./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/recursive/Ackermann04.c --full-output --witness-type correctness_witness --validate ../results/automizer-verification-files/SV-COMP24_unreach-call/Ackermann04.yml/witness-2.1.yml --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 1d5fa637 Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReachWitnessValidation.xml -i ../sv-benchmarks/c/recursive/Ackermann04.c ../results/automizer-verification-files/SV-COMP24_unreach-call/Ackermann04.yml/witness-2.1.yml -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --traceabstraction.positions.where.we.compute.the.hoare.annotation None --- Real Ultimate output --- This is Ultimate 0.2.4-dev-1d5fa63-m [2024-09-13 10:27:15,845 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-13 10:27:15,897 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-13 10:27:15,900 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-13 10:27:15,902 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-13 10:27:15,925 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-13 10:27:15,926 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-13 10:27:15,927 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-13 10:27:15,928 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-13 10:27:15,928 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-13 10:27:15,929 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-13 10:27:15,939 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-13 10:27:15,940 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-13 10:27:15,940 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-13 10:27:15,940 INFO L153 SettingsManager]: * Use SBE=true [2024-09-13 10:27:15,941 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-13 10:27:15,941 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-13 10:27:15,941 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-13 10:27:15,941 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-13 10:27:15,941 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-13 10:27:15,942 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-13 10:27:15,945 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-13 10:27:15,945 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-13 10:27:15,945 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-13 10:27:15,945 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-13 10:27:15,945 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-13 10:27:15,945 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-13 10:27:15,946 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-13 10:27:15,946 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-13 10:27:15,946 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-13 10:27:15,946 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-13 10:27:15,946 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-13 10:27:15,947 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-13 10:27:15,947 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-13 10:27:15,947 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-13 10:27:15,947 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-13 10:27:15,947 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-13 10:27:15,947 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-13 10:27:15,948 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-13 10:27:15,948 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-13 10:27:15,948 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-13 10:27:15,951 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-13 10:27:15,952 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> None [2024-09-13 10:27:16,145 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-13 10:27:16,160 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-13 10:27:16,162 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-13 10:27:16,163 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-13 10:27:16,163 INFO L274 PluginConnector]: CDTParser initialized [2024-09-13 10:27:16,164 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/recursive/Ackermann04.c [2024-09-13 10:27:17,430 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-13 10:27:17,576 INFO L384 CDTParser]: Found 1 translation units. [2024-09-13 10:27:17,576 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursive/Ackermann04.c [2024-09-13 10:27:17,582 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/874615c3d/67a5f2991be94c519e24b0e40a478d17/FLAGc76b0e313 [2024-09-13 10:27:17,990 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/874615c3d/67a5f2991be94c519e24b0e40a478d17 [2024-09-13 10:27:17,992 INFO L270 PluginConnector]: Initializing Witness Parser... [2024-09-13 10:27:17,993 INFO L274 PluginConnector]: Witness Parser initialized [2024-09-13 10:27:17,994 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../results/automizer-verification-files/SV-COMP24_unreach-call/Ackermann04.yml/witness-2.1.yml [2024-09-13 10:27:18,033 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-13 10:27:18,034 INFO L133 ToolchainWalker]: Walking toolchain with 5 elements. [2024-09-13 10:27:18,036 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-13 10:27:18,037 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-13 10:27:18,040 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-13 10:27:18,041 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.09 10:27:17" (1/2) ... [2024-09-13 10:27:18,042 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@54530579 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.09 10:27:18, skipping insertion in model container [2024-09-13 10:27:18,042 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.09 10:27:17" (1/2) ... [2024-09-13 10:27:18,043 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@76c0ce42 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.09 10:27:18, skipping insertion in model container [2024-09-13 10:27:18,043 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 13.09 10:27:18" (2/2) ... [2024-09-13 10:27:18,044 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@54530579 and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18, skipping insertion in model container [2024-09-13 10:27:18,044 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 13.09 10:27:18" (2/2) ... [2024-09-13 10:27:18,050 INFO L93 nessWitnessExtractor]: Found the following entries in the witness: [2024-09-13 10:27:18,051 INFO L1541 ArrayList]: Function contract at [L16]: requires null, ensures (((\old(n) < \result) || (\old(m) != 0)) && ((0 < \old(m)) || (\old(m) == 0))) [2024-09-13 10:27:18,065 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-13 10:27:18,210 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursive/Ackermann04.c[1166,1179] [2024-09-13 10:27:18,214 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-13 10:27:18,228 INFO L200 MainTranslator]: Completed pre-run Start Parsing Global [2024-09-13 10:27:18,264 WARN L247 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/recursive/Ackermann04.c[1166,1179] [2024-09-13 10:27:18,265 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-13 10:27:18,277 INFO L204 MainTranslator]: Completed translation [2024-09-13 10:27:18,277 INFO L201 PluginConnector]: Adding new model witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18 WrapperNode [2024-09-13 10:27:18,277 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-13 10:27:18,279 