./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/loops/vogal-1.i --full-output --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5189fb62 Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/loops/vogal-1.i -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0004a4c1c8347096eaba7e87038be30bb20b14d3b5abd082e79b4b4e835a243e --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --- Real Ultimate output --- This is Ultimate 0.2.4-dev-5189fb6-m [2024-09-12 21:13:15,152 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-12 21:13:15,227 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-12 21:13:15,232 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-12 21:13:15,235 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-12 21:13:15,257 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-12 21:13:15,257 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-12 21:13:15,258 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-12 21:13:15,258 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-12 21:13:15,259 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-12 21:13:15,260 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-12 21:13:15,260 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-12 21:13:15,260 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-12 21:13:15,261 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-12 21:13:15,261 INFO L153 SettingsManager]: * Use SBE=true [2024-09-12 21:13:15,263 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-12 21:13:15,263 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-12 21:13:15,263 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-12 21:13:15,263 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-12 21:13:15,264 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-12 21:13:15,264 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-12 21:13:15,264 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-12 21:13:15,264 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-12 21:13:15,264 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-12 21:13:15,264 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-12 21:13:15,265 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-12 21:13:15,265 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-12 21:13:15,265 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-12 21:13:15,265 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-12 21:13:15,265 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-12 21:13:15,265 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-12 21:13:15,265 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-12 21:13:15,265 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-12 21:13:15,266 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-12 21:13:15,266 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-12 21:13:15,266 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-12 21:13:15,266 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-12 21:13:15,266 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-12 21:13:15,266 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-12 21:13:15,266 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-12 21:13:15,266 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-12 21:13:15,268 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-12 21:13:15,268 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0004a4c1c8347096eaba7e87038be30bb20b14d3b5abd082e79b4b4e835a243e Applying setting for plugin de.uni_freiburg.informatik.ultimate.boogie.procedureinliner: Inline calls to implemented procedures -> NEVER Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 [2024-09-12 21:13:15,473 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-12 21:13:15,494 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-12 21:13:15,498 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-12 21:13:15,499 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-12 21:13:15,499 INFO L274 PluginConnector]: CDTParser initialized [2024-09-12 21:13:15,500 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/loops/vogal-1.i [2024-09-12 21:13:16,696 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-12 21:13:16,862 INFO L384 CDTParser]: Found 1 translation units. [2024-09-12 21:13:16,864 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/vogal-1.i [2024-09-12 21:13:16,871 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/04898ec70/fd461c31215943b7b6532474d1950e94/FLAG8bbaf9d51 [2024-09-12 21:13:16,884 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/04898ec70/fd461c31215943b7b6532474d1950e94 [2024-09-12 21:13:16,887 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-12 21:13:16,889 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-12 21:13:16,890 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-12 21:13:16,891 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-12 21:13:16,895 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-12 21:13:16,896 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.09 09:13:16" (1/1) ... [2024-09-12 21:13:16,898 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2205dea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:16, skipping insertion in model container [2024-09-12 21:13:16,898 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.09 09:13:16" (1/1) ... [2024-09-12 21:13:16,916 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-12 21:13:17,049 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/vogal-1.i[895,908] [2024-09-12 21:13:17,069 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-12 21:13:17,076 INFO L200 MainTranslator]: Completed pre-run [2024-09-12 21:13:17,094 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/vogal-1.i[895,908] [2024-09-12 21:13:17,112 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-12 21:13:17,128 INFO L204 MainTranslator]: Completed translation [2024-09-12 21:13:17,129 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17 WrapperNode [2024-09-12 21:13:17,129 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-12 21:13:17,130 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-12 21:13:17,130 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-12 21:13:17,130 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-12 21:13:17,136 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17" (1/1) ... [2024-09-12 21:13:17,146 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17" (1/1) ... [2024-09-12 21:13:17,155 INFO L138 Inliner]: procedures = 17, calls = 34, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2024-09-12 21:13:17,155 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-12 21:13:17,155 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-12 21:13:17,155 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-12 21:13:17,156 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-12 21:13:17,164 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17" (1/1) ... [2024-09-12 21:13:17,164 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17" (1/1) ... [2024-09-12 21:13:17,167 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17" (1/1) ... [2024-09-12 21:13:17,187 INFO L175 MemorySlicer]: Split 21 memory accesses to 3 slices as follows [2, 13, 6]. 62 percent of accesses are in the largest equivalence class. The 13 initializations are split as follows [2, 11, 0]. The 1 writes are split as follows [0, 0, 1]. [2024-09-12 21:13:17,188 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17" (1/1) ... [2024-09-12 21:13:17,188 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17" (1/1) ... [2024-09-12 21:13:17,194 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17" (1/1) ... [2024-09-12 21:13:17,201 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17" (1/1) ... [2024-09-12 21:13:17,202 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17" (1/1) ... [2024-09-12 21:13:17,203 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17" (1/1) ... [2024-09-12 21:13:17,205 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-12 21:13:17,209 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-12 21:13:17,209 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-12 21:13:17,209 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-12 21:13:17,210 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17" (1/1) ... [2024-09-12 21:13:17,214 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-12 21:13:17,225 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:17,239 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-12 21:13:17,246 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-12 21:13:17,277 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-12 21:13:17,277 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-09-12 21:13:17,278 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-09-12 21:13:17,278 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-12 21:13:17,278 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-12 21:13:17,278 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-09-12 21:13:17,278 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-09-12 21:13:17,279 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-09-12 21:13:17,279 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-09-12 21:13:17,280 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-09-12 21:13:17,280 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-09-12 21:13:17,280 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-09-12 21:13:17,280 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-12 21:13:17,280 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-12 21:13:17,280 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-09-12 21:13:17,280 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-09-12 21:13:17,281 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-09-12 21:13:17,281 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-12 21:13:17,281 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-12 21:13:17,281 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-09-12 21:13:17,343 INFO L242 CfgBuilder]: Building ICFG [2024-09-12 21:13:17,344 INFO L268 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-12 21:13:17,537 INFO L? ?]: Removed 12 outVars from TransFormulas that were not future-live. [2024-09-12 21:13:17,537 INFO L291 CfgBuilder]: Performing block encoding [2024-09-12 21:13:17,563 INFO L313 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-12 21:13:17,563 INFO L318 CfgBuilder]: Removed 6 assume(true) statements. [2024-09-12 21:13:17,563 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.09 09:13:17 BoogieIcfgContainer [2024-09-12 21:13:17,563 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-12 21:13:17,565 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-12 21:13:17,565 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-12 21:13:17,567 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-12 21:13:17,568 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.09 09:13:16" (1/3) ... [2024-09-12 21:13:17,568 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@72dc17e1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.09 09:13:17, skipping insertion in model container [2024-09-12 21:13:17,568 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.09 09:13:17" (2/3) ... [2024-09-12 21:13:17,568 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@72dc17e1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.09 09:13:17, skipping insertion in model container [2024-09-12 21:13:17,568 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.09 09:13:17" (3/3) ... [2024-09-12 21:13:17,569 INFO L112 eAbstractionObserver]: Analyzing ICFG vogal-1.i [2024-09-12 21:13:17,581 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-12 21:13:17,581 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-12 21:13:17,624 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-12 21:13:17,629 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3c66c7f, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-12 21:13:17,629 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-12 21:13:17,634 INFO L276 IsEmpty]: Start isEmpty. Operand has 35 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 28 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-12 21:13:17,642 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-09-12 21:13:17,642 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:17,642 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:17,643 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:17,648 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:17,648 INFO L85 PathProgramCache]: Analyzing trace with hash -1308321975, now seen corresponding path program 1 times [2024-09-12 21:13:17,655 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:17,656 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1498536618] [2024-09-12 21:13:17,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:17,656 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:17,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:17,771 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:17,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:17,781 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 21:13:17,782 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:17,782 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1498536618] [2024-09-12 21:13:17,783 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1498536618] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-12 21:13:17,783 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-12 21:13:17,783 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-09-12 21:13:17,784 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [97520669] [2024-09-12 21:13:17,785 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-12 21:13:17,788 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-09-12 21:13:17,788 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:17,807 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-09-12 21:13:17,807 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-12 21:13:17,809 INFO L87 Difference]: Start difference. First operand has 35 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 28 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:17,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:17,829 INFO L93 Difference]: Finished difference Result 64 states and 93 transitions. [2024-09-12 21:13:17,840 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-09-12 21:13:17,841 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2024-09-12 21:13:17,841 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:17,845 INFO L225 Difference]: With dead ends: 64 [2024-09-12 21:13:17,845 INFO L226 Difference]: Without dead ends: 28 [2024-09-12 21:13:17,847 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-12 21:13:17,850 INFO L434 NwaCegarLoop]: 41 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 2 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:17,850 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 41 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 2 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-12 21:13:17,872 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28 states. [2024-09-12 21:13:17,909 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28 to 28. [2024-09-12 21:13:17,910 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 23 states have (on average 1.3478260869565217) internal successors, (31), 23 states have internal predecessors, (31), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:17,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 35 transitions. [2024-09-12 21:13:17,913 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 35 transitions. Word has length 17 [2024-09-12 21:13:17,913 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:17,914 INFO L474 AbstractCegarLoop]: Abstraction has 28 states and 35 transitions. [2024-09-12 21:13:17,914 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:17,916 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:17,917 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 35 transitions. [2024-09-12 21:13:17,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2024-09-12 21:13:17,917 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:17,918 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:17,918 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-12 21:13:17,918 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:17,919 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:17,919 INFO L85 PathProgramCache]: Analyzing trace with hash 516425503, now seen corresponding path program 1 times [2024-09-12 21:13:17,919 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:17,919 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [471342328] [2024-09-12 21:13:17,919 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:17,919 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:17,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:18,069 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:18,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:18,074 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 21:13:18,074 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:18,074 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [471342328] [2024-09-12 21:13:18,074 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [471342328] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-12 21:13:18,074 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-12 21:13:18,074 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-09-12 21:13:18,074 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [387030363] [2024-09-12 21:13:18,075 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-12 21:13:18,076 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-09-12 21:13:18,076 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:18,077 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-09-12 21:13:18,077 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-12 21:13:18,077 INFO L87 Difference]: Start difference. First operand 28 states and 35 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:18,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:18,122 INFO L93 Difference]: Finished difference Result 63 states and 83 transitions. [2024-09-12 21:13:18,123 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-09-12 21:13:18,124 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 19 [2024-09-12 21:13:18,124 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:18,125 INFO L225 Difference]: With dead ends: 63 [2024-09-12 21:13:18,125 INFO L226 Difference]: Without dead ends: 41 [2024-09-12 21:13:18,126 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-12 21:13:18,126 INFO L434 NwaCegarLoop]: 26 mSDtfsCounter, 14 mSDsluCounter, 22 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:18,127 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 48 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-12 21:13:18,128 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41 states. [2024-09-12 21:13:18,131 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41 to 29. [2024-09-12 21:13:18,131 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 24 states have (on average 1.3333333333333333) internal successors, (32), 24 states have internal predecessors, (32), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:18,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 36 transitions. [2024-09-12 21:13:18,132 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 36 transitions. Word has length 19 [2024-09-12 21:13:18,132 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:18,132 INFO L474 AbstractCegarLoop]: Abstraction has 29 states and 36 transitions. [2024-09-12 21:13:18,132 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:18,133 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:18,133 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 36 transitions. [2024-09-12 21:13:18,133 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2024-09-12 21:13:18,133 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:18,133 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:18,133 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-09-12 21:13:18,134 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:18,134 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:18,134 INFO L85 PathProgramCache]: Analyzing trace with hash 22246406, now seen corresponding path program 1 times [2024-09-12 21:13:18,134 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:18,134 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [224633601] [2024-09-12 21:13:18,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:18,134 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:18,153 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:18,271 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:18,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:18,275 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-12 21:13:18,275 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:18,275 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [224633601] [2024-09-12 21:13:18,275 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [224633601] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:18,275 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1745911868] [2024-09-12 21:13:18,276 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:18,276 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:18,276 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:18,277 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:13:18,279 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-12 21:13:18,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:18,332 INFO L262 TraceCheckSpWp]: Trace formula consists of 118 conjuncts, 12 conjuncts are in the unsatisfiable core [2024-09-12 21:13:18,336 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:13:18,399 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-12 21:13:18,400 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-12 21:13:18,400 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1745911868] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-12 21:13:18,400 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-12 21:13:18,400 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [4] total 8 [2024-09-12 21:13:18,401 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [854878341] [2024-09-12 21:13:18,401 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-12 21:13:18,401 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-09-12 21:13:18,401 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:18,402 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-09-12 21:13:18,402 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-09-12 21:13:18,402 INFO L87 Difference]: Start difference. First operand 29 states and 36 transitions. Second operand has 6 states, 6 states have (on average 2.6666666666666665) internal successors, (16), 5 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:18,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:18,450 INFO L93 Difference]: Finished difference Result 53 states and 68 transitions. [2024-09-12 21:13:18,450 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-12 21:13:18,450 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 2.6666666666666665) internal successors, (16), 5 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2024-09-12 21:13:18,451 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:18,451 INFO L225 Difference]: With dead ends: 53 [2024-09-12 21:13:18,451 INFO L226 Difference]: Without dead ends: 48 [2024-09-12 21:13:18,452 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2024-09-12 21:13:18,452 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 28 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:18,453 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 138 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-12 21:13:18,453 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2024-09-12 21:13:18,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 41. [2024-09-12 21:13:18,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 36 states have (on average 1.3611111111111112) internal successors, (49), 36 states have internal predecessors, (49), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:18,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 53 transitions. [2024-09-12 21:13:18,461 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 53 transitions. Word has length 20 [2024-09-12 21:13:18,461 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:18,462 INFO L474 AbstractCegarLoop]: Abstraction has 41 states and 53 transitions. [2024-09-12 21:13:18,462 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 2.6666666666666665) internal successors, (16), 5 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:18,462 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:18,462 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 53 transitions. [2024-09-12 21:13:18,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2024-09-12 21:13:18,464 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:18,464 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:18,478 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-09-12 21:13:18,664 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:18,665 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:18,665 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:18,666 