01,248 INFO L78 Accepts]: Start accepts. Automaton has 118 states and 155 transitions. Word has length 28 [2024-09-12 22:43:01,248 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 22:43:01,248 INFO L474 AbstractCegarLoop]: Abstraction has 118 states and 155 transitions. [2024-09-12 22:43:01,248 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 1.7) internal successors, (34), 19 states have internal predecessors, (34), 8 states have call successors, (10), 3 states have call predecessors, (10), 1 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-12 22:43:01,248 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:43:01,248 INFO L276 IsEmpty]: Start isEmpty. Operand 118 states and 155 transitions. [2024-09-12 22:43:01,252 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2024-09-12 22:43:01,252 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:43:01,252 INFO L216 NwaCegarLoop]: trace histogram [6, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:43:01,269 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2024-09-12 22:43:01,453 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2024-09-12 22:43:01,454 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:43:01,454 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:43:01,454 INFO L85 PathProgramCache]: Analyzing trace with hash -2066924416, now seen corresponding path program 3 times [2024-09-12 22:43:01,454 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:43:01,454 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1113789560] [2024-09-12 22:43:01,454 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:43:01,454 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:43:01,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:43:02,920 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:43:02,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:43:02,958 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2024-09-12 22:43:02,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:43:02,962 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2024-09-12 22:43:02,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:43:02,966 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-12 22:43:02,966 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:43:02,966 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1113789560] [2024-09-12 22:43:02,966 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1113789560] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 22:43:02,966 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [473636771] [2024-09-12 22:43:02,966 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-12 22:43:02,967 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:43:02,967 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:43:02,968 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 22:43:02,970 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-12 22:43:03,051 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-12 22:43:03,052 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 22:43:03,053 INFO L262 TraceCheckSpWp]: Trace formula consists of 125 conjuncts, 43 conjuncts are in the unsatisfiable core [2024-09-12 22:43:03,055 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 22:43:03,598 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 3 proven. 32 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-12 22:43:03,599 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 22:43:48,175 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 4 proven. 28 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-12 22:43:48,176 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [473636771] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 22:43:48,176 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 22:43:48,176 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 15, 13] total 37 [2024-09-12 22:43:48,176 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1081209577] [2024-09-12 22:43:48,176 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 22:43:48,177 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2024-09-12 22:43:48,177 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:43:48,178 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2024-09-12 22:43:48,178 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=173, Invalid=1151, Unknown=8, NotChecked=0, Total=1332 [2024-09-12 22:43:48,178 INFO L87 Difference]: Start difference. First operand 118 states and 155 transitions. Second operand has 37 states, 36 states have (on average 1.5555555555555556) internal successors, (56), 35 states have internal predecessors, (56), 10 states have call successors, (12), 5 states have call predecessors, (12), 3 states have return successors, (8), 8 states have call predecessors, (8), 7 states have call successors, (8) [2024-09-12 22:43:56,042 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 22:43:56,042 INFO L93 Difference]: Finished difference Result 171 states and 218 transitions. [2024-09-12 22:43:56,043 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 26 states. [2024-09-12 22:43:56,044 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 36 states have (on average 1.5555555555555556) internal successors, (56), 35 states have internal predecessors, (56), 10 states have call successors, (12), 5 states have call predecessors, (12), 3 states have return successors, (8), 8 states have call predecessors, (8), 7 states have call successors, (8) Word has length 33 [2024-09-12 22:43:56,044 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 22:43:56,045 INFO L225 Difference]: With dead ends: 171 [2024-09-12 22:43:56,045 INFO L226 Difference]: Without dead ends: 169 [2024-09-12 22:43:56,046 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 109 GetRequests, 51 SyntacticMatches, 1 SemanticMatches, 57 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 443 ImplicationChecksByTransitivity, 52.0s TimeCoverageRelationStatistics Valid=523, Invalid=2891, Unknown=8, NotChecked=0, Total=3422 [2024-09-12 22:43:56,047 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 169 mSDsluCounter, 41 mSDsCounter, 0 mSdLazyCounter, 512 mSolverCounterSat, 75 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 169 SdHoareTripleChecker+Valid, 44 SdHoareTripleChecker+Invalid, 587 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 75 IncrementalHoareTripleChecker+Valid, 512 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2024-09-12 22:43:56,047 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [169 Valid, 44 Invalid, 587 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [75 Valid, 512 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2024-09-12 22:43:56,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 169 states. [2024-09-12 22:43:56,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 169 to 169. [2024-09-12 22:43:56,137 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 169 states, 125 states have (on average 1.208) internal successors, (151), 136 states have internal predecessors, (151), 33 states have call successors, (33), 11 states have call predecessors, (33), 10 states have return successors, (32), 21 states have call predecessors, (32), 32 states have call successors, (32) [2024-09-12 22:43:56,138 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 169 states to 169 states and 216 transitions. [2024-09-12 22:43:56,138 INFO L78 Accepts]: Start accepts. Automaton has 169 states and 216 transitions. Word has length 33 [2024-09-12 22:43:56,138 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 22:43:56,138 INFO L474 AbstractCegarLoop]: Abstraction has 169 states and 216 transitions. [2024-09-12 22:43:56,138 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 36 states have (on average 1.5555555555555556) internal successors, (56), 35 states have internal predecessors, (56), 10 states have call successors, (12), 5 states have call predecessors, (12), 3 states have return successors, (8), 8 states have call predecessors, (8), 7 states have call successors, (8) [2024-09-12 22:43:56,139 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:43:56,139 INFO L276 IsEmpty]: Start isEmpty. Operand 169 states and 216 transitions. [2024-09-12 22:43:56,140 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2024-09-12 22:43:56,140 