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-13 10:27:18,279 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-13 10:27:18,279 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-13 10:27:18,284 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18" (1/1) ... [2024-09-13 10:27:18,289 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18" (1/1) ... [2024-09-13 10:27:18,300 INFO L138 Inliner]: procedures = 13, calls = 11, calls flagged for inlining = 2, calls inlined = 2, statements flattened = 33 [2024-09-13 10:27:18,301 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-13 10:27:18,301 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-13 10:27:18,301 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-13 10:27:18,301 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-13 10:27:18,309 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18" (1/1) ... [2024-09-13 10:27:18,309 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18" (1/1) ... [2024-09-13 10:27:18,310 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18" (1/1) ... [2024-09-13 10:27:18,315 WARN L109 MemorySlicer]: Omit memory slicing because it failed with the following exception: Unsupported: Procedure ackermann is not part of the Ultimate memory model but has specification other that is not a ModifiesSpecification [2024-09-13 10:27:18,315 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18" (1/1) ... [2024-09-13 10:27:18,316 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18" (1/1) ... [2024-09-13 10:27:18,318 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18" (1/1) ... [2024-09-13 10:27:18,319 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18" (1/1) ... [2024-09-13 10:27:18,319 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18" (1/1) ... [2024-09-13 10:27:18,320 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18" (1/1) ... [2024-09-13 10:27:18,321 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-13 10:27:18,321 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-13 10:27:18,322 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-13 10:27:18,322 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-13 10:27:18,323 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18" (1/1) ... [2024-09-13 10:27:18,328 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-13 10:27:18,334 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 10:27:18,346 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-13 10:27:18,349 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-13 10:27:18,442 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-13 10:27:18,443 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-13 10:27:18,443 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-13 10:27:18,443 INFO L130 BoogieDeclarations]: Found specification of procedure ackermann [2024-09-13 10:27:18,443 INFO L138 BoogieDeclarations]: Found implementation of procedure ackermann [2024-09-13 10:27:18,443 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2024-09-13 10:27:18,498 INFO L242 CfgBuilder]: Building ICFG [2024-09-13 10:27:18,504 INFO L268 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-13 10:27:18,639 INFO L? ?]: Removed 18 outVars from TransFormulas that were not future-live. [2024-09-13 10:27:18,639 INFO L291 CfgBuilder]: Performing block encoding [2024-09-13 10:27:18,663 INFO L313 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-13 10:27:18,663 INFO L318 CfgBuilder]: Removed 0 assume(true) statements. [2024-09-13 10:27:18,664 INFO L201 PluginConnector]: Adding new model witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.09 10:27:18 BoogieIcfgContainer [2024-09-13 10:27:18,664 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-13 10:27:18,665 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-13 10:27:18,666 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-13 10:27:18,669 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-13 10:27:18,669 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 13.09 10:27:17" (1/4) ... [2024-09-13 10:27:18,670 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1e23cc25 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 13.09 10:27:18, skipping insertion in model container [2024-09-13 10:27:18,671 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 13.09 10:27:18" (2/4) ... [2024-09-13 10:27:18,671 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1e23cc25 and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CORRECTNESS_WITNESS 13.09 10:27:18, skipping insertion in model container [2024-09-13 10:27:18,671 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 13.09 10:27:18" (3/4) ... [2024-09-13 10:27:18,671 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1e23cc25 and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CORRECTNESS_WITNESS 13.09 10:27:18, skipping insertion in model container [2024-09-13 10:27:18,672 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.09 10:27:18" (4/4) ... [2024-09-13 10:27:18,673 INFO L112 eAbstractionObserver]: Analyzing ICFG Ackermann04.c [2024-09-13 10:27:18,688 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:None NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-13 10:27:18,688 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 2 error locations. [2024-09-13 10:27:18,725 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-13 10:27:18,733 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=None, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@700eb0f5, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-13 10:27:18,734 INFO L337 AbstractCegarLoop]: Starting to check reachability of 2 error locations. [2024-09-13 10:27:18,736 INFO L276 IsEmpty]: Start isEmpty. Operand has 22 states, 14 states have (on average 1.5) internal successors, (21), 16 states have internal predecessors, (21), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-13 10:27:18,742 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2024-09-13 10:27:18,744 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 10:27:18,745 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:18,745 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting ackermannErr0ENSURES_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ackermannErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 10:27:18,749 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 10:27:18,749 INFO L85 PathProgramCache]: Analyzing trace with hash -26348941, now seen corresponding path program 1 times [2024-09-13 10:27:18,756 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 10:27:18,756 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [476950011] [2024-09-13 10:27:18,757 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:18,757 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 10:27:18,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:18,983 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 10:27:18,983 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 10:27:18,984 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [476950011] [2024-09-13 10:27:18,984 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [476950011] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-13 10:27:18,984 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-13 10:27:18,984 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-09-13 10:27:18,986 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [53512706] [2024-09-13 