INFO L85 PathProgramCache]: Analyzing trace with hash 260967679, now seen corresponding path program 1 times [2024-09-12 21:13:18,666 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:18,666 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1752459094] [2024-09-12 21:13:18,666 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:18,666 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:18,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:18,795 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:18,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:18,798 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-12 21:13:18,798 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:18,798 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1752459094] [2024-09-12 21:13:18,799 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1752459094] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:18,799 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [965812665] [2024-09-12 21:13:18,799 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:18,799 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:18,799 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:18,802 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:13:18,803 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-12 21:13:18,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:18,866 INFO L262 TraceCheckSpWp]: Trace formula consists of 137 conjuncts, 7 conjuncts are in the unsatisfiable core [2024-09-12 21:13:18,868 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:13:18,888 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-12 21:13:18,889 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-12 21:13:18,889 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [965812665] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-12 21:13:18,889 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-12 21:13:18,891 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 6 [2024-09-12 21:13:18,891 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1510674111] [2024-09-12 21:13:18,891 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-12 21:13:18,891 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-09-12 21:13:18,891 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:18,892 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-09-12 21:13:18,892 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2024-09-12 21:13:18,892 INFO L87 Difference]: Start difference. First operand 41 states and 53 transitions. Second operand has 4 states, 4 states have (on average 5.5) internal successors, (22), 4 states have internal predecessors, (22), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:18,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:18,941 INFO L93 Difference]: Finished difference Result 74 states and 98 transitions. [2024-09-12 21:13:18,941 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-09-12 21:13:18,942 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.5) internal successors, (22), 4 states have internal predecessors, (22), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2024-09-12 21:13:18,942 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:18,942 INFO L225 Difference]: With dead ends: 74 [2024-09-12 21:13:18,943 INFO L226 Difference]: Without dead ends: 45 [2024-09-12 21:13:18,943 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2024-09-12 21:13:18,944 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 0 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 76 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:18,944 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 76 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-12 21:13:18,944 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2024-09-12 21:13:18,948 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2024-09-12 21:13:18,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 40 states have (on average 1.35) internal successors, (54), 40 states have internal predecessors, (54), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:18,949 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 58 transitions. [2024-09-12 21:13:18,950 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 58 transitions. Word has length 26 [2024-09-12 21:13:18,950 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:18,950 INFO L474 AbstractCegarLoop]: Abstraction has 45 states and 58 transitions. [2024-09-12 21:13:18,950 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.5) internal successors, (22), 4 states have internal predecessors, (22), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:18,950 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:18,951 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 58 transitions. [2024-09-12 21:13:18,951 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2024-09-12 21:13:18,952 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:18,952 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:18,968 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-09-12 21:13:19,155 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:19,156 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:19,156 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:19,157 INFO L85 PathProgramCache]: Analyzing trace with hash 1671267723, now seen corresponding path program 1 times [2024-09-12 21:13:19,157 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:19,158 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2048742359] [2024-09-12 21:13:19,158 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:19,158 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:19,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:19,260 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:19,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:19,263 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-09-12 21:13:19,263 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:19,267 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2048742359] [2024-09-12 21:13:19,267 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2048742359] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:19,267 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1504102421] [2024-09-12 21:13:19,267 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:19,267 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:19,267 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:19,269 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:13:19,271 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-12 21:13:19,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:19,326 INFO L262 TraceCheckSpWp]: Trace formula consists of 139 conjuncts, 18 conjuncts are in the unsatisfiable core [2024-09-12 21:13:19,327 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:13:19,439 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-12 21:13:19,439 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:13:19,594 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-12 21:13:19,595 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 46 treesize of output 30 [2024-09-12 21:13:19,619 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-12 21:13:19,619 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1504102421] provided 1 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:19,619 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-09-12 21:13:19,619 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [4, 9] total 15 [2024-09-12 21:13:19,619 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1711810152] [2024-09-12 21:13:19,619 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-12 21:13:19,620 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-09-12 21:13:19,620 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:19,621 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-09-12 21:13:19,621 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2024-09-12 21:13:19,621 INFO L87 Difference]: Start difference. First operand 45 states and 58 transitions. Second operand has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:19,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:19,751 INFO L93 Difference]: Finished difference Result 65 states and 82 transitions. [2024-09-12 21:13:19,751 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-09-12 21:13:19,752 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 27 [2024-09-12 21:13:19,752 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:19,752 INFO L225 Difference]: With dead ends: 65 [2024-09-12 21:13:19,752 INFO L226 Difference]: Without dead ends: 43 [2024-09-12 21:13:19,753 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=79, Invalid=301, Unknown=0, NotChecked=0, Total=380 [2024-09-12 21:13:19,753 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 8 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:19,753 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 123 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-12 21:13:19,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2024-09-12 21:13:19,760 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2024-09-12 21:13:19,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 38 states have (on average 1.3421052631578947) internal successors, (51), 38 states have internal predecessors, (51), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:19,761 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 55 transitions. [2024-09-12 21:13:19,761 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 55 transitions. Word has length 27 [2024-09-12 21:13:19,761 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:19,762 INFO L474 AbstractCegarLoop]: Abstraction has 43 states and 55 transitions. [2024-09-12 21:13:19,762 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:19,762 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:19,762 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 55 transitions. [2024-09-12 21:13:19,764 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2024-09-12 21:13:19,764 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:19,765 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:19,780 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-09-12 21:13:19,967 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:19,968 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:19,969 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:19,969 INFO L85 PathProgramCache]: Analyzing trace with hash -400223430, now seen corresponding path program 1 times [2024-09-12 21:13:19,969 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:19,969 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [229549274] [2024-09-12 21:13:19,970 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:19,970 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:19,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:20,039 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:20,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:20,044 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-12 21:13:20,045 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:20,046 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [229549274] [2024-09-12 21:13:20,046 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [229549274] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:20,046 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1999594038] [2024-09-12 21:13:20,046 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:20,046 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:20,046 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:20,049 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:13:20,050 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-12 21:13:20,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:20,106 INFO L262 TraceCheckSpWp]: Trace formula consists of 144 conjuncts, 20 conjuncts are in the unsatisfiable core [2024-09-12 21:13:20,107 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:13:20,200 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-12 21:13:20,206 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-12 21:13:20,207 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:13:20,294 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-12 21:13:20,294 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 47 treesize of output 31 [2024-09-12 21:13:20,316 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-09-12 21:13:20,316 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1999594038] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:13:20,316 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:13:20,317 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 9, 7] total 15 [2024-09-12 21:13:20,317 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [899446463] [2024-09-12 21:13:20,317 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:13:20,317 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-09-12 21:13:20,317 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:20,318 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-09-12 21:13:20,318 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2024-09-12 21:13:20,318 INFO L87 Difference]: Start difference. First operand 43 states and 55 transitions. Second operand has 15 states, 15 states have (on average 4.133333333333334) internal successors, (62), 15 states have internal predecessors, (62), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:20,488 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:20,489 INFO L93 Difference]: Finished difference Result 124 states and 169 transitions. [2024-09-12 21:13:20,489 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-09-12 21:13:20,490 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 4.133333333333334) internal successors, (62), 15 states have internal predecessors, (62), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2024-09-12 21:13:20,490 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:20,491 INFO L225 Difference]: With dead ends: 124 [2024-09-12 21:13:20,492 INFO L226 Difference]: Without dead ends: 88 [2024-09-12 21:13:20,492 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=83, Invalid=259, Unknown=0, NotChecked=0, Total=342 [2024-09-12 21:13:20,493 INFO L434 NwaCegarLoop]: 23 mSDtfsCounter, 95 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:20,494 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [95 Valid, 205 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-12 21:13:20,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2024-09-12 21:13:20,507 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 46. [2024-09-12 21:13:20,508 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 41 states have (on average 1.3170731707317074) internal successors, (54), 41 states have internal predecessors, (54), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:20,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 58 transitions. [2024-09-12 21:13:20,511 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 58 transitions. Word has length 28 [2024-09-12 21:13:20,511 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:20,511 INFO L474 AbstractCegarLoop]: Abstraction has 46 states and 58 transitions. [2024-09-12 21:13:20,511 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 4.133333333333334) internal successors, (62), 15 states have internal predecessors, (62), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:20,511 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:20,512 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 58 transitions. [2024-09-12 21:13:20,512 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2024-09-12 21:13:20,512 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:20,512 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:20,526 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2024-09-12 21:13:20,712 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:20,713 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:20,713 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:20,713 INFO L85 PathProgramCache]: Analyzing trace with hash -461832489, now seen corresponding path program 1 times [2024-09-12 21:13:20,713 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:20,713 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2060370765] [2024-09-12 21:13:20,714 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:20,714 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:20,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:20,805 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:20,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:20,808 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-12 21:13:20,808 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:20,808 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2060370765] [2024-09-12 21:13:20,808 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2060370765] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:20,809 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [826306421] [2024-09-12 21:13:20,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:20,809 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:20,810 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:20,812 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:13:20,813 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-12 21:13:20,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:20,873 INFO L262 TraceCheckSpWp]: Trace formula consists of 155 conjuncts, 22 conjuncts are in the unsatisfiable core [2024-09-12 21:13:20,875 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:13:20,932 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:13:20,932 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 42 treesize of output 34 [2024-09-12 21:13:20,991 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-12 21:13:20,991 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:13:21,075 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-12 21:13:21,076 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 47 treesize of output 31 [2024-09-12 21:13:21,095 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 1 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-12 21:13:21,095 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [826306421] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:13:21,095 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:13:21,095 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 10, 9] total 18 [2024-09-12 21:13:21,095 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2126276816] [2024-09-12 21:13:21,095 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:13:21,096 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2024-09-12 21:13:21,096 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:21,096 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2024-09-12 21:13:21,096 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=252, Unknown=0, NotChecked=0, Total=306 [2024-09-12 21:13:21,097 INFO L87 Difference]: Start difference. First operand 46 states and 58 transitions. Second operand has 18 states, 18 states have (on average 2.6666666666666665) internal successors, (48), 18 states have internal predecessors, (48), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:21,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:21,411 INFO L93 Difference]: Finished difference Result 152 states and 208 transitions. [2024-09-12 21:13:21,411 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2024-09-12 21:13:21,411 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 2.6666666666666665) internal successors, (48), 18 states have internal predecessors, (48), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2024-09-12 21:13:21,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:21,412 INFO L225 Difference]: With dead ends: 152 [2024-09-12 21:13:21,412 INFO L226 Difference]: Without dead ends: 114 [2024-09-12 21:13:21,413 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 49 SyntacticMatches, 1 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 205 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=217, Invalid=775, Unknown=0, NotChecked=0, Total=992 [2024-09-12 21:13:21,413 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 323 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 182 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 323 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 182 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:21,413 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [323 Valid, 210 Invalid, 196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 182 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-12 21:13:21,414 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2024-09-12 21:13:21,434 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 48. [2024-09-12 21:13:21,435 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 43 states have (on average 1.302325581395349) internal successors, (56), 43 states have internal predecessors, (56), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:21,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 60 transitions. [2024-09-12 21:13:21,437 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 60 transitions. Word has length 30 [2024-09-12 21:13:21,437 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:21,437 INFO L474 AbstractCegarLoop]: Abstraction has 48 states and 60 transitions. [2024-09-12 21:13:21,437 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 2.6666666666666665) internal successors, (48), 18 states have internal predecessors, (48), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:21,437 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:21,437 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 60 transitions. [2024-09-12 21:13:21,439 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2024-09-12 21:13:21,439 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:21,439 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:21,452 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-09-12 21:13:21,640 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2024-09-12 21:13:21,640 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:21,640 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:21,640 INFO L85 PathProgramCache]: Analyzing trace with hash 450517516, now seen corresponding path program 1 times [2024-09-12 21:13:21,641 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:21,641 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1143210678] [2024-09-12 21:13:21,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:21,641 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:21,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:21,735 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:21,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:21,737 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-09-12 21:13:21,737 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:21,738 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1143210678] [2024-09-12 21:13:21,738 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1143210678] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:21,738 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1757977417] [2024-09-12 21:13:21,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:21,738 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:21,738 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:21,739 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:13:21,740 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-12 21:13:21,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:21,794 INFO L262 TraceCheckSpWp]: Trace formula consists of 170 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-09-12 21:13:21,795 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:13:21,807 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-09-12 21:13:21,807 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:13:21,820 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-12 21:13:21,820 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1757977417] provided 1 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:21,820 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-09-12 21:13:21,820 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6, 3] total 8 [2024-09-12 21:13:21,820 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1538108313] [2024-09-12 21:13:21,820 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-12 21:13:21,821 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-09-12 21:13:21,821 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:21,821 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-09-12 21:13:21,821 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2024-09-12 21:13:21,821 INFO L87 Difference]: Start difference. First operand 48 states and 60 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:21,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:21,851 INFO L93 Difference]: Finished difference Result 83 states and 109 transitions. [2024-09-12 21:13:21,851 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-09-12 21:13:21,852 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2024-09-12 21:13:21,852 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:21,852 INFO L225 Difference]: With dead ends: 83 [2024-09-12 21:13:21,852 INFO L226 Difference]: Without dead ends: 52 [2024-09-12 21:13:21,853 