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:43:56,140 INFO L216 NwaCegarLoop]: trace histogram [14, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:43:56,153 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2024-09-12 22:43:56,341 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:43:56,341 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:43:56,341 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:43:56,341 INFO L85 PathProgramCache]: Analyzing trace with hash 2049998720, now seen corresponding path program 4 times [2024-09-12 22:43:56,341 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:43:56,341 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [287769847] [2024-09-12 22:43:56,341 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:43:56,342 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:43:56,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:43:57,552 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:43:57,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:43:57,602 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2024-09-12 22:43:57,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:43:57,606 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2024-09-12 22:43:57,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:43:57,609 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 4 proven. 112 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-12 22:43:57,610 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:43:57,610 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [287769847] [2024-09-12 22:43:57,610 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [287769847] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 22:43:57,610 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [763711035] [2024-09-12 22:43:57,610 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-12 22:43:57,610 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:43:57,610 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:43:57,612 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 22:43:57,613 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-12 22:43:57,743 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-12 22:43:57,743 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 22:43:57,745 INFO L262 TraceCheckSpWp]: Trace formula consists of 165 conjuncts, 66 conjuncts are in the unsatisfiable core [2024-09-12 22:43:57,746 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 22:43:58,608 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 4 proven. 112 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-12 22:43:58,608 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 22:44:00,356 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 4 proven. 112 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-12 22:44:00,356 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [763711035] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 22:44:00,356 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 22:44:00,356 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 21, 21] total 60 [2024-09-12 22:44:00,356 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1002405897] [2024-09-12 22:44:00,356 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 22:44:00,357 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 60 states [2024-09-12 22:44:00,357 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:44:00,358 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 60 interpolants. [2024-09-12 22:44:00,358 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=540, Invalid=3000, Unknown=0, NotChecked=0, Total=3540 [2024-09-12 22:44:00,359 INFO L87 Difference]: Start difference. First operand 169 states and 216 transitions. Second operand has 60 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 57 states have internal predecessors, (78), 11 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (8), 8 states have call predecessors, (8), 7 states have call successors, (8) [2024-09-12 22:44:08,371 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 22:44:08,371 INFO L93 Difference]: Finished difference Result 224 states and 282 transitions. [2024-09-12 22:44:08,372 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2024-09-12 22:44:08,372 INFO L78 Accepts]: Start accepts. Automaton has has 60 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 57 states have internal predecessors, (78), 11 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (8), 8 states have call predecessors, (8), 7 states have call successors, (8) Word has length 41 [2024-09-12 22:44:08,372 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 22:44:08,374 INFO L225 Difference]: With dead ends: 224 [2024-09-12 22:44:08,374 INFO L226 Difference]: Without dead ends: 222 [2024-09-12 22:44:08,375 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 50 SyntacticMatches, 2 SemanticMatches, 88 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 795 ImplicationChecksByTransitivity, 9.2s TimeCoverageRelationStatistics Valid=1321, Invalid=6689, Unknown=0, NotChecked=0, Total=8010 [2024-09-12 22:44:08,376 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 282 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 1423 mSolverCounterSat, 158 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 282 SdHoareTripleChecker+Valid, 79 SdHoareTripleChecker+Invalid, 1581 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 158 IncrementalHoareTripleChecker+Valid, 1423 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2024-09-12 22:44:08,376 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [282 Valid, 79 Invalid, 1581 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [158 Valid, 1423 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2024-09-12 22:44:08,376 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 222 states. [2024-09-12 22:44:08,486 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 222 to 212. [2024-09-12 22:44:08,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 212 states, 153 states have (on average 1.1699346405228759) internal successors, (179), 168 states have internal predecessors, (179), 46 states have call successors, (46), 13 states have call predecessors, (46), 12 states have return successors, (45), 30 states have call predecessors, (45), 45 states have call successors, (45) [2024-09-12 22:44:08,488 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 212 states to 212 states and 270 transitions. [2024-09-12 22:44:08,489 INFO L78 Accepts]: Start accepts. Automaton has 212 states and 270 transitions. Word has length 41 [2024-09-12 22:44:08,489 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 22:44:08,489 INFO L474 AbstractCegarLoop]: Abstraction has 212 states and 270 transitions. [2024-09-12 22:44:08,489 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 60 states, 59 states have (on average 1.3220338983050848) internal successors, (78), 57 states have internal predecessors, (78), 11 states have call successors, (13), 5 states have call predecessors, (13), 2 states have return successors, (8), 8 states have call predecessors, (8), 7 states have call successors, (8) [2024-09-12 22:44:08,490 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:44:08,490 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 270 transitions. [2024-09-12 22:44:08,491 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2024-09-12 22:44:08,491 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:44:08,491 INFO L216 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:44:08,504 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2024-09-12 22:44:08,695 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:44:08,695 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:44:08,695 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:44:08,695 INFO L85 PathProgramCache]: Analyzing trace with hash 1054157638, now seen corresponding path program 5 times [2024-09-12 22:44:08,695 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:44:08,695 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1980778104] [2024-09-12 22:44:08,695 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:44:08,696 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:44:08,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:09,365 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:44:09,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:09,401 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2024-09-12 22:44:09,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:09,405 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2024-09-12 22:44:09,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:09,408 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 26 [2024-09-12 22:44:09,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:09,413 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2024-09-12 22:44:09,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:09,417 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 12 proven. 