10:27:18,986 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-13 10:27:18,989 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-09-13 10:27:18,989 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 10:27:19,009 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-09-13 10:27:19,010 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2024-09-13 10:27:19,015 INFO L87 Difference]: Start difference. First operand has 22 states, 14 states have (on average 1.5) internal successors, (21), 16 states have internal predecessors, (21), 4 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Second operand has 6 states, 5 states have (on average 1.2) internal successors, (6), 5 states have internal predecessors, (6), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 10:27:19,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 10:27:19,115 INFO L93 Difference]: Finished difference Result 39 states and 50 transitions. [2024-09-13 10:27:19,116 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-13 10:27:19,117 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 1.2) internal successors, (6), 5 states have internal predecessors, (6), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2024-09-13 10:27:19,118 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 10:27:19,122 INFO L225 Difference]: With dead ends: 39 [2024-09-13 10:27:19,122 INFO L226 Difference]: Without dead ends: 36 [2024-09-13 10:27:19,124 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2024-09-13 10:27:19,126 INFO L434 NwaCegarLoop]: 15 mSDtfsCounter, 12 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 100 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 53 SdHoareTripleChecker+Invalid, 101 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-13 10:27:19,126 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 53 Invalid, 101 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 100 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-13 10:27:19,139 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2024-09-13 10:27:19,150 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 30. [2024-09-13 10:27:19,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 20 states have (on average 1.3) internal successors, (26), 21 states have internal predecessors, (26), 6 states have call successors, (6), 2 states have call predecessors, (6), 2 states have return successors, (7), 6 states have call predecessors, (7), 6 states have call successors, (7) [2024-09-13 10:27:19,152 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 39 transitions. [2024-09-13 10:27:19,156 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 39 transitions. Word has length 7 [2024-09-13 10:27:19,157 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 10:27:19,157 INFO L474 AbstractCegarLoop]: Abstraction has 30 states and 39 transitions. [2024-09-13 10:27:19,157 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 1.2) internal successors, (6), 5 states have internal predecessors, (6), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 10:27:19,157 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 39 transitions. [2024-09-13 10:27:19,158 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2024-09-13 10:27:19,158 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 10:27:19,158 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:19,158 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-13 10:27:19,158 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting ackermannErr0ENSURES_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ackermannErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 10:27:19,159 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 10:27:19,159 INFO L85 PathProgramCache]: Analyzing trace with hash 1506041859, now seen corresponding path program 1 times [2024-09-13 10:27:19,159 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 10:27:19,164 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [691153877] [2024-09-13 10:27:19,164 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:19,164 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 10:27:19,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:19,345 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 10:27:19,346 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 10:27:19,346 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [691153877] [2024-09-13 10:27:19,346 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [691153877] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-13 10:27:19,346 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-13 10:27:19,346 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-09-13 10:27:19,346 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [643950944] [2024-09-13 10:27:19,346 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-13 10:27:19,347 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-13 10:27:19,347 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 10:27:19,348 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-13 10:27:19,348 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-09-13 10:27:19,348 INFO L87 Difference]: Start difference. First operand 30 states and 39 transitions. Second operand has 5 states, 4 states have (on average 2.25) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 10:27:19,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 10:27:19,417 INFO L93 Difference]: Finished difference Result 42 states and 53 transitions. [2024-09-13 10:27:19,417 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-13 10:27:19,417 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.25) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2024-09-13 10:27:19,417 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 10:27:19,418 INFO L225 Difference]: With dead ends: 42 [2024-09-13 10:27:19,418 INFO L226 Difference]: Without dead ends: 42 [2024-09-13 10:27:19,418 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-09-13 10:27:19,419 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 13 mSDsluCounter, 28 mSDsCounter, 0 mSdLazyCounter, 47 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 56 SdHoareTripleChecker+Invalid, 50 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 47 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-13 10:27:19,419 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 56 Invalid, 50 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 47 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-13 10:27:19,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 42 states. [2024-09-13 10:27:19,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 42 to 40. [2024-09-13 10:27:19,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 40 states, 27 states have (on average 1.2962962962962963) internal successors, (35), 28 states have internal predecessors, (35), 8 states have call successors, (8), 3 states have call predecessors, (8), 3 states have return successors, (9), 8 states have call predecessors, (9), 8 states have call successors, (9) [2024-09-13 10:27:19,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 40 states to 40 states and 52 transitions. [2024-09-13 10:27:19,427 INFO L78 Accepts]: Start accepts. Automaton has 40 states and 52 transitions. Word has length 11 [2024-09-13 10:27:19,427 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 10:27:19,427 INFO L474 AbstractCegarLoop]: Abstraction has 40 states and 52 transitions. [2024-09-13 10:27:19,427 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.25) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 10:27:19,428 INFO L276 IsEmpty]: Start isEmpty. Operand 40 states and 52 transitions. [2024-09-13 10:27:19,428 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2024-09-13 10:27:19,428 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 10:27:19,428 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:19,428 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-09-13 10:27:19,428 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting ackermannErr0ENSURES_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ackermannErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 10:27:19,429 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 10:27:19,429 INFO L85 PathProgramCache]: Analyzing trace with hash 1508872004, now seen corresponding path program 1 times [2024-09-13 10:27:19,429 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 10:27:19,429 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [883754404] [2024-09-13 10:27:19,429 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:19,429 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 10:27:19,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:19,531 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-13 10:27:19,532 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 10:27:19,532 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [883754404] [2024-09-13 10:27:19,532 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [883754404] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-13 10:27:19,532 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-13 10:27:19,533 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-09-13 10:27:19,533 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [223538201] [2024-09-13 10:27:19,533 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-13 10:27:19,533 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-09-13 10:27:19,534 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 10:27:19,534 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-09-13 10:27:19,535 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-09-13 10:27:19,535 INFO L87 Difference]: Start difference. First operand 40 states and 52 transitions. Second operand has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 10:27:19,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 10:27:19,597 INFO L93 Difference]: Finished difference Result 47 states and 69 transitions. [2024-09-13 10:27:19,598 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-09-13 10:27:19,598 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2024-09-13 10:27:19,598 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 10:27:19,599 INFO L225 Difference]: With dead ends: 47 [2024-09-13 10:27:19,599 INFO L226 Difference]: Without dead ends: 47 [2024-09-13 10:27:19,599 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-09-13 10:27:19,600 INFO L434 NwaCegarLoop]: 14 mSDtfsCounter, 7 mSDsluCounter, 12 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 11 SdHoareTripleChecker+Valid, 26 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-13 10:27:19,601 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [11 Valid, 26 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-13 10:27:19,601 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2024-09-13 10:27:19,607 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 43. [2024-09-13 10:27:19,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 29 states have (on average 1.3103448275862069) internal successors, (38), 31 states have internal predecessors, (38), 8 states have call successors, (8), 3 states have call predecessors, (8), 4 states have return successors, (15), 8 states have call predecessors, (15), 8 states have call successors, (15) [2024-09-13 10:27:19,609 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 61 transitions. [2024-09-13 10:27:19,609 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 61 transitions. Word has length 11 [2024-09-13 10:27:19,609 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 10:27:19,609 INFO L474 AbstractCegarLoop]: Abstraction has 43 states and 61 transitions. [2024-09-13 10:27:19,609 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 3.0) internal successors, (9), 4 states have internal predecessors, (9), 1 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 10:27:19,610 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 61 transitions. [2024-09-13 10:27:19,610 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2024-09-13 10:27:19,610 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 10:27:19,610 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:19,610 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-09-13 10:27:19,611 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ackermannErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 10:27:19,611 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 10:27:19,611 INFO L85 PathProgramCache]: Analyzing trace with hash 1484759222, now seen corresponding path program 1 times [2024-09-13 10:27:19,611 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 10:27:19,612 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [316281585] [2024-09-13 10:27:19,612 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:19,612 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 10:27:19,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:19,637 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:19,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:19,661 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-13 10:27:19,662 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 10:27:19,662 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [316281585] [2024-09-13 10:27:19,679 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [316281585] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-13 10:27:19,679 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-13 10:27:19,680 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-09-13 10:27:19,680 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1654936497] [2024-09-13 10:27:19,680 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-13 10:27:19,680 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-13 10:27:19,680 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 10:27:19,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-13 10:27:19,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2024-09-13 10:27:19,681 INFO L87 Difference]: Start difference. First operand 43 states and 61 transitions. Second operand has 5 states, 5 states have (on average 1.8) internal successors, (9), 5 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-13 10:27:19,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 10:27:19,721 INFO L93 Difference]: Finished difference Result 61 states and 94 transitions. [2024-09-13 10:27:19,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-13 10:27:19,722 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 1.8) internal successors, (9), 5 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 11 [2024-09-13 10:27:19,722 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 10:27:19,723 INFO L225 Difference]: With dead ends: 61 [2024-09-13 10:27:19,724 INFO L226 Difference]: Without dead