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 69 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2024-09-12 21:13:21,853 INFO L434 NwaCegarLoop]: 29 mSDtfsCounter, 6 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:21,853 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 49 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-12 21:13:21,854 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2024-09-12 21:13:21,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 52. [2024-09-12 21:13:21,867 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 47 states have (on average 1.2765957446808511) internal successors, (60), 47 states have internal predecessors, (60), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:21,867 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 64 transitions. [2024-09-12 21:13:21,867 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 64 transitions. Word has length 34 [2024-09-12 21:13:21,867 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:21,867 INFO L474 AbstractCegarLoop]: Abstraction has 52 states and 64 transitions. [2024-09-12 21:13:21,868 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:21,868 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:21,868 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 64 transitions. [2024-09-12 21:13:21,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2024-09-12 21:13:21,868 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:21,868 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:21,882 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2024-09-12 21:13:22,073 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:22,073 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:22,074 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:22,074 INFO L85 PathProgramCache]: Analyzing trace with hash 1134559415, now seen corresponding path program 1 times [2024-09-12 21:13:22,074 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:22,074 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1054440500] [2024-09-12 21:13:22,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:22,074 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:22,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:22,203 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:22,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:22,205 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2024-09-12 21:13:22,205 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:22,205 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1054440500] [2024-09-12 21:13:22,205 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1054440500] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:22,205 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [380898569] [2024-09-12 21:13:22,205 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:22,205 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:22,205 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:22,208 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:13:22,210 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-12 21:13:22,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:22,264 INFO L262 TraceCheckSpWp]: Trace formula consists of 183 conjuncts, 10 conjuncts are in the unsatisfiable core [2024-09-12 21:13:22,265 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:13:22,281 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 1 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-09-12 21:13:22,281 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:13:22,318 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-09-12 21:13:22,318 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [380898569] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:13:22,318 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:13:22,318 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 4] total 10 [2024-09-12 21:13:22,318 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [573698190] [2024-09-12 21:13:22,318 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:13:22,319 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2024-09-12 21:13:22,319 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:22,319 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2024-09-12 21:13:22,319 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2024-09-12 21:13:22,319 INFO L87 Difference]: Start difference. First operand 52 states and 64 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 10 states have internal predecessors, (51), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:22,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:22,636 INFO L93 Difference]: Finished difference Result 297 states and 421 transitions. [2024-09-12 21:13:22,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2024-09-12 21:13:22,636 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 10 states have internal predecessors, (51), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 37 [2024-09-12 21:13:22,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:22,638 INFO L225 Difference]: With dead ends: 297 [2024-09-12 21:13:22,638 INFO L226 Difference]: Without dead ends: 254 [2024-09-12 21:13:22,638 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 93 GetRequests, 73 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=115, Invalid=347, Unknown=0, NotChecked=0, Total=462 [2024-09-12 21:13:22,639 INFO L434 NwaCegarLoop]: 52 mSDtfsCounter, 288 mSDsluCounter, 181 mSDsCounter, 0 mSdLazyCounter, 234 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 284 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 234 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:22,639 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [288 Valid, 233 Invalid, 284 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 234 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-12 21:13:22,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2024-09-12 21:13:22,665 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 65. [2024-09-12 21:13:22,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 60 states have (on average 1.2833333333333334) internal successors, (77), 60 states have internal predecessors, (77), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:22,666 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 81 transitions. [2024-09-12 21:13:22,667 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 81 transitions. Word has length 37 [2024-09-12 21:13:22,667 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:22,667 INFO L474 AbstractCegarLoop]: Abstraction has 65 states and 81 transitions. [2024-09-12 21:13:22,667 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 10 states have internal predecessors, (51), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:22,668 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:22,668 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 81 transitions. [2024-09-12 21:13:22,668 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2024-09-12 21:13:22,668 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:22,668 INFO L216 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:22,689 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2024-09-12 21:13:22,869 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:22,872 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:22,873 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:22,873 INFO L85 PathProgramCache]: Analyzing trace with hash 1612339571, now seen corresponding path program 2 times [2024-09-12 21:13:22,873 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:22,873 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [640891756] [2024-09-12 21:13:22,873 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:22,873 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:22,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:23,006 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:23,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:23,009 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-12 21:13:23,009 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:23,009 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [640891756] [2024-09-12 21:13:23,009 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [640891756] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:23,009 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [955899708] [2024-09-12 21:13:23,010 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-12 21:13:23,010 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:23,010 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:23,025 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:13:23,026 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-12 21:13:23,108 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-12 21:13:23,109 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:13:23,110 INFO L262 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 11 conjuncts are in the unsatisfiable core [2024-09-12 21:13:23,111 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:13:23,125 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-12 21:13:23,125 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:13:23,183 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-12 21:13:23,183 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [955899708] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:13:23,183 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:13:23,184 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 13 [2024-09-12 21:13:23,184 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [663481422] [2024-09-12 21:13:23,184 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:13:23,184 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2024-09-12 21:13:23,185 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:23,185 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2024-09-12 21:13:23,186 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=112, Unknown=0, NotChecked=0, Total=156 [2024-09-12 21:13:23,186 INFO L87 Difference]: Start difference. First operand 65 states and 81 transitions. Second operand has 13 states, 13 states have (on average 3.076923076923077) internal successors, (40), 13 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:23,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:23,423 INFO L93 Difference]: Finished difference Result 309 states and 412 transitions. [2024-09-12 21:13:23,424 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-09-12 21:13:23,424 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.076923076923077) internal successors, (40), 13 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 44 [2024-09-12 21:13:23,424 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:23,425 INFO L225 Difference]: With dead ends: 309 [2024-09-12 21:13:23,425 INFO L226 Difference]: Without dead ends: 254 [2024-09-12 21:13:23,426 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=112, Unknown=0, NotChecked=0, Total=156 [2024-09-12 21:13:23,426 INFO L434 NwaCegarLoop]: 68 mSDtfsCounter, 149 mSDsluCounter, 351 mSDsCounter, 0 mSdLazyCounter, 275 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 149 SdHoareTripleChecker+Valid, 419 SdHoareTripleChecker+Invalid, 297 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 275 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:23,426 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [149 Valid, 419 Invalid, 297 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 275 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-12 21:13:23,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2024-09-12 21:13:23,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 66. [2024-09-12 21:13:23,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 61 states have (on average 1.278688524590164) internal successors, (78), 61 states have internal predecessors, (78), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:23,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 82 transitions. [2024-09-12 21:13:23,449 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 82 transitions. Word has length 44 [2024-09-12 21:13:23,449 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:23,449 INFO L474 AbstractCegarLoop]: Abstraction has 66 states and 82 transitions. [2024-09-12 21:13:23,450 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 3.076923076923077) internal successors, (40), 13 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:23,450 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:23,450 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 82 transitions. [2024-09-12 21:13:23,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-12 21:13:23,451 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:23,451 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:23,464 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2024-09-12 21:13:23,655 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:23,655 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:23,656 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:23,656 INFO L85 PathProgramCache]: Analyzing trace with hash 974810732, now seen corresponding path program 3 times [2024-09-12 21:13:23,656 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:23,656 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1030325336] [2024-09-12 21:13:23,656 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:23,656 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:23,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:24,019 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:24,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:24,022 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-12 21:13:24,022 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:24,022 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1030325336] [2024-09-12 21:13:24,022 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1030325336] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:24,022 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1251114556] [2024-09-12 21:13:24,022 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-12 21:13:24,023 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:24,023 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:24,024 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:13:24,026 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-12 21:13:24,216 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-12 21:13:24,216 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:13:24,218 INFO L262 TraceCheckSpWp]: Trace formula consists of 227 conjuncts, 23 conjuncts are in the unsatisfiable core [2024-09-12 21:13:24,220 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:13:24,304 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-12 21:13:24,304 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:13:24,456 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-12 21:13:24,457 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1251114556] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:13:24,457 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:13:24,457 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 20 [2024-09-12 21:13:24,457 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [611392364] [2024-09-12 21:13:24,457 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:13:24,458 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2024-09-12 21:13:24,458 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:24,458 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2024-09-12 21:13:24,458 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=55, Invalid=325, Unknown=0, NotChecked=0, Total=380 [2024-09-12 21:13:24,459 INFO L87 Difference]: Start difference. First operand 66 states and 82 transitions. Second operand has 20 states, 20 states have (on average 3.55) internal successors, (71), 18 states have internal predecessors, (71), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:24,638 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:24,639 INFO L93 Difference]: Finished difference Result 182 states and 237 transitions. [2024-09-12 21:13:24,639 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-09-12 21:13:24,639 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 3.55) internal successors, (71), 18 states have internal predecessors, (71), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-12 21:13:24,640 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:24,641 INFO L225 Difference]: With dead ends: 182 [2024-09-12 21:13:24,641 INFO L226 Difference]: Without dead ends: 176 [2024-09-12 21:13:24,641 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 105 GetRequests, 81 SyntacticMatches, 2 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 93 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=79, Invalid=473, Unknown=0, NotChecked=0, Total=552 [2024-09-12 21:13:24,642 INFO L434 NwaCegarLoop]: 98 mSDtfsCounter, 149 mSDsluCounter, 813 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 149 SdHoareTripleChecker+Valid, 911 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:24,642 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [149 Valid, 911 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-12 21:13:24,642 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 176 states. [2024-09-12 21:13:24,685 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 176 to 110. [2024-09-12 21:13:24,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 105 states have (on average 1.3142857142857143) internal successors, (138), 105 states have internal predecessors, (138), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:24,686 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 142 transitions. [2024-09-12 21:13:24,686 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 142 transitions. Word has length 45 [2024-09-12 21:13:24,688 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:24,688 INFO L474 AbstractCegarLoop]: Abstraction has 110 states and 142 transitions. [2024-09-12 21:13:24,688 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 3.55) internal successors, (71), 18 states have internal predecessors, (71), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:24,688 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:24,689 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 142 transitions. [2024-09-12 21:13:24,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-12 21:13:24,689 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:24,689 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:24,707 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2024-09-12 21:13:24,890 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2024-09-12 21:13:24,890 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:24,891 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:24,891 INFO L85 PathProgramCache]: Analyzing trace with hash 581783722, now seen corresponding path program 1 times [2024-09-12 21:13:24,891 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:24,891 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [460209758] [2024-09-12 21:13:24,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:24,891 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:24,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:26,515 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:26,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:26,517 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-12 21:13:26,518 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:26,518 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [460209758] [2024-09-12 21:13:26,518 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [460209758] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:26,518 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [557623859] [2024-09-12 21:13:26,518 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:26,518 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:26,518 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:26,520 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:13:26,521 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-09-12 21:13:26,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:26,600 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 42 conjuncts are in the unsatisfiable core [2024-09-12 21:13:26,602 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:13:26,916 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-12 21:13:26,919 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-12 21:13:26,932 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 13 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-12 21:13:26,933 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:13:27,252 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:13:27,252 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 68 treesize of output 57 [2024-09-12 21:13:27,265 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:13:27,266 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 47 treesize of output 35 [2024-09-12 21:13:27,417 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 8 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-12 21:13:27,417 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [557623859] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:13:27,418 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:13:27,418 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 14, 13] total 36 [2024-09-12 21:13:27,418 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [309276763] [2024-09-12 21:13:27,418 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:13:27,418 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2024-09-12 21:13:27,418 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:27,419 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2024-09-12 21:13:27,419 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=211, Invalid=1049, Unknown=0, NotChecked=0, Total=1260 [2024-09-12 21:13:27,419 INFO L87 Difference]: Start difference. First operand 110 states and 142 transitions. Second operand has 36 states, 36 states have (on average 2.3333333333333335) internal successors, (84), 36 states have internal predecessors, (84), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:30,260 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:30,260 INFO L93 Difference]: Finished difference Result 571 states and 790 transitions. [2024-09-12 21:13:30,261 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2024-09-12 21:13:30,261 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 2.3333333333333335) internal successors, (84), 36 states have internal predecessors, (84), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-12 21:13:30,261 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:30,263 INFO L225 Difference]: With dead ends: 571 [2024-09-12 21:13:30,263 INFO L226 Difference]: Without dead ends: 480 [2024-09-12 21:13:30,265 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 79 SyntacticMatches, 1 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2129 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=1453, Invalid=5857, Unknown=0, NotChecked=0, Total=7310 [2024-09-12 21:13:30,266 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 393 mSDsluCounter, 357 mSDsCounter, 0 mSdLazyCounter, 654 mSolverCounterSat, 93 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 393 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 747 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 93 IncrementalHoareTripleChecker+Valid, 654 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:30,266 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [393 Valid, 385 Invalid, 747 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [93 Valid, 654 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-12 21:13:30,266 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 480 states. [2024-09-12 21:13:30,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 480 to 303. [2024-09-12 21:13:30,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 298 states have (on average 1.3557046979865772) internal successors, (404), 298 states have internal predecessors, (404), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:30,388 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 408 transitions. [2024-09-12 21:13:30,389 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 408 transitions. Word has length 45 [2024-09-12 21:13:30,389 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:30,389 INFO L474 AbstractCegarLoop]: Abstraction has 303 states and 408 transitions. [2024-09-12 21:13:30,389 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 2.3333333333333335) internal successors, (84), 36 states have internal predecessors, (84), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:30,389 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:30,390 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 408 transitions. [2024-09-12 21:13:30,390 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-12 21:13:30,390 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:30,390 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:30,403 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2024-09-12 21:13:30,594 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2024-09-12 21:13:30,594 INFO L399 AbstractCegarLoop]: === Iteration 13 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:30,595 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:30,595 INFO L85 PathProgramCache]: Analyzing trace with hash 388004718, now seen corresponding path program 2 times [2024-09-12 21:13:30,595 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:30,595 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1571626158] [2024-09-12 21:13:30,595 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:30,595 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:30,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:31,559 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:31,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:31,561 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 7 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-12 21:13:31,561 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:31,561 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1571626158] [2024-09-12 21:13:31,561 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1571626158] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:31,562 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2020328841] [2024-09-12 21:13:31,562 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-12 21:13:31,562 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:31,562 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:31,563 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:13:31,564 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-09-12 21:13:31,635 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-12 21:13:31,635 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:13:31,636 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 41 conjuncts are in the unsatisfiable core [2024-09-12 21:13:31,638 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:13:32,428 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:13:32,428 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 152 treesize of output 146 [2024-09-12 21:13:32,439 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:13:32,439 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 80 treesize of output 52 [2024-09-12 21:13:32,519 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-12 21:13:32,520 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:13:37,290 INFO L349 Elim1Store]: treesize reduction 58, result has 1.7 percent of original size [2024-09-12 21:13:37,290 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 188 treesize of output 1 [2024-09-12 21:13:37,294 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 11 proven. 