28 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-09-12 22:44:09,418 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:44:09,418 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1980778104] [2024-09-12 22:44:09,418 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1980778104] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 22:44:09,418 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [488210011] [2024-09-12 22:44:09,418 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-12 22:44:09,418 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:44:09,418 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:44:09,420 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 22:44:09,421 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-12 22:44:09,508 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 5 check-sat command(s) [2024-09-12 22:44:09,508 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 22:44:09,509 INFO L262 TraceCheckSpWp]: Trace formula consists of 138 conjuncts, 26 conjuncts are in the unsatisfiable core [2024-09-12 22:44:09,511 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 22:44:09,998 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 8 proven. 32 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-09-12 22:44:09,998 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 22:44:11,189 INFO L134 CoverageAnalysis]: Checked inductivity of 64 backedges. 8 proven. 32 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-09-12 22:44:11,189 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [488210011] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 22:44:11,189 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 22:44:11,189 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 14, 14] total 38 [2024-09-12 22:44:11,189 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2022012683] [2024-09-12 22:44:11,189 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 22:44:11,190 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-12 22:44:11,190 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:44:11,190 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-12 22:44:11,191 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=119, Invalid=1287, Unknown=0, NotChecked=0, Total=1406 [2024-09-12 22:44:11,191 INFO L87 Difference]: Start difference. First operand 212 states and 270 transitions. Second operand has 38 states, 37 states have (on average 1.5405405405405406) internal successors, (57), 36 states have internal predecessors, (57), 17 states have call successors, (19), 5 states have call predecessors, (19), 2 states have return successors, (14), 14 states have call predecessors, (14), 13 states have call successors, (14) [2024-09-12 22:44:18,337 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 22:44:18,337 INFO L93 Difference]: Finished difference Result 253 states and 315 transitions. [2024-09-12 22:44:18,337 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2024-09-12 22:44:18,338 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 37 states have (on average 1.5405405405405406) internal successors, (57), 36 states have internal predecessors, (57), 17 states have call successors, (19), 5 states have call predecessors, (19), 2 states have return successors, (14), 14 states have call predecessors, (14), 13 states have call successors, (14) Word has length 44 [2024-09-12 22:44:18,338 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 22:44:18,340 INFO L225 Difference]: With dead ends: 253 [2024-09-12 22:44:18,340 INFO L226 Difference]: Without dead ends: 224 [2024-09-12 22:44:18,341 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 140 GetRequests, 74 SyntacticMatches, 2 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 568 ImplicationChecksByTransitivity, 7.2s TimeCoverageRelationStatistics Valid=662, Invalid=3628, Unknown=0, NotChecked=0, Total=4290 [2024-09-12 22:44:18,342 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 129 mSDsluCounter, 77 mSDsCounter, 0 mSdLazyCounter, 752 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 129 SdHoareTripleChecker+Valid, 80 SdHoareTripleChecker+Invalid, 817 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 752 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2024-09-12 22:44:18,342 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [129 Valid, 80 Invalid, 817 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 752 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2024-09-12 22:44:18,342 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 224 states. [2024-09-12 22:44:18,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 224 to 222. [2024-09-12 22:44:18,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 222 states, 160 states have (on average 1.15625) internal successors, (185), 174 states have internal predecessors, (185), 48 states have call successors, (48), 14 states have call predecessors, (48), 13 states have return successors, (47), 33 states have call predecessors, (47), 47 states have call successors, (47) [2024-09-12 22:44:18,447 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 222 states to 222 states and 280 transitions. [2024-09-12 22:44:18,447 INFO L78 Accepts]: Start accepts. Automaton has 222 states and 280 transitions. Word has length 44 [2024-09-12 22:44:18,447 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 22:44:18,447 INFO L474 AbstractCegarLoop]: Abstraction has 222 states and 280 transitions. [2024-09-12 22:44:18,448 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 37 states have (on average 1.5405405405405406) internal successors, (57), 36 states have internal predecessors, (57), 17 states have call successors, (19), 5 states have call predecessors, (19), 2 states have return successors, (14), 14 states have call predecessors, (14), 13 states have call successors, (14) [2024-09-12 22:44:18,448 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:44:18,448 INFO L276 IsEmpty]: Start isEmpty. Operand 222 states and 280 transitions. [2024-09-12 22:44:18,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2024-09-12 22:44:18,449 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:44:18,449 INFO L216 NwaCegarLoop]: trace histogram [9, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:44:18,463 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2024-09-12 22:44:18,653 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:44:18,653 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:44:18,654 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:44:18,654 INFO L85 PathProgramCache]: Analyzing trace with hash 1495655394, now seen corresponding path program 6 times [2024-09-12 22:44:18,654 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:44:18,654 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [388142531] [2024-09-12 22:44:18,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:44:18,654 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:44:18,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:19,413 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:44:19,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:19,450 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2024-09-12 22:44:19,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:19,453 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2024-09-12 22:44:19,453 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:19,455 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2024-09-12 22:44:19,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:19,457 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 6 proven. 