ends: 57 [2024-09-13 10:27:19,724 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2024-09-13 10:27:19,725 INFO L434 NwaCegarLoop]: 16 mSDtfsCounter, 11 mSDsluCounter, 26 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 42 SdHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-13 10:27:19,725 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 42 Invalid, 47 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-13 10:27:19,726 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2024-09-13 10:27:19,731 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 51. [2024-09-13 10:27:19,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 34 states have (on average 1.2647058823529411) internal successors, (43), 35 states have internal predecessors, (43), 10 states have call successors, (10), 3 states have call predecessors, (10), 5 states have return successors, (27), 12 states have call predecessors, (27), 10 states have call successors, (27) [2024-09-13 10:27:19,733 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 80 transitions. [2024-09-13 10:27:19,733 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 80 transitions. Word has length 11 [2024-09-13 10:27:19,733 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 10:27:19,733 INFO L474 AbstractCegarLoop]: Abstraction has 51 states and 80 transitions. [2024-09-13 10:27:19,733 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 1.8) internal successors, (9), 5 states have internal predecessors, (9), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-13 10:27:19,733 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 80 transitions. [2024-09-13 10:27:19,734 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 15 [2024-09-13 10:27:19,734 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 10:27:19,734 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:19,734 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-09-13 10:27:19,734 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting ackermannErr0ENSURES_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ackermannErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 10:27:19,734 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 10:27:19,735 INFO L85 PathProgramCache]: Analyzing trace with hash 1264662995, now seen corresponding path program 1 times [2024-09-13 10:27:19,735 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 10:27:19,735 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [952578968] [2024-09-13 10:27:19,735 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:19,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 10:27:19,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:19,771 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2024-09-13 10:27:19,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:19,805 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-13 10:27:19,806 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 10:27:19,806 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [952578968] [2024-09-13 10:27:19,807 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [952578968] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 10:27:19,807 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [279481283] [2024-09-13 10:27:19,807 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:19,808 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:19,808 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 10:27:19,810 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 10:27:19,811 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-13 10:27:19,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:19,850 INFO L262 TraceCheckSpWp]: Trace formula consists of 65 conjuncts, 5 conjuncts are in the unsatisfiable core [2024-09-13 10:27:19,854 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 10:27:19,902 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-13 10:27:19,902 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-13 10:27:19,902 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [279481283] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-13 10:27:19,902 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-13 10:27:19,902 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [5] total 6 [2024-09-13 10:27:19,903 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1756062870] [2024-09-13 10:27:19,903 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-13 10:27:19,903 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-13 10:27:19,903 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 10:27:19,904 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-13 10:27:19,904 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2024-09-13 10:27:19,904 INFO L87 Difference]: Start difference. First operand 51 states and 80 transitions. Second operand has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-13 10:27:19,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 10:27:19,943 INFO L93 Difference]: Finished difference Result 58 states and 101 transitions. [2024-09-13 10:27:19,944 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-13 10:27:19,944 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 14 [2024-09-13 10:27:19,944 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 10:27:19,945 INFO L225 Difference]: With dead ends: 58 [2024-09-13 10:27:19,945 INFO L226 Difference]: Without dead ends: 52 [2024-09-13 10:27:19,945 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=24, Invalid=48, Unknown=0, NotChecked=0, Total=72 [2024-09-13 10:27:19,946 INFO L434 NwaCegarLoop]: 17 mSDtfsCounter, 10 mSDsluCounter, 13 mSDsCounter, 0 mSdLazyCounter, 35 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 40 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 35 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-13 10:27:19,946 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 30 Invalid, 40 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 35 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-13 10:27:19,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2024-09-13 10:27:19,952 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 44. [2024-09-13 10:27:19,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 44 states, 29 states have (on average 1.1379310344827587) internal successors, (33), 30 states have internal predecessors, (33), 9 states have call successors, (9), 3 states have call predecessors, (9), 5 states have return successors, (23), 10 states have call predecessors, (23), 9 states have call successors, (23) [2024-09-13 10:27:19,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 44 states to 44 states and 65 transitions. [2024-09-13 10:27:19,953 INFO L78 Accepts]: Start accepts. Automaton has 44 states and 65 transitions. Word has length 14 [2024-09-13 10:27:19,954 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 10:27:19,954 INFO L474 AbstractCegarLoop]: Abstraction has 44 states and 65 transitions. [2024-09-13 10:27:19,954 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 2.5) internal successors, (10), 5 states have internal predecessors, (10), 2 states have call successors, (2), 1 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-13 10:27:19,954 INFO L276 IsEmpty]: Start isEmpty. Operand 44 states and 65 transitions. [2024-09-13 10:27:19,954 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2024-09-13 10:27:19,955 