2 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-12 21:13:37,294 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2020328841] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:13:37,294 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:13:37,294 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 12] total 36 [2024-09-12 21:13:37,294 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1552338708] [2024-09-12 21:13:37,294 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:13:37,295 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2024-09-12 21:13:37,295 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:37,295 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2024-09-12 21:13:37,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=199, Invalid=1060, Unknown=1, NotChecked=0, Total=1260 [2024-09-12 21:13:37,296 INFO L87 Difference]: Start difference. First operand 303 states and 408 transitions. Second operand has 36 states, 36 states have (on average 2.5) internal successors, (90), 36 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:50,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:50,295 INFO L93 Difference]: Finished difference Result 1764 states and 2442 transitions. [2024-09-12 21:13:50,295 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 203 states. [2024-09-12 21:13:50,295 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 2.5) internal successors, (90), 36 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-12 21:13:50,295 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:50,301 INFO L225 Difference]: With dead ends: 1764 [2024-09-12 21:13:50,301 INFO L226 Difference]: Without dead ends: 1570 [2024-09-12 21:13:50,314 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 318 GetRequests, 89 SyntacticMatches, 0 SemanticMatches, 229 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21046 ImplicationChecksByTransitivity, 15.5s TimeCoverageRelationStatistics Valid=6077, Invalid=47052, Unknown=1, NotChecked=0, Total=53130 [2024-09-12 21:13:50,314 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 1103 mSDsluCounter, 350 mSDsCounter, 0 mSdLazyCounter, 1309 mSolverCounterSat, 292 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1103 SdHoareTripleChecker+Valid, 380 SdHoareTripleChecker+Invalid, 1601 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 292 IncrementalHoareTripleChecker+Valid, 1309 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:50,315 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [1103 Valid, 380 Invalid, 1601 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [292 Valid, 1309 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2024-09-12 21:13:50,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1570 states. [2024-09-12 21:13:50,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1570 to 860. [2024-09-12 21:13:50,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 860 states, 855 states have (on average 1.3719298245614036) internal successors, (1173), 855 states have internal predecessors, (1173), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:50,751 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 860 states to 860 states and 1177 transitions. [2024-09-12 21:13:50,753 INFO L78 Accepts]: Start accepts. Automaton has 860 states and 1177 transitions. Word has length 45 [2024-09-12 21:13:50,753 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:50,753 INFO L474 AbstractCegarLoop]: Abstraction has 860 states and 1177 transitions. [2024-09-12 21:13:50,753 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 2.5) internal successors, (90), 36 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:50,753 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:50,753 INFO L276 IsEmpty]: Start isEmpty. Operand 860 states and 1177 transitions. [2024-09-12 21:13:50,754 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-12 21:13:50,755 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:50,755 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:50,766 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2024-09-12 21:13:50,958 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,12 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:50,958 INFO L399 AbstractCegarLoop]: === Iteration 14 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:50,959 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:50,959 INFO L85 PathProgramCache]: Analyzing trace with hash 1193665450, now seen corresponding path program 1 times [2024-09-12 21:13:50,959 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:50,959 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [699562097] [2024-09-12 21:13:50,959 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:50,959 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:51,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:51,674 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:51,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:51,678 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 7 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-12 21:13:51,678 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:51,678 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [699562097] [2024-09-12 21:13:51,678 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [699562097] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:51,678 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1143981645] [2024-09-12 21:13:51,678 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:51,678 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:51,679 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:51,680 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:13:51,681 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-09-12 21:13:51,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:51,762 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 48 conjuncts are in the unsatisfiable core [2024-09-12 21:13:51,764 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:13:52,188 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 19 [2024-09-12 21:13:52,191 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:13:52,191 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 11 [2024-09-12 21:13:52,205 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 13 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-12 21:13:52,205 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:13:52,652 INFO L349 Elim1Store]: treesize reduction 25, result has 32.4 percent of original size [2024-09-12 21:13:52,653 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 109 treesize of output 78 [2024-09-12 21:13:52,663 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:13:52,664 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 91 treesize of output 63 [2024-09-12 21:13:52,740 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-12 21:13:52,740 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1143981645] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:13:52,740 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:13:52,740 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 16, 15] total 38 [2024-09-12 21:13:52,740 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [306039167] [2024-09-12 21:13:52,740 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:13:52,741 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-12 21:13:52,741 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:52,741 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-12 21:13:52,742 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=289, Invalid=1117, Unknown=0, NotChecked=0, Total=1406 [2024-09-12 21:13:52,742 INFO L87 Difference]: Start difference. First operand 860 states and 1177 transitions. Second operand has 38 states, 38 states have (on average 2.3947368421052633) internal successors, (91), 38 states have internal predecessors, (91), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:55,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:13:55,304 INFO L93 Difference]: Finished difference Result 1736 states and 2337 transitions. [2024-09-12 21:13:55,304 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2024-09-12 21:13:55,304 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 2.3947368421052633) internal successors, (91), 38 states have internal predecessors, (91), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-12 21:13:55,304 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:13:55,309 INFO L225 Difference]: With dead ends: 1736 [2024-09-12 21:13:55,309 INFO L226 Difference]: Without dead ends: 1356 [2024-09-12 21:13:55,310 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 72 SyntacticMatches, 0 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1244 ImplicationChecksByTransitivity, 1.8s TimeCoverageRelationStatistics Valid=1257, Invalid=3855, Unknown=0, NotChecked=0, Total=5112 [2024-09-12 21:13:55,310 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 414 mSDsluCounter, 346 mSDsCounter, 0 mSdLazyCounter, 697 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 414 SdHoareTripleChecker+Valid, 374 SdHoareTripleChecker+Invalid, 757 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 697 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-12 21:13:55,310 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [414 Valid, 374 Invalid, 757 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 697 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-12 21:13:55,311 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1356 states. [2024-09-12 21:13:55,753 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1356 to 897. [2024-09-12 21:13:55,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 897 states, 892 states have (on average 1.3475336322869955) internal successors, (1202), 892 states have internal predecessors, (1202), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:55,757 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 897 states to 897 states and 1206 transitions. [2024-09-12 21:13:55,758 INFO L78 Accepts]: Start accepts. Automaton has 897 states and 1206 transitions. Word has length 45 [2024-09-12 21:13:55,758 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:13:55,758 INFO L474 AbstractCegarLoop]: Abstraction has 897 states and 1206 transitions. [2024-09-12 21:13:55,758 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 2.3947368421052633) internal successors, (91), 38 states have internal predecessors, (91), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:13:55,758 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:55,759 INFO L276 IsEmpty]: Start isEmpty. Operand 897 states and 1206 transitions. [2024-09-12 21:13:55,759 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-12 21:13:55,760 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:13:55,760 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:13:55,771 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2024-09-12 21:13:55,963 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2024-09-12 21:13:55,963 INFO L399 AbstractCegarLoop]: === Iteration 15 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:13:55,964 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:13:55,964 INFO L85 PathProgramCache]: Analyzing trace with hash 1115359342, now seen corresponding path program 2 times [2024-09-12 21:13:55,964 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:13:55,964 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1094763092] [2024-09-12 21:13:55,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:13:55,964 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:13:55,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:56,349 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:13:56,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:13:56,351 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 2 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-09-12 21:13:56,351 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:13:56,352 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1094763092] [2024-09-12 21:13:56,352 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1094763092] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:13:56,352 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [211855425] [2024-09-12 21:13:56,352 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-12 21:13:56,352 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:13:56,352 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:13:56,353 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:13:56,354 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2024-09-12 21:13:56,428 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-12 21:13:56,428 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:13:56,430 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 41 conjuncts are in the unsatisfiable core [2024-09-12 21:13:56,431 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:13:57,064 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:13:57,064 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 152 treesize of output 146 [2024-09-12 21:13:57,071 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:13:57,071 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 80 treesize of output 52 [2024-09-12 21:13:57,334 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-12 21:13:57,334 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:13:57,963 INFO L349 Elim1Store]: treesize reduction 58, result has 1.7 percent of original size [2024-09-12 21:13:57,964 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 147 treesize of output 1 [2024-09-12 21:13:57,966 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 11 proven. 2 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-12 21:13:57,967 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [211855425] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:13:57,967 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:13:57,967 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 15, 12] total 29 [2024-09-12 21:13:57,968 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2104767396] [2024-09-12 21:13:57,968 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:13:57,968 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2024-09-12 21:13:57,968 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:13:57,969 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2024-09-12 21:13:57,969 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=177, Invalid=635, Unknown=0, NotChecked=0, Total=812 [2024-09-12 21:13:57,969 INFO L87 Difference]: Start difference. First operand 897 states and 1206 transitions. Second operand has 29 states, 29 states have (on average 3.0) internal successors, (87), 29 states have internal predecessors, (87), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:01,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:14:01,672 INFO L93 Difference]: Finished difference Result 2244 states and 3053 transitions. [2024-09-12 21:14:01,672 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 60 states. [2024-09-12 21:14:01,672 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 3.0) internal successors, (87), 29 states have internal predecessors, (87), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-12 21:14:01,672 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:14:01,678 INFO L225 Difference]: With dead ends: 2244 [2024-09-12 21:14:01,679 INFO L226 Difference]: Without dead ends: 1805 [2024-09-12 21:14:01,680 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 75 SyntacticMatches, 0 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1743 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=1242, Invalid=5078, Unknown=0, NotChecked=0, Total=6320 [2024-09-12 21:14:01,680 INFO L434 NwaCegarLoop]: 33 mSDtfsCounter, 285 mSDsluCounter, 280 mSDsCounter, 0 mSdLazyCounter, 736 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 285 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 785 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 736 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-12 21:14:01,680 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [285 Valid, 313 Invalid, 785 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 736 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-12 21:14:01,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1805 states. [2024-09-12 21:14:02,269 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1805 to 950. [2024-09-12 21:14:02,271 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 950 states, 945 states have (on average 1.3227513227513228) internal successors, (1250), 945 states have internal predecessors, (1250), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:02,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 950 states to 950 states and 1254 transitions. [2024-09-12 21:14:02,275 INFO L78 Accepts]: Start accepts. Automaton has 950 states and 1254 transitions. Word has length 45 [2024-09-12 21:14:02,275 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:14:02,275 INFO L474 AbstractCegarLoop]: Abstraction has 950 states and 1254 transitions. [2024-09-12 21:14:02,275 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 3.0) internal successors, (87), 29 states have internal predecessors, (87), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:02,275 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:02,276 INFO L276 IsEmpty]: Start isEmpty. Operand 950 states and 1254 transitions. [2024-09-12 21:14:02,277 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-12 21:14:02,277 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:14:02,278 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:14:02,289 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2024-09-12 21:14:02,478 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2024-09-12 21:14:02,478 INFO L399 AbstractCegarLoop]: === Iteration 16 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:14:02,478 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:02,479 INFO L85 PathProgramCache]: Analyzing trace with hash 941187050, now seen corresponding path program 1 times [2024-09-12 21:14:02,479 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:14:02,479 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2042313054] [2024-09-12 21:14:02,479 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:14:02,479 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:14:02,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:03,086 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:14:03,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:03,088 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 5 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-09-12 21:14:03,088 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:14:03,088 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2042313054] [2024-09-12 21:14:03,088 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2042313054] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:14:03,088 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [809155183] [2024-09-12 21:14:03,088 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:14:03,088 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:14:03,088 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:14:03,090 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:14:03,091 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2024-09-12 21:14:03,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:03,159 INFO L262 TraceCheckSpWp]: Trace formula consists of 212 conjuncts, 37 conjuncts are in the unsatisfiable core [2024-09-12 21:14:03,160 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:14:03,334 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 12 [2024-09-12 21:14:03,336 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-12 21:14:03,347 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 9 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-09-12 21:14:03,347 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:14:03,582 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:14:03,582 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 22 [2024-09-12 21:14:03,589 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:14:03,589 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 53 treesize of output 42 [2024-09-12 21:14:03,645 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 8 proven. 3 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2024-09-12 21:14:03,645 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [809155183] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:14:03,646 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:14:03,646 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 13] total 27 [2024-09-12 21:14:03,646 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1680512750] [2024-09-12 21:14:03,646 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:14:03,646 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2024-09-12 21:14:03,646 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:14:03,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2024-09-12 21:14:03,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=552, Unknown=0, NotChecked=0, Total=702 [2024-09-12 21:14:03,647 INFO L87 Difference]: Start difference. First operand 950 states and 1254 transitions. Second operand has 27 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 27 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:04,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:14:04,976 INFO L93 Difference]: Finished difference Result 1709 states and 2245 transitions. [2024-09-12 21:14:04,976 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-12 21:14:04,977 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 27 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-12 21:14:04,977 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:14:04,981 INFO L225 Difference]: With dead ends: 1709 [2024-09-12 21:14:04,981 INFO L226 Difference]: Without dead ends: 1240 [2024-09-12 21:14:04,982 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 381 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=330, Invalid=1076, Unknown=0, NotChecked=0, Total=1406 [2024-09-12 21:14:04,983 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 164 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 362 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 379 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 362 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-12 21:14:04,983 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [164 Valid, 208 Invalid, 379 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 362 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-12 21:14:04,984 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1240 states. [2024-09-12 21:14:05,570 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1240 to 895. [2024-09-12 21:14:05,571 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 895 states, 890 states have (on average 1.3022471910112359) internal successors, (1159), 890 states have internal predecessors, (1159), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:05,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 895 states to 895 states and 1163 transitions. [2024-09-12 21:14:05,574 INFO L78 Accepts]: Start accepts. Automaton has 895 states and 1163 transitions. Word has length 45 [2024-09-12 21:14:05,575 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:14:05,575 INFO L474 AbstractCegarLoop]: Abstraction has 895 states and 1163 transitions. [2024-09-12 21:14:05,575 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 27 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:05,575 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:05,575 INFO L276 IsEmpty]: Start isEmpty. Operand 895 states and 1163 transitions. [2024-09-12 21:14:05,576 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2024-09-12 21:14:05,576 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:14:05,576 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:14:05,589 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2024-09-12 21:14:05,777 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2024-09-12 21:14:05,777 INFO L399 AbstractCegarLoop]: === Iteration 17 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:14:05,777 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:05,777 INFO L85 PathProgramCache]: Analyzing trace with hash -128402447, now seen corresponding path program 1 times [2024-09-12 21:14:05,777 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:14:05,777 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1591721329] [2024-09-12 21:14:05,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:14:05,777 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:14:05,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:05,910 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:14:05,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:05,912 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 20 proven. 