60 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-12 22:44:19,457 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:44:19,457 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [388142531] [2024-09-12 22:44:19,457 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [388142531] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 22:44:19,458 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1363842553] [2024-09-12 22:44:19,458 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-09-12 22:44:19,458 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:44:19,458 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:44:19,459 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 22:44:19,461 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-12 22:44:19,605 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 6 check-sat command(s) [2024-09-12 22:44:19,605 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 22:44:19,610 INFO L262 TraceCheckSpWp]: Trace formula consists of 154 conjuncts, 57 conjuncts are in the unsatisfiable core [2024-09-12 22:44:19,612 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 22:44:20,206 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 8 proven. 64 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-09-12 22:44:20,206 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 22:44:21,097 INFO L134 CoverageAnalysis]: Checked inductivity of 78 backedges. 6 proven. 60 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-12 22:44:21,097 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1363842553] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 22:44:21,097 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 22:44:21,097 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 19, 17] total 49 [2024-09-12 22:44:21,097 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [410763457] [2024-09-12 22:44:21,097 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 22:44:21,097 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 49 states [2024-09-12 22:44:21,098 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:44:21,098 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 49 interpolants. [2024-09-12 22:44:21,099 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=358, Invalid=1994, Unknown=0, NotChecked=0, Total=2352 [2024-09-12 22:44:21,099 INFO L87 Difference]: Start difference. First operand 222 states and 280 transitions. Second operand has 49 states, 48 states have (on average 1.5) internal successors, (72), 47 states have internal predecessors, (72), 14 states have call successors, (16), 5 states have call predecessors, (16), 3 states have return successors, (11), 11 states have call predecessors, (11), 10 states have call successors, (11) [2024-09-12 22:44:24,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 22:44:24,224 INFO L93 Difference]: Finished difference Result 256 states and 320 transitions. [2024-09-12 22:44:24,224 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2024-09-12 22:44:24,225 INFO L78 Accepts]: Start accepts. Automaton has has 49 states, 48 states have (on average 1.5) internal successors, (72), 47 states have internal predecessors, (72), 14 states have call successors, (16), 5 states have call predecessors, (16), 3 states have return successors, (11), 11 states have call predecessors, (11), 10 states have call successors, (11) Word has length 43 [2024-09-12 22:44:24,225 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 22:44:24,226 INFO L225 Difference]: With dead ends: 256 [2024-09-12 22:44:24,227 INFO L226 Difference]: Without dead ends: 254 [2024-09-12 22:44:24,228 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 138 GetRequests, 65 SyntacticMatches, 0 SemanticMatches, 73 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 654 ImplicationChecksByTransitivity, 3.8s TimeCoverageRelationStatistics Valid=894, Invalid=4656, Unknown=0, NotChecked=0, Total=5550 [2024-09-12 22:44:24,228 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 144 mSDsluCounter, 71 mSDsCounter, 0 mSdLazyCounter, 911 mSolverCounterSat, 105 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 144 SdHoareTripleChecker+Valid, 74 SdHoareTripleChecker+Invalid, 1016 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 105 IncrementalHoareTripleChecker+Valid, 911 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-09-12 22:44:24,229 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [144 Valid, 74 Invalid, 1016 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [105 Valid, 911 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-09-12 22:44:24,229 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2024-09-12 22:44:24,345 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 241. [2024-09-12 22:44:24,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 241 states, 173 states have (on average 1.1445086705202312) internal successors, (198), 187 states have internal predecessors, (198), 53 states have call successors, (53), 15 states have call predecessors, (53), 14 states have return successors, (52), 38 states have call predecessors, (52), 52 states have call successors, (52) [2024-09-12 22:44:24,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 241 states to 241 states and 303 transitions. [2024-09-12 22:44:24,347 INFO L78 Accepts]: Start accepts. Automaton has 241 states and 303 transitions. Word has length 43 [2024-09-12 22:44:24,347 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 22:44:24,348 INFO L474 AbstractCegarLoop]: Abstraction has 241 states and 303 transitions. [2024-09-12 22:44:24,348 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 49 states, 48 states have (on average 1.5) internal successors, (72), 47 states have internal predecessors, (72), 14 states have call successors, (16), 5 states have call predecessors, (16), 3 states have return successors, (11), 11 states have call predecessors, (11), 10 states have call successors, (11) [2024-09-12 22:44:24,348 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:44:24,348 INFO L276 IsEmpty]: Start isEmpty. Operand 241 states and 303 transitions. [2024-09-12 22:44:24,349 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2024-09-12 22:44:24,349 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:44:24,350 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:44:24,364 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2024-09-12 22:44:24,553 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2024-09-12 22:44:24,554 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:44:24,554 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:44:24,554 INFO L85 PathProgramCache]: Analyzing trace with hash -123973150, now seen corresponding path program 7 times [2024-09-12 22:44:24,554 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:44:24,554 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1323042840] [2024-09-12 22:44:24,554 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:44:24,554 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:44:24,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:30,118 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:44:30,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:30,167 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2024-09-12 22:44:30,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:30,170 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2024-09-12 22:44:30,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:30,175 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2024-09-12 22:44:30,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:30,178 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2024-09-12 22:44:30,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:30,182 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2024-09-12 22:44:30,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:30,188 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 10 proven. 