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 10:27:19,955 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:19,967 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-09-13 10:27:20,158 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:20,159 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ackermannErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 10:27:20,159 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 10:27:20,160 INFO L85 PathProgramCache]: Analyzing trace with hash -507496426, now seen corresponding path program 1 times [2024-09-13 10:27:20,160 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 10:27:20,160 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [872744101] [2024-09-13 10:27:20,160 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:20,160 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 10:27:20,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:20,183 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:20,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:20,212 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:20,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:20,216 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-13 10:27:20,216 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 10:27:20,216 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [872744101] [2024-09-13 10:27:20,216 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [872744101] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 10:27:20,217 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2116264810] [2024-09-13 10:27:20,217 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:20,217 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:20,217 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 10:27:20,218 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 10:27:20,225 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-13 10:27:20,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:20,257 INFO L262 TraceCheckSpWp]: Trace formula consists of 76 conjuncts, 4 conjuncts are in the unsatisfiable core [2024-09-13 10:27:20,257 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 10:27:20,277 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-13 10:27:20,278 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-13 10:27:20,335 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-13 10:27:20,335 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2116264810] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-13 10:27:20,335 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-13 10:27:20,335 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5] total 10 [2024-09-13 10:27:20,335 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1542858233] [2024-09-13 10:27:20,336 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-13 10:27:20,336 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2024-09-13 10:27:20,336 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 10:27:20,337 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2024-09-13 10:27:20,337 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=63, Unknown=0, NotChecked=0, Total=90 [2024-09-13 10:27:20,337 INFO L87 Difference]: Start difference. First operand 44 states and 65 transitions. Second operand has 10 states, 10 states have (on average 2.6) internal successors, (26), 10 states have internal predecessors, (26), 4 states have call successors, (4), 1 states have call predecessors, (4), 4 states have return successors, (6), 5 states have call predecessors, (6), 4 states have call successors, (6) [2024-09-13 10:27:20,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 10:27:20,442 INFO L93 Difference]: Finished difference Result 62 states and 102 transitions. [2024-09-13 10:27:20,442 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-13 10:27:20,442 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 2.6) internal successors, (26), 10 states have internal predecessors, (26), 4 states have call successors, (4), 1 states have call predecessors, (4), 4 states have return successors, (6), 5 states have call predecessors, (6), 4 states have call successors, (6) Word has length 18 [2024-09-13 10:27:20,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 10:27:20,443 INFO L225 Difference]: With dead ends: 62 [2024-09-13 10:27:20,443 INFO L226 Difference]: Without dead ends: 53 [2024-09-13 10:27:20,444 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 46 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=93, Unknown=0, NotChecked=0, Total=132 [2024-09-13 10:27:20,444 INFO L434 NwaCegarLoop]: 18 mSDtfsCounter, 20 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 118 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 20 SdHoareTripleChecker+Valid, 56 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 118 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-13 10:27:20,445 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [20 Valid, 56 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 118 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-13 10:27:20,445 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2024-09-13 10:27:20,450 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 44. [2024-09-13 10:27:20,450 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 44 states, 29 states have (on average 1.1379310344827587) internal successors, (33), 30 states have internal predecessors, (33), 9 states have call successors, (9), 3 states have call predecessors, (9), 5 states have return successors, (21), 10 states have call predecessors, (21), 9 states have call successors, (21) [2024-09-13 10:27:20,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 44 states to 44 states and 63 transitions. [2024-09-13 10:27:20,451 INFO L78 Accepts]: Start accepts. Automaton has 44 states and 63 transitions. Word has length 18 [2024-09-13 10:27:20,451 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 10:27:20,451 INFO L474 AbstractCegarLoop]: Abstraction has 44 states and 63 transitions. [2024-09-13 10:27:20,451 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 2.6) internal successors, (26), 10 states have internal predecessors, (26), 4 states have call successors, (4), 1 states have call predecessors, (4), 4 states have return successors, (6), 5 states have call predecessors, (6), 4 states have call successors, (6) [2024-09-13 10:27:20,451 INFO L276 IsEmpty]: Start isEmpty. Operand 44 states and 63 transitions. [2024-09-13 10:27:20,453 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2024-09-13 10:27:20,453 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 10:27:20,453 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 3, 3, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:20,465 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-09-13 10:27:20,653 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2024-09-13 10:27:20,654 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ackermannErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 10:27:20,654 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 10:27:20,655 INFO L85 PathProgramCache]: Analyzing trace with hash -506552652, now seen corresponding path program 1 times [2024-09-13 10:27:20,655 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 10:27:20,655 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1642962793] [2024-09-13 10:27:20,655 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:20,655 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 10:27:20,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:20,712 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:20,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:20,791 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:20,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:20,824 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:20,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:20,839 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:20,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:20,859 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:20,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:20,863 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2024-09-13 10:27:20,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:20,866 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 6 proven. 