3 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2024-09-12 21:14:05,913 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:14:05,913 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1591721329] [2024-09-12 21:14:05,913 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1591721329] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:14:05,913 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1243306593] [2024-09-12 21:14:05,913 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:14:05,913 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:14:05,913 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:14:05,915 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:14:05,916 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2024-09-12 21:14:05,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:05,998 INFO L262 TraceCheckSpWp]: Trace formula consists of 244 conjuncts, 51 conjuncts are in the unsatisfiable core [2024-09-12 21:14:06,000 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:14:06,300 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-12 21:14:06,373 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:14:06,373 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 27 treesize of output 11 [2024-09-12 21:14:06,383 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 0 proven. 45 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-12 21:14:06,383 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:14:06,730 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:14:06,730 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 67 treesize of output 57 [2024-09-12 21:14:07,004 INFO L349 Elim1Store]: treesize reduction 10, result has 52.4 percent of original size [2024-09-12 21:14:07,004 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 57 treesize of output 40 [2024-09-12 21:14:07,036 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 5 proven. 26 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-09-12 21:14:07,036 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1243306593] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:14:07,036 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:14:07,036 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 21, 16] total 38 [2024-09-12 21:14:07,036 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1065717017] [2024-09-12 21:14:07,036 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:14:07,036 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-12 21:14:07,036 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:14:07,037 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-12 21:14:07,037 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=194, Invalid=1212, Unknown=0, NotChecked=0, Total=1406 [2024-09-12 21:14:07,037 INFO L87 Difference]: Start difference. First operand 895 states and 1163 transitions. Second operand has 38 states, 38 states have (on average 3.026315789473684) internal successors, (115), 38 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:09,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:14:09,622 INFO L93 Difference]: Finished difference Result 2463 states and 3266 transitions. [2024-09-12 21:14:09,622 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2024-09-12 21:14:09,622 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 3.026315789473684) internal successors, (115), 38 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 54 [2024-09-12 21:14:09,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:14:09,628 INFO L225 Difference]: With dead ends: 2463 [2024-09-12 21:14:09,629 INFO L226 Difference]: Without dead ends: 2181 [2024-09-12 21:14:09,630 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 831 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=559, Invalid=3101, Unknown=0, NotChecked=0, Total=3660 [2024-09-12 21:14:09,630 INFO L434 NwaCegarLoop]: 46 mSDtfsCounter, 312 mSDsluCounter, 622 mSDsCounter, 0 mSdLazyCounter, 1046 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 668 SdHoareTripleChecker+Invalid, 1065 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 1046 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-12 21:14:09,630 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [312 Valid, 668 Invalid, 1065 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 1046 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-12 21:14:09,632 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2181 states. [2024-09-12 21:14:10,291 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2181 to 934. [2024-09-12 21:14:10,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 934 states, 929 states have (on average 1.3110871905274488) internal successors, (1218), 929 states have internal predecessors, (1218), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:10,294 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 934 states to 934 states and 1222 transitions. [2024-09-12 21:14:10,297 INFO L78 Accepts]: Start accepts. Automaton has 934 states and 1222 transitions. Word has length 54 [2024-09-12 21:14:10,297 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:14:10,297 INFO L474 AbstractCegarLoop]: Abstraction has 934 states and 1222 transitions. [2024-09-12 21:14:10,298 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 3.026315789473684) internal successors, (115), 38 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:10,298 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:10,298 INFO L276 IsEmpty]: Start isEmpty. Operand 934 states and 1222 transitions. [2024-09-12 21:14:10,299 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-09-12 21:14:10,299 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:14:10,299 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:14:10,311 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2024-09-12 21:14:10,503 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2024-09-12 21:14:10,503 INFO L399 AbstractCegarLoop]: === Iteration 18 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:14:10,504 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:10,504 INFO L85 PathProgramCache]: Analyzing trace with hash -1628474760, now seen corresponding path program 2 times [2024-09-12 21:14:10,504 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:14:10,504 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [311561242] [2024-09-12 21:14:10,504 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:14:10,504 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:14:10,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:11,028 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:14:11,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:11,030 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 23 proven. 4 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-12 21:14:11,030 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:14:11,030 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [311561242] [2024-09-12 21:14:11,030 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [311561242] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:14:11,030 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [450088167] [2024-09-12 21:14:11,030 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-12 21:14:11,030 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:14:11,030 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:14:11,031 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:14:11,032 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2024-09-12 21:14:11,109 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-12 21:14:11,110 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:14:11,111 INFO L262 TraceCheckSpWp]: Trace formula consists of 246 conjuncts, 72 conjuncts are in the unsatisfiable core [2024-09-12 21:14:11,113 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:14:12,020 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-12 21:14:12,064 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 20 proven. 29 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2024-09-12 21:14:12,065 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:14:12,790 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:14:12,791 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 65 treesize of output 50 [2024-09-12 21:14:13,065 INFO L349 Elim1Store]: treesize reduction 10, result has 52.4 percent of original size [2024-09-12 21:14:13,065 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 57 treesize of output 40 [2024-09-12 21:14:13,100 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 32 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-12 21:14:13,100 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [450088167] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:14:13,100 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:14:13,100 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 25, 26] total 59 [2024-09-12 21:14:13,100 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [299327004] [2024-09-12 21:14:13,101 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:14:13,101 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2024-09-12 21:14:13,101 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:14:13,101 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2024-09-12 21:14:13,102 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=519, Invalid=2903, Unknown=0, NotChecked=0, Total=3422 [2024-09-12 21:14:13,102 INFO L87 Difference]: Start difference. First operand 934 states and 1222 transitions. Second operand has 59 states, 59 states have (on average 1.9491525423728813) internal successors, (115), 59 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:16,589 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:14:16,589 INFO L93 Difference]: Finished difference Result 1706 states and 2261 transitions. [2024-09-12 21:14:16,589 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2024-09-12 21:14:16,589 INFO L78 Accepts]: Start accepts. Automaton has has 59 states, 59 states have (on average 1.9491525423728813) internal successors, (115), 59 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 55 [2024-09-12 21:14:16,590 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:14:16,594 INFO L225 Difference]: With dead ends: 1706 [2024-09-12 21:14:16,595 INFO L226 Difference]: Without dead ends: 1569 [2024-09-12 21:14:16,596 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 68 SyntacticMatches, 0 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3225 ImplicationChecksByTransitivity, 2.7s TimeCoverageRelationStatistics Valid=1851, Invalid=8249, Unknown=0, NotChecked=0, Total=10100 [2024-09-12 21:14:16,596 INFO L434 NwaCegarLoop]: 38 mSDtfsCounter, 845 mSDsluCounter, 607 mSDsCounter, 0 mSdLazyCounter, 1366 mSolverCounterSat, 103 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 845 SdHoareTripleChecker+Valid, 645 SdHoareTripleChecker+Invalid, 1469 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 103 IncrementalHoareTripleChecker+Valid, 1366 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-09-12 21:14:16,596 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [845 Valid, 645 Invalid, 1469 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [103 Valid, 1366 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2024-09-12 21:14:16,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1569 states. [2024-09-12 21:14:17,276 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1569 to 906. [2024-09-12 21:14:17,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 901 states have (on average 1.3152053274139845) internal successors, (1185), 901 states have internal predecessors, (1185), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:17,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1189 transitions. [2024-09-12 21:14:17,281 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1189 transitions. Word has length 55 [2024-09-12 21:14:17,281 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:14:17,281 INFO L474 AbstractCegarLoop]: Abstraction has 906 states and 1189 transitions. [2024-09-12 21:14:17,282 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 59 states, 59 states have (on average 1.9491525423728813) internal successors, (115), 59 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:17,282 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:17,282 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1189 transitions. [2024-09-12 21:14:17,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2024-09-12 21:14:17,283 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:14:17,283 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:14:17,296 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2024-09-12 21:14:17,484 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17,17 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:14:17,484 INFO L399 AbstractCegarLoop]: === Iteration 19 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:14:17,484 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:17,484 INFO L85 PathProgramCache]: Analyzing trace with hash -885254672, now seen corresponding path program 3 times [2024-09-12 21:14:17,484 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:14:17,484 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1755243446] [2024-09-12 21:14:17,484 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:14:17,484 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:14:17,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:17,906 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:14:17,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:17,908 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-12 21:14:17,908 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:14:17,908 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1755243446] [2024-09-12 21:14:17,908 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1755243446] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:14:17,908 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [742757345] [2024-09-12 21:14:17,908 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-12 21:14:17,909 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:14:17,909 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:14:17,910 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:14:17,911 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2024-09-12 21:14:17,975 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2024-09-12 21:14:17,976 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:14:17,977 INFO L262 TraceCheckSpWp]: Trace formula consists of 194 conjuncts, 24 conjuncts are in the unsatisfiable core [2024-09-12 21:14:17,978 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:14:18,095 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-12 21:14:18,096 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 0 proven. 17 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2024-09-12 21:14:18,096 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:14:18,243 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-12 21:14:18,243 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 49 treesize of output 31 [2024-09-12 21:14:18,267 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 1 proven. 7 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-12 21:14:18,267 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [742757345] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:14:18,267 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:14:18,267 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 12, 9] total 21 [2024-09-12 21:14:18,268 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [895937423] [2024-09-12 21:14:18,268 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:14:18,268 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-12 21:14:18,268 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:14:18,268 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-12 21:14:18,268 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=343, Unknown=0, NotChecked=0, Total=420 [2024-09-12 21:14:18,269 INFO L87 Difference]: Start difference. First operand 906 states and 1189 transitions. Second operand has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:19,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:14:19,441 INFO L93 Difference]: Finished difference Result 1290 states and 1726 transitions. [2024-09-12 21:14:19,441 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-09-12 21:14:19,442 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 56 [2024-09-12 21:14:19,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:14:19,446 INFO L225 Difference]: With dead ends: 1290 [2024-09-12 21:14:19,446 INFO L226 Difference]: Without dead ends: 1285 [2024-09-12 21:14:19,446 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 125 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 126 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=97, Invalid=409, Unknown=0, NotChecked=0, Total=506 [2024-09-12 21:14:19,446 INFO L434 NwaCegarLoop]: 33 mSDtfsCounter, 84 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 290 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 337 SdHoareTripleChecker+Invalid, 295 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 290 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-12 21:14:19,446 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 337 Invalid, 295 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 290 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-12 21:14:19,447 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1285 states. [2024-09-12 21:14:20,064 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1285 to 798. [2024-09-12 21:14:20,065 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 798 states, 793 states have (on average 1.305170239596469) internal successors, (1035), 793 states have internal predecessors, (1035), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:20,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 798 states to 798 states and 1039 transitions. [2024-09-12 21:14:20,072 INFO L78 Accepts]: Start accepts. Automaton has 798 states and 1039 transitions. Word has length 56 [2024-09-12 21:14:20,072 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:14:20,072 INFO L474 AbstractCegarLoop]: Abstraction has 798 states and 1039 transitions. [2024-09-12 21:14:20,073 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:20,073 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:20,073 INFO L276 IsEmpty]: Start isEmpty. Operand 798 states and 1039 transitions. [2024-09-12 21:14:20,074 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-12 21:14:20,074 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:14:20,074 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:14:20,090 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2024-09-12 21:14:20,275 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,18 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:14:20,275 INFO L399 AbstractCegarLoop]: === Iteration 20 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:14:20,275 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:20,275 INFO L85 PathProgramCache]: Analyzing trace with hash 1141037310, now seen corresponding path program 4 times [2024-09-12 21:14:20,276 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:14:20,276 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [208219065] [2024-09-12 21:14:20,276 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:14:20,276 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:14:20,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:20,807 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:14:20,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:20,809 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 14 proven. 11 refuted. 0 times theorem prover too weak. 61 trivial. 0 not checked. [2024-09-12 21:14:20,809 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:14:20,809 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [208219065] [2024-09-12 21:14:20,809 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [208219065] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:14:20,809 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [417161164] [2024-09-12 21:14:20,809 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-12 21:14:20,810 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:14:20,810 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:14:20,811 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:14:20,812 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2024-09-12 21:14:20,886 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-12 21:14:20,886 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:14:20,888 INFO L262 TraceCheckSpWp]: Trace formula consists of 285 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-12 21:14:20,889 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:14:21,440 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:14:21,441 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 152 treesize of output 146 [2024-09-12 21:14:21,446 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:14:21,447 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 80 treesize of output 52 [2024-09-12 21:14:21,758 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 19 proven. 17 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2024-09-12 21:14:21,758 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:14:22,371 INFO L349 Elim1Store]: treesize reduction 58, result has 1.7 percent of original size [2024-09-12 21:14:22,371 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 188 treesize of output 1 [2024-09-12 21:14:22,374 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 22 proven. 