55 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-12 22:44:30,191 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:44:30,191 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1323042840] [2024-09-12 22:44:30,191 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1323042840] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 22:44:30,191 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [336227954] [2024-09-12 22:44:30,191 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-09-12 22:44:30,192 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:44:30,192 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:44:30,193 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 22:44:30,195 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-09-12 22:44:30,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:44:30,347 INFO L262 TraceCheckSpWp]: Trace formula consists of 162 conjuncts, 27 conjuncts are in the unsatisfiable core [2024-09-12 22:44:30,348 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 22:44:30,851 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 15 proven. 50 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-12 22:44:30,852 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 22:44:31,652 INFO L134 CoverageAnalysis]: Checked inductivity of 105 backedges. 15 proven. 50 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-12 22:44:31,652 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [336227954] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 22:44:31,652 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 22:44:31,652 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 15, 15] total 45 [2024-09-12 22:44:31,653 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1291677812] [2024-09-12 22:44:31,653 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 22:44:31,653 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 45 states [2024-09-12 22:44:31,653 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:44:31,654 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 45 interpolants. [2024-09-12 22:44:31,654 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=180, Invalid=1799, Unknown=1, NotChecked=0, Total=1980 [2024-09-12 22:44:31,654 INFO L87 Difference]: Start difference. First operand 241 states and 303 transitions. Second operand has 45 states, 44 states have (on average 1.5681818181818181) internal successors, (69), 43 states have internal predecessors, (69), 19 states have call successors, (21), 5 states have call predecessors, (21), 2 states have return successors, (17), 17 states have call predecessors, (17), 16 states have call successors, (17) [2024-09-12 22:44:40,160 WARN L293 SmtUtils]: Spent 8.05s on a formula simplification. DAG size of input: 75 DAG size of output: 49 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:44:48,417 WARN L293 SmtUtils]: Spent 8.06s on a formula simplification. DAG size of input: 67 DAG size of output: 61 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:44:56,595 WARN L293 SmtUtils]: Spent 8.04s on a formula simplification. DAG size of input: 44 DAG size of output: 40 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:45:04,821 WARN L293 SmtUtils]: Spent 8.08s on a formula simplification. DAG size of input: 47 DAG size of output: 43 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:45:13,367 WARN L293 SmtUtils]: Spent 8.03s on a formula simplification. DAG size of input: 38 DAG size of output: 34 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:45:22,908 WARN L293 SmtUtils]: Spent 8.04s on a formula simplification. DAG size of input: 47 DAG size of output: 43 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:45:23,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 22:45:23,201 INFO L93 Difference]: Finished difference Result 295 states and 357 transitions. [2024-09-12 22:45:23,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2024-09-12 22:45:23,201 INFO L78 Accepts]: Start accepts. Automaton has has 45 states, 44 states have (on average 1.5681818181818181) internal successors, (69), 43 states have internal predecessors, (69), 19 states have call successors, (21), 5 states have call predecessors, (21), 2 states have return successors, (17), 17 states have call predecessors, (17), 16 states have call successors, (17) Word has length 53 [2024-09-12 22:45:23,201 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 22:45:23,203 INFO L225 Difference]: With dead ends: 295 [2024-09-12 22:45:23,203 INFO L226 Difference]: Without dead ends: 239 [2024-09-12 22:45:23,204 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 165 GetRequests, 94 SyntacticMatches, 0 SemanticMatches, 71 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 730 ImplicationChecksByTransitivity, 55.5s TimeCoverageRelationStatistics Valid=613, Invalid=4642, Unknown=1, NotChecked=0, Total=5256 [2024-09-12 22:45:23,204 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 122 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 1784 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 122 SdHoareTripleChecker+Valid, 77 SdHoareTripleChecker+Invalid, 1822 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 1784 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.6s IncrementalHoareTripleChecker+Time [2024-09-12 22:45:23,205 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [122 Valid, 77 Invalid, 1822 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 1784 Invalid, 0 Unknown, 0 Unchecked, 1.6s Time] [2024-09-12 22:45:23,205 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 239 states. [2024-09-12 22:45:23,317 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 239 to 238. [2024-09-12 22:45:23,317 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 238 states, 172 states have (on average 1.1337209302325582) internal successors, (195), 185 states have internal predecessors, (195), 48 states have call successors, (48), 18 states have call predecessors, (48), 17 states have return successors, (47), 34 states have call predecessors, (47), 47 states have call successors, (47) [2024-09-12 22:45:23,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 238 states to 238 states and 290 transitions. [2024-09-12 22:45:23,319 INFO L78 Accepts]: Start accepts. Automaton has 238 states and 290 transitions. Word has length 53 [2024-09-12 22:45:23,319 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 22:45:23,319 INFO L474 AbstractCegarLoop]: Abstraction has 238 states and 290 transitions. [2024-09-12 22:45:23,320 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 45 states, 44 states have (on average 1.5681818181818181) internal successors, (69), 43 states have internal predecessors, (69), 19 states have call successors, (21), 5 states have call predecessors, (21), 2 states have return successors, (17), 17 states have call predecessors, (17), 16 states have call successors, (17) [2024-09-12 22:45:23,320 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:45:23,320 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 290 transitions. [2024-09-12 22:45:23,321 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-09-12 22:45:23,321 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:45:23,321 INFO L216 NwaCegarLoop]: trace histogram [7, 6, 6, 6, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:45:23,337 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2024-09-12 22:45:23,521 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2024-09-12 22:45:23,521 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:45:23,522 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:45:23,522 INFO L85 PathProgramCache]: Analyzing trace with hash -978711902, now seen corresponding path program 8 times [2024-09-12 22:45:23,522 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:45:23,522 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [341592890] [2024-09-12 22:45:23,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:45:23,522 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:45:23,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:45:24,716 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:45:24,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:45:24,759 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-12 22:45:24,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:45:24,763 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2024-09-12 22:45:24,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:45:24,767 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2024-09-12 22:45:24,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:45:24,771 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2024-09-12 22:45:24,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:45:24,774 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44 [2024-09-12 22:45:24,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:45:24,779 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 10 proven. 