27 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2024-09-13 10:27:20,866 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 10:27:20,866 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1642962793] [2024-09-13 10:27:20,866 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1642962793] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 10:27:20,867 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1759226306] [2024-09-13 10:27:20,867 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:20,867 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:20,867 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 10:27:20,871 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 10:27:20,872 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-13 10:27:20,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:20,912 INFO L262 TraceCheckSpWp]: Trace formula consists of 156 conjuncts, 10 conjuncts are in the unsatisfiable core [2024-09-13 10:27:20,914 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 10:27:20,961 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 6 proven. 24 refuted. 0 times theorem prover too weak. 37 trivial. 0 not checked. [2024-09-13 10:27:20,962 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-13 10:27:21,359 INFO L134 CoverageAnalysis]: Checked inductivity of 67 backedges. 6 proven. 27 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2024-09-13 10:27:21,360 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1759226306] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-13 10:27:21,360 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-13 10:27:21,360 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6, 7] total 11 [2024-09-13 10:27:21,360 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1946278205] [2024-09-13 10:27:21,360 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-13 10:27:21,360 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2024-09-13 10:27:21,361 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 10:27:21,361 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2024-09-13 10:27:21,361 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=74, Unknown=0, NotChecked=0, Total=110 [2024-09-13 10:27:21,361 INFO L87 Difference]: Start difference. First operand 44 states and 63 transitions. Second operand has 11 states, 11 states have (on average 2.909090909090909) internal successors, (32), 11 states have internal predecessors, (32), 5 states have call successors, (8), 1 states have call predecessors, (8), 4 states have return successors, (8), 2 states have call predecessors, (8), 5 states have call successors, (8) [2024-09-13 10:27:21,447 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 10:27:21,447 INFO L93 Difference]: Finished difference Result 76 states and 108 transitions. [2024-09-13 10:27:21,447 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-09-13 10:27:21,447 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 2.909090909090909) internal successors, (32), 11 states have internal predecessors, (32), 5 states have call successors, (8), 1 states have call predecessors, (8), 4 states have return successors, (8), 2 states have call predecessors, (8), 5 states have call successors, (8) Word has length 44 [2024-09-13 10:27:21,448 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 10:27:21,448 INFO L225 Difference]: With dead ends: 76 [2024-09-13 10:27:21,448 INFO L226 Difference]: Without dead ends: 58 [2024-09-13 10:27:21,449 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 110 GetRequests, 93 SyntacticMatches, 5 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 35 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=66, Invalid=116, Unknown=0, NotChecked=0, Total=182 [2024-09-13 10:27:21,453 INFO L434 NwaCegarLoop]: 19 mSDtfsCounter, 18 mSDsluCounter, 40 mSDsCounter, 0 mSdLazyCounter, 93 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 26 SdHoareTripleChecker+Valid, 59 SdHoareTripleChecker+Invalid, 114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 93 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-13 10:27:21,453 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [26 Valid, 59 Invalid, 114 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 93 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-13 10:27:21,454 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58 states. [2024-09-13 10:27:21,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 53. [2024-09-13 10:27:21,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 35 states have (on average 1.1142857142857143) internal successors, (39), 36 states have internal predecessors, (39), 10 states have call successors, (10), 4 states have call predecessors, (10), 7 states have return successors, (23), 12 states have call predecessors, (23), 10 states have call successors, (23) [2024-09-13 10:27:21,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 72 transitions. [2024-09-13 10:27:21,460 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 72 transitions. Word has length 44 [2024-09-13 10:27:21,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 10:27:21,460 INFO L474 AbstractCegarLoop]: Abstraction has 53 states and 72 transitions. [2024-09-13 10:27:21,460 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 2.909090909090909) internal successors, (32), 11 states have internal predecessors, (32), 5 states have call successors, (8), 1 states have call predecessors, (8), 4 states have return successors, (8), 2 states have call predecessors, (8), 5 states have call successors, (8) [2024-09-13 10:27:21,460 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 72 transitions. [2024-09-13 10:27:21,462 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 119 [2024-09-13 10:27:21,463 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 10:27:21,463 INFO L216 NwaCegarLoop]: trace histogram [17, 17, 11, 6, 6, 6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:21,478 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-09-13 10:27:21,666 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2024-09-13 10:27:21,667 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ackermannErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 10:27:21,668 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 10:27:21,668 INFO L85 PathProgramCache]: Analyzing trace with hash 320389373, now seen corresponding path program 2 times [2024-09-13 10:27:21,668 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 