14 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2024-09-12 21:14:22,374 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [417161164] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:14:22,374 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:14:22,375 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 15, 13] total 31 [2024-09-12 21:14:22,375 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [164218186] [2024-09-12 21:14:22,375 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:14:22,375 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2024-09-12 21:14:22,375 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:14:22,375 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2024-09-12 21:14:22,376 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2024-09-12 21:14:22,376 INFO L87 Difference]: Start difference. First operand 798 states and 1039 transitions. Second operand has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:24,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:14:24,408 INFO L93 Difference]: Finished difference Result 1627 states and 2117 transitions. [2024-09-12 21:14:24,409 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2024-09-12 21:14:24,409 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-12 21:14:24,409 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:14:24,413 INFO L225 Difference]: With dead ends: 1627 [2024-09-12 21:14:24,413 INFO L226 Difference]: Without dead ends: 1001 [2024-09-12 21:14:24,414 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 761 ImplicationChecksByTransitivity, 1.5s TimeCoverageRelationStatistics Valid=700, Invalid=2606, Unknown=0, NotChecked=0, Total=3306 [2024-09-12 21:14:24,414 INFO L434 NwaCegarLoop]: 27 mSDtfsCounter, 350 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 349 mSolverCounterSat, 78 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 231 SdHoareTripleChecker+Invalid, 427 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 78 IncrementalHoareTripleChecker+Valid, 349 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-12 21:14:24,414 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [350 Valid, 231 Invalid, 427 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [78 Valid, 349 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-12 21:14:24,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1001 states. [2024-09-12 21:14:24,891 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1001 to 597. [2024-09-12 21:14:24,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 597 states, 592 states have (on average 1.2635135135135136) internal successors, (748), 592 states have internal predecessors, (748), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:24,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 597 states to 597 states and 752 transitions. [2024-09-12 21:14:24,894 INFO L78 Accepts]: Start accepts. Automaton has 597 states and 752 transitions. Word has length 66 [2024-09-12 21:14:24,894 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:14:24,894 INFO L474 AbstractCegarLoop]: Abstraction has 597 states and 752 transitions. [2024-09-12 21:14:24,894 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:24,894 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:24,895 INFO L276 IsEmpty]: Start isEmpty. Operand 597 states and 752 transitions. [2024-09-12 21:14:24,895 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-12 21:14:24,895 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:14:24,896 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:14:24,908 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2024-09-12 21:14:25,099 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,19 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:14:25,100 INFO L399 AbstractCegarLoop]: === Iteration 21 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:14:25,100 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:25,100 INFO L85 PathProgramCache]: Analyzing trace with hash 828990910, now seen corresponding path program 5 times [2024-09-12 21:14:25,100 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:14:25,100 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [335177098] [2024-09-12 21:14:25,100 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:14:25,100 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:14:25,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:26,470 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:14:26,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:26,472 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 38 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2024-09-12 21:14:26,472 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:14:26,472 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [335177098] [2024-09-12 21:14:26,472 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [335177098] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:14:26,472 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1877701941] [2024-09-12 21:14:26,472 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-12 21:14:26,472 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:14:26,472 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:14:26,473 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:14:26,474 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2024-09-12 21:14:26,790 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 6 check-sat command(s) [2024-09-12 21:14:26,791 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:14:26,792 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 68 conjuncts are in the unsatisfiable core [2024-09-12 21:14:26,794 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:14:26,834 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 48 treesize of output 35 [2024-09-12 21:14:26,839 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 1 [2024-09-12 21:14:27,290 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:14:27,291 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 30 treesize of output 18 [2024-09-12 21:14:27,292 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-12 21:14:27,304 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 52 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-09-12 21:14:27,304 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:14:28,026 INFO L349 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2024-09-12 21:14:28,026 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 134 treesize of output 106 [2024-09-12 21:14:28,170 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 42 proven. 17 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2024-09-12 21:14:28,170 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1877701941] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:14:28,170 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:14:28,170 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 21, 19] total 51 [2024-09-12 21:14:28,170 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [719170837] [2024-09-12 21:14:28,170 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:14:28,171 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2024-09-12 21:14:28,171 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:14:28,171 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2024-09-12 21:14:28,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=438, Invalid=2112, Unknown=0, NotChecked=0, Total=2550 [2024-09-12 21:14:28,172 INFO L87 Difference]: Start difference. First operand 597 states and 752 transitions. Second operand has 51 states, 51 states have (on average 2.607843137254902) internal successors, (133), 51 states have internal predecessors, (133), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:36,985 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:14:36,985 INFO L93 Difference]: Finished difference Result 3262 states and 4292 transitions. [2024-09-12 21:14:36,986 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 129 states. [2024-09-12 21:14:36,986 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 51 states have (on average 2.607843137254902) internal successors, (133), 51 states have internal predecessors, (133), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-12 21:14:36,986 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:14:36,993 INFO L225 Difference]: With dead ends: 3262 [2024-09-12 21:14:36,993 INFO L226 Difference]: Without dead ends: 2834 [2024-09-12 21:14:36,995 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 155 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9362 ImplicationChecksByTransitivity, 6.2s TimeCoverageRelationStatistics Valid=4057, Invalid=20435, Unknown=0, NotChecked=0, Total=24492 [2024-09-12 21:14:36,995 INFO L434 NwaCegarLoop]: 43 mSDtfsCounter, 620 mSDsluCounter, 795 mSDsCounter, 0 mSdLazyCounter, 1615 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 620 SdHoareTripleChecker+Valid, 838 SdHoareTripleChecker+Invalid, 1680 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 1615 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-09-12 21:14:36,995 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [620 Valid, 838 Invalid, 1680 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 1615 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-09-12 21:14:36,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2834 states. [2024-09-12 21:14:38,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2834 to 1400. [2024-09-12 21:14:38,287 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1400 states, 1395 states have (on average 1.2967741935483872) internal successors, (1809), 1395 states have internal predecessors, (1809), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:38,288 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1400 states to 1400 states and 1813 transitions. [2024-09-12 21:14:38,291 INFO L78 Accepts]: Start accepts. Automaton has 1400 states and 1813 transitions. Word has length 66 [2024-09-12 21:14:38,291 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:14:38,291 INFO L474 AbstractCegarLoop]: Abstraction has 1400 states and 1813 transitions. [2024-09-12 21:14:38,291 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 51 states have (on average 2.607843137254902) internal successors, (133), 51 states have internal predecessors, (133), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:38,291 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:38,291 INFO L276 IsEmpty]: Start isEmpty. Operand 1400 states and 1813 transitions. [2024-09-12 21:14:38,293 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-12 21:14:38,293 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:14:38,293 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:14:38,306 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2024-09-12 21:14:38,493 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2024-09-12 21:14:38,494 INFO L399 AbstractCegarLoop]: === Iteration 22 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:14:38,494 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:38,494 INFO L85 PathProgramCache]: Analyzing trace with hash -289774206, now seen corresponding path program 6 times [2024-09-12 21:14:38,494 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:14:38,494 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1767281018] [2024-09-12 21:14:38,494 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:14:38,494 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:14:38,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:40,124 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:14:40,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:40,126 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 48 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2024-09-12 21:14:40,126 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:14:40,126 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1767281018] [2024-09-12 21:14:40,127 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1767281018] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:14:40,127 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [720292074] [2024-09-12 21:14:40,127 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-09-12 21:14:40,127 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:14:40,127 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:14:40,128 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:14:40,128 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2024-09-12 21:14:40,292 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 6 check-sat command(s) [2024-09-12 21:14:40,292 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:14:40,294 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-12 21:14:40,295 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:14:40,760 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 52 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-12 21:14:40,760 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:14:41,049 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:14:41,049 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 70 treesize of output 57 [2024-09-12 21:14:41,223 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 17 proven. 43 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-12 21:14:41,224 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [720292074] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:14:41,224 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:14:41,224 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 16, 15] total 48 [2024-09-12 21:14:41,224 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [316728677] [2024-09-12 21:14:41,224 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:14:41,224 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2024-09-12 21:14:41,224 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:14:41,225 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2024-09-12 21:14:41,225 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=293, Invalid=1963, Unknown=0, NotChecked=0, Total=2256 [2024-09-12 21:14:41,225 INFO L87 Difference]: Start difference. First operand 1400 states and 1813 transitions. Second operand has 48 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 48 states have internal predecessors, (143), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:44,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:14:44,851 INFO L93 Difference]: Finished difference Result 3221 states and 4159 transitions. [2024-09-12 21:14:44,851 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2024-09-12 21:14:44,851 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 48 states have internal predecessors, (143), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-12 21:14:44,852 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:14:44,858 INFO L225 Difference]: With dead ends: 3221 [2024-09-12 21:14:44,858 INFO L226 Difference]: Without dead ends: 1979 [2024-09-12 21:14:44,861 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 196 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1981 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=935, Invalid=6037, Unknown=0, NotChecked=0, Total=6972 [2024-09-12 21:14:44,861 INFO L434 NwaCegarLoop]: 41 mSDtfsCounter, 226 mSDsluCounter, 741 mSDsCounter, 0 mSdLazyCounter, 1615 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 782 SdHoareTripleChecker+Invalid, 1680 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 1615 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-12 21:14:44,861 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [226 Valid, 782 Invalid, 1680 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 1615 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-12 21:14:44,863 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1979 states. [2024-09-12 21:14:46,310 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1979 to 1482. [2024-09-12 21:14:46,311 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1482 states, 1477 states have (on average 1.2538930264048747) internal successors, (1852), 1477 states have internal predecessors, (1852), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:46,313 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1482 states to 1482 states and 1856 transitions. [2024-09-12 21:14:46,315 INFO L78 Accepts]: Start accepts. Automaton has 1482 states and 1856 transitions. Word has length 66 [2024-09-12 21:14:46,315 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:14:46,315 INFO L474 AbstractCegarLoop]: Abstraction has 1482 states and 1856 transitions. [2024-09-12 21:14:46,315 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 48 states have internal predecessors, (143), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:46,316 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:46,316 INFO L276 IsEmpty]: Start isEmpty. Operand 1482 states and 1856 transitions. [2024-09-12 21:14:46,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-12 21:14:46,317 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:14:46,317 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:14:46,330 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Ended with exit code 0 [2024-09-12 21:14:46,518 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2024-09-12 21:14:46,518 INFO L399 AbstractCegarLoop]: === Iteration 23 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:14:46,518 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:46,518 INFO L85 PathProgramCache]: Analyzing trace with hash 571791422, now seen corresponding path program 7 times [2024-09-12 21:14:46,518 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:14:46,518 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [757664123] [2024-09-12 21:14:46,518 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:14:46,519 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:14:46,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:47,608 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:14:47,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:47,610 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 38 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2024-09-12 21:14:47,610 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:14:47,610 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [757664123] [2024-09-12 21:14:47,610 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [757664123] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:14:47,610 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1640949847] [2024-09-12 21:14:47,610 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-09-12 21:14:47,610 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:14:47,611 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:14:47,612 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:14:47,613 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2024-09-12 21:14:47,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:47,692 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-12 21:14:47,694 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:14:47,925 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 12 [2024-09-12 21:14:47,927 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-12 21:14:47,937 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 45 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-12 21:14:47,937 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:14:48,129 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:14:48,129 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 24 [2024-09-12 21:14:48,138 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:14:48,139 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 55 treesize of output 42 [2024-09-12 21:14:48,255 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 26 proven. 30 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-12 21:14:48,256 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1640949847] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:14:48,256 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:14:48,256 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 15, 14] total 38 [2024-09-12 21:14:48,256 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [846290500] [2024-09-12 21:14:48,256 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:14:48,256 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-12 21:14:48,256 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:14:48,257 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-12 21:14:48,257 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1198, Unknown=0, NotChecked=0, Total=1406 [2024-09-12 21:14:48,257 INFO L87 Difference]: Start difference. First operand 1482 states and 1856 transitions. Second operand has 38 states, 38 states have (on average 3.210526315789474) internal successors, (122), 38 states have internal predecessors, (122), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:51,088 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:14:51,088 INFO L93 Difference]: Finished difference Result 3078 states and 3847 transitions. [2024-09-12 21:14:51,088 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2024-09-12 21:14:51,089 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 3.210526315789474) internal successors, (122), 38 states have internal predecessors, (122), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-12 21:14:51,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:14:51,094 INFO L225 Difference]: With dead ends: 3078 [2024-09-12 21:14:51,094 INFO L226 Difference]: Without dead ends: 1806 [2024-09-12 21:14:51,096 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 191 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1436 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=728, Invalid=4384, Unknown=0, NotChecked=0, Total=5112 [2024-09-12 21:14:51,096 INFO L434 NwaCegarLoop]: 38 mSDtfsCounter, 220 mSDsluCounter, 547 mSDsCounter, 0 mSdLazyCounter, 1179 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 220 SdHoareTripleChecker+Valid, 585 SdHoareTripleChecker+Invalid, 1218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 1179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-12 21:14:51,096 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [220 Valid, 585 Invalid, 1218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 1179 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-12 21:14:51,097 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1806 states. [2024-09-12 21:14:52,552 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1806 to 1573. [2024-09-12 21:14:52,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1573 states, 1568 states have (on average 1.219387755102041) internal successors, (1912), 1568 states have internal predecessors, (1912), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:52,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1573 states to 1573 states and 1916 transitions. [2024-09-12 21:14:52,557 INFO L78 Accepts]: Start accepts. Automaton has 1573 states and 1916 transitions. Word has length 66 [2024-09-12 21:14:52,557 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:14:52,557 INFO L474 AbstractCegarLoop]: Abstraction has 1573 states and 1916 transitions. [2024-09-12 21:14:52,557 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 3.210526315789474) internal successors, (122), 38 states have internal predecessors, (122), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:52,557 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:52,557 INFO L276 IsEmpty]: Start isEmpty. Operand 1573 states and 1916 transitions. [2024-09-12 21:14:52,559 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-12 21:14:52,559 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:14:52,559 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:14:52,572 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Forceful destruction successful, exit code 0 [2024-09-12 21:14:52,759 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22,22 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:14:52,760 INFO L399 AbstractCegarLoop]: === Iteration 24 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:14:52,760 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:14:52,760 INFO L85 PathProgramCache]: Analyzing trace with hash 378012418, now seen corresponding path program 8 times [2024-09-12 21:14:52,760 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:14:52,760 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [137143266] [2024-09-12 21:14:52,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:14:52,760 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:14:52,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:54,365 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:14:54,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:14:54,368 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 48 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2024-09-12 21:14:54,368 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:14:54,368 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [137143266] [2024-09-12 21:14:54,368 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [137143266] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:14:54,368 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [542037593] [2024-09-12 21:14:54,368 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-12 21:14:54,368 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:14:54,368 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:14:54,369 INFO L229 MonitoredProcess]: Starting monitored process 23 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:14:54,370 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2024-09-12 21:14:54,452 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-12 21:14:54,452 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:14:54,454 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 61 conjuncts are in the unsatisfiable core [2024-09-12 21:14:54,456 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:14:54,885 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 12 [2024-09-12 21:14:54,886 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-12 21:14:54,898 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 62 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-09-12 21:14:54,898 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:14:55,265 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:14:55,265 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 24 [2024-09-12 21:14:55,569 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 21 proven. 