68 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-12 22:45:24,779 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:45:24,779 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [341592890] [2024-09-12 22:45:24,779 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [341592890] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 22:45:24,779 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1723015222] [2024-09-12 22:45:24,779 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-12 22:45:24,779 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:45:24,780 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:45:24,781 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 22:45:24,782 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-09-12 22:45:24,904 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-12 22:45:24,905 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 22:45:24,906 INFO L262 TraceCheckSpWp]: Trace formula consists of 172 conjuncts, 40 conjuncts are in the unsatisfiable core [2024-09-12 22:45:24,908 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 22:45:25,587 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 10 proven. 68 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-12 22:45:25,587 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 22:45:26,560 INFO L134 CoverageAnalysis]: Checked inductivity of 118 backedges. 10 proven. 68 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-12 22:45:26,561 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1723015222] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 22:45:26,561 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 22:45:26,561 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 17, 17] total 51 [2024-09-12 22:45:26,561 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1555267663] [2024-09-12 22:45:26,561 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 22:45:26,561 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2024-09-12 22:45:26,561 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:45:26,562 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2024-09-12 22:45:26,563 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=190, Invalid=2360, Unknown=0, NotChecked=0, Total=2550 [2024-09-12 22:45:26,563 INFO L87 Difference]: Start difference. First operand 238 states and 290 transitions. Second operand has 51 states, 49 states have (on average 1.530612244897959) internal successors, (75), 48 states have internal predecessors, (75), 20 states have call successors, (22), 5 states have call predecessors, (22), 2 states have return successors, (17), 17 states have call predecessors, (17), 16 states have call successors, (17) [2024-09-12 22:45:32,430 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:45:42,329 WARN L293 SmtUtils]: Spent 5.32s on a formula simplification. DAG size of input: 111 DAG size of output: 88 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:45:46,367 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:45:57,974 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:46:02,112 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:46:45,752 WARN L293 SmtUtils]: Spent 10.76s on a formula simplification. DAG size of input: 54 DAG size of output: 36 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:46:47,046 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.29s for a HTC check with result INVALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:46:51,195 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:47:17,147 WARN L293 SmtUtils]: Spent 20.12s on a formula simplification. DAG size of input: 64 DAG size of output: 64 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:47:19,415 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.22s for a HTC check with result VALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:47:56,003 WARN L293 SmtUtils]: Spent 20.61s on a formula simplification. DAG size of input: 41 DAG size of output: 33 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:48:00,006 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:48:04,117 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:48:29,799 WARN L293 SmtUtils]: Spent 13.07s on a formula simplification. DAG size of input: 54 DAG size of output: 50 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:48:30,881 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.02s for a HTC check with result VALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:48:34,882 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:49:04,798 WARN L293 SmtUtils]: Spent 11.01s on a formula simplification. DAG size of input: 42 DAG size of output: 30 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:49:08,801 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:49:12,314 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 3.51s for a HTC check with result VALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:49:14,570 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.26s for a HTC check with result VALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:49:18,597 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:49:33,608 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:49:35,049 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.40s for a HTC check with result VALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:50:03,094 WARN L293 SmtUtils]: Spent 16.71s on a formula simplification. DAG size of input: 37 DAG size of output: 33 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:50:07,115 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 3.99s for a HTC check with result VALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:50:08,913 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.78s for a HTC check with result VALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:50:34,697 WARN L293 SmtUtils]: Spent 16.05s on a formula simplification. DAG size of input: 33 DAG size of output: 33 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:50:54,688 WARN L293 SmtUtils]: Spent 12.03s on a formula simplification. DAG size of input: 29 DAG size of output: 29 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:50:58,692 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:51:13,406 WARN L293 SmtUtils]: Spent 8.02s on a formula simplification. DAG size of input: 25 DAG size of output: 25 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:51:17,415 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:51:30,865 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:51:55,060 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:52:15,786 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:52:24,216 WARN L293 SmtUtils]: Spent 5.87s on a formula simplification. DAG size of input: 56 DAG size of output: 44 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:52:29,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 22:52:29,976 INFO L93 Difference]: Finished difference Result 347 states and 423 transitions. [2024-09-12 22:52:29,977 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2024-09-12 22:52:29,977 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 49 states have (on average 1.530612244897959) internal successors, (75), 48 states have internal predecessors, (75), 20 states have call successors, (22), 5 states have call predecessors, (22), 2 states have return successors, (17), 17 states have call predecessors, (17), 16 states have call successors, (17) Word has length 55 [2024-09-12 22:52:29,979 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 22:52:29,983 INFO L225 Difference]: With dead ends: 347 [2024-09-12 22:52:29,983 INFO L226 Difference]: Without dead ends: 345 [2024-09-12 22:52:29,985 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 180 GetRequests, 92 SyntacticMatches, 7 SemanticMatches, 81 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1182 ImplicationChecksByTransitivity, 341.2s TimeCoverageRelationStatistics Valid=959, Invalid=5828, Unknown=19, NotChecked=0, Total=6806 [2024-09-12 22:52:29,986 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 340 mSDsluCounter, 91 mSDsCounter, 0 mSdLazyCounter, 1143 mSolverCounterSat, 144 mSolverCounterUnsat, 16 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 83.