44 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-12 21:14:55,569 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [542037593] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:14:55,569 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:14:55,570 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 17] total 47 [2024-09-12 21:14:55,570 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1503918007] [2024-09-12 21:14:55,570 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:14:55,570 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2024-09-12 21:14:55,570 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:14:55,571 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2024-09-12 21:14:55,571 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=289, Invalid=1873, Unknown=0, NotChecked=0, Total=2162 [2024-09-12 21:14:55,571 INFO L87 Difference]: Start difference. First operand 1573 states and 1916 transitions. Second operand has 47 states, 47 states have (on average 2.9361702127659575) internal successors, (138), 47 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:14:58,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:14:58,822 INFO L93 Difference]: Finished difference Result 1935 states and 2345 transitions. [2024-09-12 21:14:58,822 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2024-09-12 21:14:58,822 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 2.9361702127659575) internal successors, (138), 47 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-12 21:14:58,822 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:14:58,828 INFO L225 Difference]: With dead ends: 1935 [2024-09-12 21:14:58,828 INFO L226 Difference]: Without dead ends: 1664 [2024-09-12 21:14:58,828 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1711 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=817, Invalid=5035, Unknown=0, NotChecked=0, Total=5852 [2024-09-12 21:14:58,829 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 293 mSDsluCounter, 568 mSDsCounter, 0 mSdLazyCounter, 1144 mSolverCounterSat, 108 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 293 SdHoareTripleChecker+Valid, 600 SdHoareTripleChecker+Invalid, 1252 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 108 IncrementalHoareTripleChecker+Valid, 1144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-12 21:14:58,829 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [293 Valid, 600 Invalid, 1252 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [108 Valid, 1144 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-12 21:14:58,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1664 states. [2024-09-12 21:15:00,282 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1664 to 1528. [2024-09-12 21:15:00,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1528 states, 1523 states have (on average 1.2147078135259357) internal successors, (1850), 1523 states have internal predecessors, (1850), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:00,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1528 states to 1528 states and 1854 transitions. [2024-09-12 21:15:00,287 INFO L78 Accepts]: Start accepts. Automaton has 1528 states and 1854 transitions. Word has length 66 [2024-09-12 21:15:00,287 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:15:00,287 INFO L474 AbstractCegarLoop]: Abstraction has 1528 states and 1854 transitions. [2024-09-12 21:15:00,287 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 2.9361702127659575) internal successors, (138), 47 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:00,287 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:15:00,287 INFO L276 IsEmpty]: Start isEmpty. Operand 1528 states and 1854 transitions. [2024-09-12 21:15:00,289 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-12 21:15:00,289 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:15:00,289 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:15:00,303 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Ended with exit code 0 [2024-09-12 21:15:00,490 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2024-09-12 21:15:00,490 INFO L399 AbstractCegarLoop]: === Iteration 25 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:15:00,490 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:15:00,490 INFO L85 PathProgramCache]: Analyzing trace with hash -1621380802, now seen corresponding path program 9 times [2024-09-12 21:15:00,490 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:15:00,490 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1928201941] [2024-09-12 21:15:00,490 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:15:00,490 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:15:00,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:15:01,444 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:15:01,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:15:01,446 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 19 proven. 33 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2024-09-12 21:15:01,446 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:15:01,447 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1928201941] [2024-09-12 21:15:01,447 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1928201941] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:15:01,447 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1119019720] [2024-09-12 21:15:01,447 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-12 21:15:01,447 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:15:01,447 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:15:01,448 INFO L229 MonitoredProcess]: Starting monitored process 24 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:15:01,449 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2024-09-12 21:15:01,638 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2024-09-12 21:15:01,639 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:15:01,645 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 48 conjuncts are in the unsatisfiable core [2024-09-12 21:15:01,646 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:15:01,700 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 48 treesize of output 35 [2024-09-12 21:15:01,704 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 1 [2024-09-12 21:15:02,058 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-12 21:15:02,071 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 24 proven. 31 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2024-09-12 21:15:02,071 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:15:10,558 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 24 proven. 26 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2024-09-12 21:15:10,558 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1119019720] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:15:10,558 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:15:10,558 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 15, 15] total 44 [2024-09-12 21:15:10,558 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [701757558] [2024-09-12 21:15:10,558 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:15:10,559 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2024-09-12 21:15:10,559 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:15:10,559 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2024-09-12 21:15:10,560 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=357, Invalid=1533, Unknown=2, NotChecked=0, Total=1892 [2024-09-12 21:15:10,560 INFO L87 Difference]: Start difference. First operand 1528 states and 1854 transitions. Second operand has 44 states, 44 states have (on average 2.75) internal successors, (121), 44 states have internal predecessors, (121), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:23,669 WARN L293 SmtUtils]: Spent 12.08s on a formula simplification. DAG size of input: 66 DAG size of output: 53 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:15:35,870 WARN L293 SmtUtils]: Spent 12.11s on a formula simplification. DAG size of input: 62 DAG size of output: 49 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:15:37,583 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:15:37,583 INFO L93 Difference]: Finished difference Result 2757 states and 3328 transitions. [2024-09-12 21:15:37,583 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2024-09-12 21:15:37,583 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 2.75) internal successors, (121), 44 states have internal predecessors, (121), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-12 21:15:37,584 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:15:37,589 INFO L225 Difference]: With dead ends: 2757 [2024-09-12 21:15:37,589 INFO L226 Difference]: Without dead ends: 1467 [2024-09-12 21:15:37,591 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1400 ImplicationChecksByTransitivity, 33.6s TimeCoverageRelationStatistics Valid=856, Invalid=3834, Unknown=2, NotChecked=0, Total=4692 [2024-09-12 21:15:37,591 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 232 mSDsluCounter, 461 mSDsCounter, 0 mSdLazyCounter, 780 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 232 SdHoareTripleChecker+Valid, 489 SdHoareTripleChecker+Invalid, 843 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 780 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-12 21:15:37,592 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [232 Valid, 489 Invalid, 843 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 780 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-12 21:15:37,592 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1467 states. [2024-09-12 21:15:38,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1467 to 1111. [2024-09-12 21:15:38,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1111 states, 1106 states have (on average 1.1518987341772151) internal successors, (1274), 1106 states have internal predecessors, (1274), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:38,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1111 states to 1111 states and 1278 transitions. [2024-09-12 21:15:38,694 INFO L78 Accepts]: Start accepts. Automaton has 1111 states and 1278 transitions. Word has length 66 [2024-09-12 21:15:38,694 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:15:38,694 INFO L474 AbstractCegarLoop]: Abstraction has 1111 states and 1278 transitions. [2024-09-12 21:15:38,695 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 2.75) internal successors, (121), 44 states have internal predecessors, (121), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:38,695 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:15:38,695 INFO L276 IsEmpty]: Start isEmpty. Operand 1111 states and 1278 transitions. [2024-09-12 21:15:38,697 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2024-09-12 21:15:38,697 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:15:38,697 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:15:38,710 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Ended with exit code 0 [2024-09-12 21:15:38,897 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2024-09-12 21:15:38,897 INFO L399 AbstractCegarLoop]: === Iteration 26 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:15:38,897 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:15:38,898 INFO L85 PathProgramCache]: Analyzing trace with hash 1849335033, now seen corresponding path program 10 times [2024-09-12 21:15:38,898 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:15:38,898 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [794735228] [2024-09-12 21:15:38,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:15:38,898 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:15:38,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:15:39,114 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:15:39,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:15:39,115 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 0 proven. 33 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2024-09-12 21:15:39,116 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:15:39,116 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [794735228] [2024-09-12 21:15:39,116 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [794735228] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:15:39,116 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [655360049] [2024-09-12 21:15:39,116 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-12 21:15:39,116 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:15:39,116 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:15:39,118 INFO L229 MonitoredProcess]: Starting monitored process 25 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:15:39,119 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2024-09-12 21:15:39,207 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-12 21:15:39,207 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:15:39,209 INFO L262 TraceCheckSpWp]: Trace formula consists of 282 conjuncts, 44 conjuncts are in the unsatisfiable core [2024-09-12 21:15:39,210 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:15:39,561 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-12 21:15:39,562 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-12 21:15:39,576 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 20 proven. 50 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2024-09-12 21:15:39,576 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:15:39,873 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:15:39,873 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 68 treesize of output 55 [2024-09-12 21:15:39,884 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:15:39,885 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 35 [2024-09-12 21:15:39,998 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 21 proven. 30 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2024-09-12 21:15:39,999 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [655360049] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:15:39,999 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:15:39,999 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 14, 11] total 29 [2024-09-12 21:15:39,999 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1434599248] [2024-09-12 21:15:39,999 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:15:39,999 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2024-09-12 21:15:39,999 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:15:40,000 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2024-09-12 21:15:40,000 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=102, Invalid=710, Unknown=0, NotChecked=0, Total=812 [2024-09-12 21:15:40,000 INFO L87 Difference]: Start difference. First operand 1111 states and 1278 transitions. Second operand has 29 states, 29 states have (on average 4.137931034482759) internal successors, (120), 29 states have internal predecessors, (120), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:42,816 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:15:42,816 INFO L93 Difference]: Finished difference Result 1987 states and 2315 transitions. [2024-09-12 21:15:42,817 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2024-09-12 21:15:42,817 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 4.137931034482759) internal successors, (120), 29 states have internal predecessors, (120), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 68 [2024-09-12 21:15:42,817 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:15:42,823 INFO L225 Difference]: With dead ends: 1987 [2024-09-12 21:15:42,823 INFO L226 Difference]: Without dead ends: 1737 [2024-09-12 21:15:42,824 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 122 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 527 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=374, Invalid=2382, Unknown=0, NotChecked=0, Total=2756 [2024-09-12 21:15:42,825 INFO L434 NwaCegarLoop]: 36 mSDtfsCounter, 370 mSDsluCounter, 587 mSDsCounter, 0 mSdLazyCounter, 1010 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 370 SdHoareTripleChecker+Valid, 623 SdHoareTripleChecker+Invalid, 1021 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 1010 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-12 21:15:42,825 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [370 Valid, 623 Invalid, 1021 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 1010 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-12 21:15:42,826 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1737 states. [2024-09-12 21:15:43,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1737 to 1120. [2024-09-12 21:15:43,982 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1120 states, 1115 states have (on average 1.1542600896860986) internal successors, (1287), 1115 states have internal predecessors, (1287), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:43,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1120 states to 1120 states and 1291 transitions. [2024-09-12 21:15:43,987 INFO L78 Accepts]: Start accepts. Automaton has 1120 states and 1291 transitions. Word has length 68 [2024-09-12 21:15:43,987 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:15:43,987 INFO L474 AbstractCegarLoop]: Abstraction has 1120 states and 1291 transitions. [2024-09-12 21:15:43,987 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 4.137931034482759) internal successors, (120), 29 states have internal predecessors, (120), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:43,987 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:15:43,987 INFO L276 IsEmpty]: Start isEmpty. Operand 1120 states and 1291 transitions. [2024-09-12 21:15:43,989 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2024-09-12 21:15:43,989 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:15:43,989 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:15:44,004 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Ended with exit code 0 [2024-09-12 21:15:44,189 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2024-09-12 21:15:44,190 INFO L399 AbstractCegarLoop]: === Iteration 27 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:15:44,190 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:15:44,190 INFO L85 PathProgramCache]: Analyzing trace with hash 128915325, now seen corresponding path program 11 times [2024-09-12 21:15:44,190 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:15:44,190 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1861236357] [2024-09-12 21:15:44,190 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:15:44,190 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:15:44,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:15:44,377 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:15:44,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:15:44,378 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 39 proven. 27 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2024-09-12 21:15:44,379 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:15:44,379 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1861236357] [2024-09-12 21:15:44,379 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1861236357] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:15:44,379 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1908354161] [2024-09-12 21:15:44,379 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-12 21:15:44,379 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:15:44,379 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:15:44,380 INFO L229 MonitoredProcess]: Starting monitored process 26 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:15:44,380 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2024-09-12 21:15:45,333 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 9 check-sat command(s) [2024-09-12 21:15:45,334 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:15:45,336 INFO L262 TraceCheckSpWp]: Trace formula consists of 307 conjuncts, 17 conjuncts are in the unsatisfiable core [2024-09-12 21:15:45,337 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:15:45,423 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 39 proven. 27 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2024-09-12 21:15:45,423 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:15:45,571 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 39 proven. 27 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2024-09-12 21:15:45,572 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1908354161] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:15:45,572 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:15:45,572 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 8] total 18 [2024-09-12 21:15:45,572 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2136331053] [2024-09-12 21:15:45,572 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:15:45,572 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2024-09-12 21:15:45,572 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:15:45,573 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2024-09-12 21:15:45,573 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=72, Invalid=234, Unknown=0, NotChecked=0, Total=306 [2024-09-12 21:15:45,573 INFO L87 Difference]: Start difference. First operand 1120 states and 1291 transitions. Second operand has 18 states, 18 states have (on average 5.0) internal successors, (90), 18 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:46,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:15:46,607 INFO L93 Difference]: Finished difference Result 1478 states and 1679 transitions. [2024-09-12 21:15:46,608 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-12 21:15:46,608 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 5.0) internal successors, (90), 18 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 75 [2024-09-12 21:15:46,608 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:15:46,612 INFO L225 Difference]: With dead ends: 1478 [2024-09-12 21:15:46,612 INFO L226 Difference]: Without dead ends: 928 [2024-09-12 21:15:46,613 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 146 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 74 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=72, Invalid=234, Unknown=0, NotChecked=0, Total=306 [2024-09-12 21:15:46,614 INFO L434 NwaCegarLoop]: 31 mSDtfsCounter, 0 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 181 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 181 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-12 21:15:46,614 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 265 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 181 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-12 21:15:46,615 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 928 states. [2024-09-12 21:15:47,535 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 928 to 928. [2024-09-12 21:15:47,536 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 928 states, 923 states have (on average 1.14192849404117) internal successors, (1054), 923 states have internal predecessors, (1054), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:47,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 928 states to 928 states and 1058 transitions. [2024-09-12 21:15:47,540 INFO L78 Accepts]: Start accepts. Automaton has 928 states and 1058 transitions. Word has length 75 [2024-09-12 21:15:47,540 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:15:47,542 INFO L474 AbstractCegarLoop]: Abstraction has 928 states and 1058 transitions. [2024-09-12 21:15:47,542 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 5.0) internal successors, (90), 18 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:47,542 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:15:47,542 INFO L276 IsEmpty]: Start isEmpty. Operand 928 states and 1058 transitions. [2024-09-12 21:15:47,544 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2024-09-12 21:15:47,544 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:15:47,544 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:15:47,557 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Ended with exit code 0 [2024-09-12 21:15:47,744 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2024-09-12 21:15:47,745 INFO L399 AbstractCegarLoop]: === Iteration 28 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:15:47,745 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:15:47,745 INFO L85 PathProgramCache]: Analyzing trace with hash 846171212, now seen corresponding path program 12 times [2024-09-12 21:15:47,745 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:15:47,745 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [390779581] [2024-09-12 21:15:47,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:15:47,745 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:15:47,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:15:48,618 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:15:48,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:15:48,620 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 62 proven. 31 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-12 21:15:48,620 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:15:48,620 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [390779581] [2024-09-12 21:15:48,620 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [390779581] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:15:48,620 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [313984043] [2024-09-12 21:15:48,620 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-09-12 21:15:48,620 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:15:48,620 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:15:48,621 INFO L229 MonitoredProcess]: Starting monitored process 27 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:15:48,622 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2024-09-12 21:15:48,744 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 5 check-sat command(s) [2024-09-12 21:15:48,744 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:15:48,746 INFO L262 TraceCheckSpWp]: Trace formula consists of 240 conjuncts, 40 conjuncts are in the unsatisfiable core [2024-09-12 21:15:48,747 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:15:49,456 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 44 proven. 