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 340 SdHoareTripleChecker+Valid, 94 SdHoareTripleChecker+Invalid, 1303 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 144 IncrementalHoareTripleChecker+Valid, 1143 IncrementalHoareTripleChecker+Invalid, 16 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 84.1s IncrementalHoareTripleChecker+Time [2024-09-12 22:52:29,986 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [340 Valid, 94 Invalid, 1303 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [144 Valid, 1143 Invalid, 16 Unknown, 0 Unchecked, 84.1s Time] [2024-09-12 22:52:29,987 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 345 states. [2024-09-12 22:52:30,221 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 345 to 338. [2024-09-12 22:52:30,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 338 states, 240 states have (on average 1.0958333333333334) internal successors, (263), 255 states have internal predecessors, (263), 76 states have call successors, (76), 22 states have call predecessors, (76), 21 states have return successors, (75), 60 states have call predecessors, (75), 75 states have call successors, (75) [2024-09-12 22:52:30,224 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 338 states to 338 states and 414 transitions. [2024-09-12 22:52:30,224 INFO L78 Accepts]: Start accepts. Automaton has 338 states and 414 transitions. Word has length 55 [2024-09-12 22:52:30,225 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 22:52:30,225 INFO L474 AbstractCegarLoop]: Abstraction has 338 states and 414 transitions. [2024-09-12 22:52:30,225 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 49 states have (on average 1.530612244897959) internal successors, (75), 48 states have internal predecessors, (75), 20 states have call successors, (22), 5 states have call predecessors, (22), 2 states have return successors, (17), 17 states have call predecessors, (17), 16 states have call successors, (17) [2024-09-12 22:52:30,225 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:52:30,225 INFO L276 IsEmpty]: Start isEmpty. Operand 338 states and 414 transitions. [2024-09-12 22:52:30,227 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2024-09-12 22:52:30,227 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:52:30,227 INFO L216 NwaCegarLoop]: trace histogram [9, 9, 9, 8, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:52:30,243 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2024-09-12 22:52:30,427 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,12 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:52:30,428 INFO L399 AbstractCegarLoop]: === Iteration 13 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:52:30,428 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:52:30,428 INFO L85 PathProgramCache]: Analyzing trace with hash 1899556416, now seen corresponding path program 9 times [2024-09-12 22:52:30,428 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:52:30,428 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1620716042] [2024-09-12 22:52:30,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:52:30,428 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:52:30,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:31,937 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:52:31,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:31,996 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2024-09-12 22:52:31,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:32,000 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2024-09-12 22:52:32,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:32,004 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2024-09-12 22:52:32,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:32,009 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2024-09-12 22:52:32,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:32,013 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2024-09-12 22:52:32,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:32,017 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 52 [2024-09-12 22:52:32,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:32,022 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2024-09-12 22:52:32,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:32,026 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2024-09-12 22:52:32,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:32,032 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 16 proven. 136 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-09-12 22:52:32,032 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:52:32,032 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1620716042] [2024-09-12 22:52:32,032 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1620716042] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 22:52:32,032 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1622715096] [2024-09-12 22:52:32,033 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-12 22:52:32,033 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:52:32,033 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:52:32,034 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 22:52:32,035 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-09-12 22:52:32,288 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2024-09-12 22:52:32,288 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 22:52:32,294 INFO L262 TraceCheckSpWp]: Trace formula consists of 219 conjuncts, 40 conjuncts are in the unsatisfiable core [2024-09-12 22:52:32,296 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 22:52:33,555 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 24 proven. 128 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-09-12 22:52:33,555 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 22:52:35,557 INFO L134 CoverageAnalysis]: Checked inductivity of 264 backedges. 33 proven. 119 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-09-12 22:52:35,558 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1622715096] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 22:52:35,558 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 22:52:35,558 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 22, 22] total 67 [2024-09-12 22:52:35,558 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [871716258] [2024-09-12 22:52:35,558 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 22:52:35,558 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 67 states [2024-09-12 22:52:35,558 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:52:35,559 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 67 interpolants. [2024-09-12 22:52:35,560 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=369, Invalid=4053, Unknown=0, NotChecked=0, Total=4422 [2024-09-12 22:52:35,560 INFO L87 Difference]: Start difference. First operand 338 states and 414 transitions. Second operand has 67 states, 65 states have (on average 1.476923076923077) internal successors, (96), 65 states have internal predecessors, (96), 28 states have call successors, (30), 5 states have call predecessors, (30), 2 states have return successors, (26), 26 states have call predecessors, (26), 25 states have call successors, (26) [2024-09-12 22:52:40,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 22:52:40,578 INFO L93 Difference]: Finished difference Result 371 states and 445 transitions. [2024-09-12 22:52:40,578 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 41 states. [2024-09-12 22:52:40,578 INFO L78 Accepts]: Start accepts. Automaton has has 67 states, 65 states have (on average 1.476923076923077) internal successors, (96), 65 states have internal predecessors, (96), 28 states have call successors, (30), 5 states have call predecessors, (30), 2 states have return successors, (26), 26 states have call predecessors, (26), 25 states have call successors, (26) Word has length 77 [2024-09-12 22:52:40,578 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 22:52:40,580 INFO L225 Difference]: With dead ends: 371 [2024-09-12 22:52:40,580 INFO L226 Difference]: Without dead ends: 245 [2024-09-12 22:52:40,581 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 234 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 102 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1423 ImplicationChecksByTransitivity, 5.9s TimeCoverageRelationStatistics Valid=1029, Invalid=9683, Unknown=0, NotChecked=0, Total=10712 [2024-09-12 22:52:40,582 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 106 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 3548 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 106 SdHoareTripleChecker+Valid, 115 SdHoareTripleChecker+Invalid, 3575 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 3548 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.6s IncrementalHoareTripleChecker+Time [2024-09-12 22:52:40,582 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [106 Valid, 115 Invalid, 3575 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 3548 Invalid, 0 Unknown, 0 Unchecked, 2.6s Time] [2024-09-12 22:52:40,583 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 245 states. [2024-09-12 22:52:40,712 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 245 to 245. [2024-09-12 22:52:40,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 245 states, 176 states have (on average 1.1136363636363635) internal successors, (196), 188 states have internal predecessors, (196), 53 states have call successors, (53), 16 states have call predecessors, (53), 15 states have return successors, (52), 40 states have call predecessors, (52), 52 states have call successors, (52) [2024-09-12 22:52:40,714 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 245 states to 245 states and 301 transitions. [2024-09-12 22:52:40,715 INFO L78 Accepts]: Start accepts. Automaton has 245 states and 301 transitions. Word has length 77 [2024-09-12 22:52:40,715 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 22:52:40,715 INFO L474 AbstractCegarLoop]: Abstraction has 245 states and 301 transitions. [2024-09-12 22:52:40,715 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 67 states, 65 states have (on average 1.476923076923077) internal successors, (96), 65 states have internal predecessors, (96), 28 states have call successors, (30), 5 states have call predecessors, (30), 2 states have return successors, (26), 26 states have call predecessors, (26), 25 states have call successors, (26) [2024-09-12 22:52:40,715 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:52:40,715 INFO L276 IsEmpty]: Start isEmpty. Operand 245 states and 301 transitions. [2024-09-12 22:52:40,717 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 79 [2024-09-12 22:52:40,717 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 22:52:40,717 INFO L216 NwaCegarLoop]: trace histogram [9, 9, 9, 9, 8, 8, 8, 8, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 22:52:40,735 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2024-09-12 22:52:40,921 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2024-09-12 22:52:40,922 INFO L399 AbstractCegarLoop]: === Iteration 14 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 22:52:40,922 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 22:52:40,922 INFO L85 PathProgramCache]: Analyzing trace with hash 96856582, now seen corresponding path program 10 times [2024-09-12 22:52:40,922 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 22:52:40,922 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [221843541] [2024-09-12 22:52:40,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 22:52:40,922 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 22:52:40,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:42,298 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 22:52:42,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:42,338 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2024-09-12 22:52:42,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:42,342 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2024-09-12 22:52:42,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:42,345 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32 [2024-09-12 22:52:42,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:42,355 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 39 [2024-09-12 22:52:42,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:42,360 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2024-09-12 22:52:42,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:42,364 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 53 [2024-09-12 22:52:42,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:42,368 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2024-09-12 22:52:42,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:42,373 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2024-09-12 22:52:42,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 22:52:42,379 INFO L134 CoverageAnalysis]: Checked inductivity of 273 backedges. 16 proven. 145 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-09-12 22:52:42,379 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 22:52:42,379 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [221843541] [2024-09-12 22:52:42,379 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [221843541] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 22:52:42,379 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [966601605] [2024-09-12 22:52:42,380 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-12 22:52:42,380 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 22:52:42,380 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 22:52:42,382 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 22:52:42,383 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2024-09-12 22:52:42,554 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-12 22:52:42,554 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 22:52:42,556 INFO L262 TraceCheckSpWp]: Trace formula consists of 224 conjuncts, 61 conjuncts are in the unsatisfiable core [2024-09-12 22:52:42,558 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 22:52:43,974 INFO L134 CoverageAnalysis]: Checked inductivity of 273 backedges. 16 proven. 145 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-09-12 22:52:43,974 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 22:52:45,950 INFO L134 CoverageAnalysis]: Checked inductivity of 273 backedges. 16 proven. 145 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-09-12 22:52:45,950 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [966601605] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 22:52:45,951 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 22:52:45,951 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [28, 23, 23] total 68 [2024-09-12 22:52:45,951 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [130506367] [2024-09-12 22:52:45,951 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 22:52:45,951 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 68 states [2024-09-12 22:52:45,951 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 22:52:45,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 68 interpolants. [2024-09-12 22:52:45,953 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=377, Invalid=4179, Unknown=0, NotChecked=0, Total=4556 [2024-09-12 22:52:45,953 INFO L87 Difference]: Start difference. First operand 245 states and 301 transitions. Second operand has 68 states, 66 states have (on average 1.5) internal successors, (99), 65 states have internal predecessors, (99), 29 states have call successors, (31), 5 states have call predecessors, (31), 2 states have return successors, (26), 26 states have call predecessors, (26), 25 states have call successors, (26) [2024-09-12 22:55:22,079 WARN L293 SmtUtils]: Spent 2.43m on a formula simplification. DAG size of input: 107 DAG size of output: 108 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 22:55:26,222 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:55:30,231 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:55:34,297 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] [2024-09-12 22:55:37,031 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.70s for a HTC check with result INVALID. Formula has sorts [Bool, Int], hasArrays=false, hasNonlinArith=false, quantifiers [] Killed by 15