59 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-12 21:15:49,456 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:15:50,149 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 44 proven. 50 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2024-09-12 21:15:50,149 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [313984043] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:15:50,149 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:15:50,150 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 19, 16] total 42 [2024-09-12 21:15:50,150 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [50488192] [2024-09-12 21:15:50,150 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:15:50,150 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2024-09-12 21:15:50,150 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:15:50,150 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2024-09-12 21:15:50,151 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=270, Invalid=1452, Unknown=0, NotChecked=0, Total=1722 [2024-09-12 21:15:50,151 INFO L87 Difference]: Start difference. First operand 928 states and 1058 transitions. Second operand has 42 states, 42 states have (on average 3.2857142857142856) internal successors, (138), 42 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:53,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:15:53,282 INFO L93 Difference]: Finished difference Result 1306 states and 1480 transitions. [2024-09-12 21:15:53,282 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2024-09-12 21:15:53,282 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 3.2857142857142856) internal successors, (138), 42 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 76 [2024-09-12 21:15:53,282 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:15:53,287 INFO L225 Difference]: With dead ends: 1306 [2024-09-12 21:15:53,287 INFO L226 Difference]: Without dead ends: 1032 [2024-09-12 21:15:53,288 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1606 ImplicationChecksByTransitivity, 2.0s TimeCoverageRelationStatistics Valid=783, Invalid=4619, Unknown=0, NotChecked=0, Total=5402 [2024-09-12 21:15:53,291 INFO L434 NwaCegarLoop]: 31 mSDtfsCounter, 209 mSDsluCounter, 537 mSDsCounter, 0 mSdLazyCounter, 825 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 209 SdHoareTripleChecker+Valid, 568 SdHoareTripleChecker+Invalid, 861 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 825 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-12 21:15:53,292 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [209 Valid, 568 Invalid, 861 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 825 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-12 21:15:53,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1032 states. [2024-09-12 21:15:54,123 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1032 to 798. [2024-09-12 21:15:54,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 798 states, 793 states have (on average 1.1424968474148802) internal successors, (906), 793 states have internal predecessors, (906), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:54,124 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 798 states to 798 states and 910 transitions. [2024-09-12 21:15:54,126 INFO L78 Accepts]: Start accepts. Automaton has 798 states and 910 transitions. Word has length 76 [2024-09-12 21:15:54,126 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:15:54,127 INFO L474 AbstractCegarLoop]: Abstraction has 798 states and 910 transitions. [2024-09-12 21:15:54,127 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 42 states have (on average 3.2857142857142856) internal successors, (138), 42 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:54,127 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:15:54,127 INFO L276 IsEmpty]: Start isEmpty. Operand 798 states and 910 transitions. [2024-09-12 21:15:54,128 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2024-09-12 21:15:54,128 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:15:54,128 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:15:54,140 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Ended with exit code 0 [2024-09-12 21:15:54,328 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable27,27 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:15:54,328 INFO L399 AbstractCegarLoop]: === Iteration 29 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:15:54,329 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:15:54,329 INFO L85 PathProgramCache]: Analyzing trace with hash -984218334, now seen corresponding path program 13 times [2024-09-12 21:15:54,329 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:15:54,329 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [49228598] [2024-09-12 21:15:54,329 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:15:54,329 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:15:54,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:15:54,822 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:15:54,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:15:54,824 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 0 proven. 36 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2024-09-12 21:15:54,824 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:15:54,824 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [49228598] [2024-09-12 21:15:54,824 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [49228598] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:15:54,824 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [789875382] [2024-09-12 21:15:54,824 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-09-12 21:15:54,824 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:15:54,824 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:15:54,825 INFO L229 MonitoredProcess]: Starting monitored process 28 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:15:54,826 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2024-09-12 21:15:54,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:15:54,915 INFO L262 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 44 conjuncts are in the unsatisfiable core [2024-09-12 21:15:54,917 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:15:55,243 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 8 [2024-09-12 21:15:55,245 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 0 proven. 110 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-12 21:15:55,245 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:15:55,749 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-12 21:15:55,750 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 49 treesize of output 31 [2024-09-12 21:15:55,865 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 39 proven. 57 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-12 21:15:55,865 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [789875382] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:15:55,866 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:15:55,866 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 19, 15] total 39 [2024-09-12 21:15:55,866 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [980393306] [2024-09-12 21:15:55,866 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:15:55,866 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2024-09-12 21:15:55,866 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:15:55,866 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2024-09-12 21:15:55,867 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=220, Invalid=1262, Unknown=0, NotChecked=0, Total=1482 [2024-09-12 21:15:55,867 INFO L87 Difference]: Start difference. First operand 798 states and 910 transitions. Second operand has 39 states, 39 states have (on average 3.769230769230769) internal successors, (147), 39 states have internal predecessors, (147), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:58,360 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:15:58,361 INFO L93 Difference]: Finished difference Result 2303 states and 2696 transitions. [2024-09-12 21:15:58,361 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-12 21:15:58,361 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 39 states have (on average 3.769230769230769) internal successors, (147), 39 states have internal predecessors, (147), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 77 [2024-09-12 21:15:58,361 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:15:58,366 INFO L225 Difference]: With dead ends: 2303 [2024-09-12 21:15:58,366 INFO L226 Difference]: Without dead ends: 1608 [2024-09-12 21:15:58,368 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 130 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 706 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=381, Invalid=2375, Unknown=0, NotChecked=0, Total=2756 [2024-09-12 21:15:58,368 INFO L434 NwaCegarLoop]: 49 mSDtfsCounter, 194 mSDsluCounter, 758 mSDsCounter, 0 mSdLazyCounter, 806 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 194 SdHoareTripleChecker+Valid, 807 SdHoareTripleChecker+Invalid, 825 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 806 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-12 21:15:58,368 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [194 Valid, 807 Invalid, 825 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 806 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-12 21:15:58,369 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1608 states. [2024-09-12 21:15:59,517 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1608 to 1053. [2024-09-12 21:15:59,518 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1053 states, 1048 states have (on average 1.133587786259542) internal successors, (1188), 1048 states have internal predecessors, (1188), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:59,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1053 states to 1053 states and 1192 transitions. [2024-09-12 21:15:59,521 INFO L78 Accepts]: Start accepts. Automaton has 1053 states and 1192 transitions. Word has length 77 [2024-09-12 21:15:59,522 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:15:59,522 INFO L474 AbstractCegarLoop]: Abstraction has 1053 states and 1192 transitions. [2024-09-12 21:15:59,522 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 39 states have (on average 3.769230769230769) internal successors, (147), 39 states have internal predecessors, (147), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:15:59,522 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:15:59,522 INFO L276 IsEmpty]: Start isEmpty. Operand 1053 states and 1192 transitions. [2024-09-12 21:15:59,523 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2024-09-12 21:15:59,523 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:15:59,523 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 5, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:15:59,536 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Ended with exit code 0 [2024-09-12 21:15:59,724 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2024-09-12 21:15:59,724 INFO L399 AbstractCegarLoop]: === Iteration 30 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:15:59,724 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:15:59,724 INFO L85 PathProgramCache]: Analyzing trace with hash -1743097550, now seen corresponding path program 14 times [2024-09-12 21:15:59,724 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:15:59,724 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1848871438] [2024-09-12 21:15:59,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:15:59,724 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:15:59,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:16:00,058 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:16:00,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:16:00,059 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 0 proven. 132 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-12 21:16:00,059 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:16:00,060 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1848871438] [2024-09-12 21:16:00,060 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1848871438] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:16:00,060 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1942793598] [2024-09-12 21:16:00,060 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-12 21:16:00,060 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:16:00,060 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:16:00,062 INFO L229 MonitoredProcess]: Starting monitored process 29 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:16:00,063 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2024-09-12 21:16:00,172 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-12 21:16:00,172 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:16:00,174 INFO L262 TraceCheckSpWp]: Trace formula consists of 343 conjuncts, 39 conjuncts are in the unsatisfiable core [2024-09-12 21:16:00,175 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:16:00,422 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 0 proven. 144 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2024-09-12 21:16:00,423 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:16:00,752 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 0 proven. 132 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-12 21:16:00,752 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1942793598] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:16:00,752 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:16:00,752 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 15, 12] total 28 [2024-09-12 21:16:00,752 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [701933299] [2024-09-12 21:16:00,752 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:16:00,753 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2024-09-12 21:16:00,753 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:16:00,753 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2024-09-12 21:16:00,753 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=679, Unknown=0, NotChecked=0, Total=756 [2024-09-12 21:16:00,753 INFO L87 Difference]: Start difference. First operand 1053 states and 1192 transitions. Second operand has 28 states, 28 states have (on average 5.214285714285714) internal successors, (146), 26 states have internal predecessors, (146), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:16:04,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-12 21:16:04,900 INFO L93 Difference]: Finished difference Result 2107 states and 2440 transitions. [2024-09-12 21:16:04,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2024-09-12 21:16:04,900 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 5.214285714285714) internal successors, (146), 26 states have internal predecessors, (146), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 87 [2024-09-12 21:16:04,901 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-12 21:16:04,907 INFO L225 Difference]: With dead ends: 2107 [2024-09-12 21:16:04,907 INFO L226 Difference]: Without dead ends: 2102 [2024-09-12 21:16:04,908 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 229 GetRequests, 159 SyntacticMatches, 2 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1188 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=388, Invalid=4442, Unknown=0, NotChecked=0, Total=4830 [2024-09-12 21:16:04,908 INFO L434 NwaCegarLoop]: 175 mSDtfsCounter, 423 mSDsluCounter, 3016 mSDsCounter, 0 mSdLazyCounter, 2519 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 423 SdHoareTripleChecker+Valid, 3191 SdHoareTripleChecker+Invalid, 2548 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 2519 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.0s IncrementalHoareTripleChecker+Time [2024-09-12 21:16:04,909 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [423 Valid, 3191 Invalid, 2548 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 2519 Invalid, 0 Unknown, 0 Unchecked, 1.0s Time] [2024-09-12 21:16:04,910 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2102 states. [2024-09-12 21:16:06,514 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2102 to 1321. [2024-09-12 21:16:06,516 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1321 states, 1316 states have (on average 1.134498480243161) internal successors, (1493), 1316 states have internal predecessors, (1493), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:16:06,516 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1321 states to 1321 states and 1497 transitions. [2024-09-12 21:16:06,520 INFO L78 Accepts]: Start accepts. Automaton has 1321 states and 1497 transitions. Word has length 87 [2024-09-12 21:16:06,520 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-12 21:16:06,520 INFO L474 AbstractCegarLoop]: Abstraction has 1321 states and 1497 transitions. [2024-09-12 21:16:06,520 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 5.214285714285714) internal successors, (146), 26 states have internal predecessors, (146), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:16:06,521 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:16:06,523 INFO L276 IsEmpty]: Start isEmpty. Operand 1321 states and 1497 transitions. [2024-09-12 21:16:06,525 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2024-09-12 21:16:06,525 INFO L208 NwaCegarLoop]: Found error trace [2024-09-12 21:16:06,525 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-12 21:16:06,538 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2024-09-12 21:16:06,725 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,29 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:16:06,726 INFO L399 AbstractCegarLoop]: === Iteration 31 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-12 21:16:06,726 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-12 21:16:06,726 INFO L85 PathProgramCache]: Analyzing trace with hash 1965063732, now seen corresponding path program 15 times [2024-09-12 21:16:06,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-12 21:16:06,726 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [212274266] [2024-09-12 21:16:06,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-12 21:16:06,726 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-12 21:16:06,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:16:08,223 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-12 21:16:08,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-12 21:16:08,225 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 35 proven. 110 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2024-09-12 21:16:08,225 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-12 21:16:08,225 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [212274266] [2024-09-12 21:16:08,225 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [212274266] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-12 21:16:08,225 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1561822282] [2024-09-12 21:16:08,225 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-12 21:16:08,225 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-12 21:16:08,226 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-12 21:16:08,227 INFO L229 MonitoredProcess]: Starting monitored process 30 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-12 21:16:08,228 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2024-09-12 21:16:08,514 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2024-09-12 21:16:08,515 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-12 21:16:08,518 INFO L262 TraceCheckSpWp]: Trace formula consists of 319 conjuncts, 145 conjuncts are in the unsatisfiable core [2024-09-12 21:16:08,521 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-12 21:16:08,711 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 56 treesize of output 43 [2024-09-12 21:16:08,716 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 1 [2024-09-12 21:16:12,272 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-12 21:16:12,274 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-12 21:16:12,275 INFO L173 IndexEqualityManager]: detected equality via solver [2024-09-12 21:16:12,277 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-12 21:16:12,278 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 45 treesize of output 22 [2024-09-12 21:16:12,330 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 68 proven. 89 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-12 21:16:12,330 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-12 21:16:28,546 WARN L293 SmtUtils]: Spent 12.21s on a formula simplification that was a NOOP. DAG size: 71 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:16:43,838 WARN L293 SmtUtils]: Spent 7.91s on a formula simplification that was a NOOP. DAG size: 66 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:17:28,726 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 47 proven. 98 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2024-09-12 21:17:28,727 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1561822282] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-12 21:17:28,727 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-12 21:17:28,727 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 42, 38] total 97 [2024-09-12 21:17:28,727 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2116459319] [2024-09-12 21:17:28,727 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-12 21:17:28,727 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 97 states [2024-09-12 21:17:28,727 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-12 21:17:28,728 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 97 interpolants. [2024-09-12 21:17:28,728 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1375, Invalid=7932, Unknown=5, NotChecked=0, Total=9312 [2024-09-12 21:17:28,728 INFO L87 Difference]: Start difference. First operand 1321 states and 1497 transitions. Second operand has 97 states, 97 states have (on average 1.9793814432989691) internal successors, (192), 97 states have internal predecessors, (192), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-12 21:17:32,748 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-09-12 21:17:37,178 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-09-12 21:17:41,210 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-09-12 21:17:45,457 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2024-09-12 21:18:17,561 WARN L293 SmtUtils]: Spent 28.28s on a formula simplification. DAG size of input: 147 DAG size of output: 102 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:18:48,004 WARN L293 SmtUtils]: Spent 28.14s on a formula simplification. DAG size of input: 80 DAG size of output: 47 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:19:18,274 WARN L293 SmtUtils]: Spent 28.31s on a formula simplification. DAG size of input: 147 DAG size of output: 102 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:19:50,527 WARN L293 SmtUtils]: Spent 28.09s on a formula simplification. DAG size of input: 80 DAG size of output: 47 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:20:06,902 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-12 21:20:42,861 WARN L293 SmtUtils]: Spent 24.07s on a formula simplification. DAG size of input: 78 DAG size of output: 45 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:21:02,346 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.21s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-12 21:22:14,697 WARN L293 SmtUtils]: Spent 28.18s on a formula simplification. DAG size of input: 78 DAG size of output: 45 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:22:31,463 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-12 21:23:17,106 WARN L293 SmtUtils]: Spent 44.55s on a formula simplification. DAG size of input: 121 DAG size of output: 104 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:24:02,903 WARN L293 SmtUtils]: Spent 44.76s on a formula simplification. DAG size of input: 137 DAG size of output: 119 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:24:20,184 WARN L293 SmtUtils]: Spent 17.09s on a formula simplification. DAG size of input: 120 DAG size of output: 103 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:24:33,633 WARN L293 SmtUtils]: Spent 13.05s on a formula simplification. DAG size of input: 119 DAG size of output: 102 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:25:19,045 WARN L293 SmtUtils]: Spent 41.07s on a formula simplification. DAG size of input: 134 DAG size of output: 110 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:25:45,344 WARN L293 SmtUtils]: Spent 25.66s on a formula simplification. DAG size of input: 124 DAG size of output: 102 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-12 21:27:24,875 WARN L293 SmtUtils]: Spent 1.64m on a formula simplification. DAG size of input: 120 DAG size of output: 98 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) Killed by 15