10:27:21,668 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1129991983] [2024-09-13 10:27:21,668 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:21,669 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 10:27:21,726 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:21,939 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:21,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,100 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:22,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,219 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:22,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,251 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:22,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,275 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:22,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,289 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:22,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,306 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:22,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,309 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2024-09-13 10:27:22,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,347 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:22,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,374 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:22,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,387 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:22,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,400 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:22,402 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,404 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2024-09-13 10:27:22,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,410 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:22,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,415 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:22,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,421 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:22,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,424 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:22,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:22,427 INFO L134 CoverageAnalysis]: Checked inductivity of 669 backedges. 114 proven. 279 refuted. 0 times theorem prover too weak. 276 trivial. 0 not checked. [2024-09-13 10:27:22,427 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 10:27:22,427 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1129991983] [2024-09-13 10:27:22,427 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1129991983] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 10:27:22,428 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1261003715] [2024-09-13 10:27:22,428 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-13 10:27:22,428 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:22,428 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 10:27:22,429 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 10:27:22,433 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-13 10:27:22,504 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-13 10:27:22,505 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-13 10:27:22,506 INFO L262 TraceCheckSpWp]: Trace formula consists of 381 conjuncts, 17 conjuncts are in the unsatisfiable core [2024-09-13 10:27:22,509 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 10:27:22,671 INFO L134 CoverageAnalysis]: Checked inductivity of 669 backedges. 360 proven. 86 refuted. 0 times theorem prover too weak. 223 trivial. 0 not checked. [2024-09-13 10:27:22,672 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-13 10:27:24,193 INFO L134 CoverageAnalysis]: Checked inductivity of 669 backedges. 115 proven. 179 refuted. 0 times theorem prover too weak. 375 trivial. 0 not checked. [2024-09-13 10:27:24,194 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1261003715] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-13 10:27:24,194 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-13 10:27:24,194 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 12, 15] total 32 [2024-09-13 10:27:24,194 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1923377164] [2024-09-13 10:27:24,194 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-13 10:27:24,194 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2024-09-13 10:27:24,195 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 10:27:24,195 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2024-09-13 10:27:24,195 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=107, Invalid=885, Unknown=0, NotChecked=0, Total=992 [2024-09-13 10:27:24,196 INFO L87 Difference]: Start difference. First operand 53 states and 72 transitions. Second operand has 32 states, 32 states have (on average 2.3125) internal successors, (74), 26 states have internal predecessors, (74), 11 states have call successors, (18), 2 states have call predecessors, (18), 15 states have return successors, (32), 18 states have call predecessors, (32), 11 states have call successors, (32) [2024-09-13 10:27:24,882 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 10:27:24,882 INFO L93 Difference]: Finished difference Result 94 states and 135 transitions. [2024-09-13 10:27:24,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2024-09-13 10:27:24,883 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 2.3125) internal successors, (74), 26 states have internal predecessors, (74), 11 states have call successors, (18), 2 states have call predecessors, (18), 15 states have return successors, (32), 18 states have call predecessors, (32), 11 states have call successors, (32) Word has length 118 [2024-09-13 10:27:24,883 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 10:27:24,885 INFO L225 Difference]: With dead ends: 94 [2024-09-13 10:27:24,885 INFO L226 Difference]: Without dead ends: 94 [2024-09-13 10:27:24,886 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 307 GetRequests, 250 SyntacticMatches, 1 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 657 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=539, Invalid=2767, Unknown=0, NotChecked=0, Total=3306 [2024-09-13 10:27:24,886 INFO L434 NwaCegarLoop]: 14 mSDtfsCounter, 44 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 603 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 666 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 603 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-13 10:27:24,886 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 102 Invalid, 666 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 603 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-09-13 10:27:24,887 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2024-09-13 10:27:24,898 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 81. [2024-09-13 10:27:24,898 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81 states, 53 states have (on average 1.1132075471698113) internal successors, (59), 55 states have internal predecessors, (59), 16 states have call successors, (16), 7 states have call predecessors, (16), 11 states have return successors, (41), 18 states have call predecessors, (41), 16 states have call successors, (41) [2024-09-13 10:27:24,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 116 transitions. [2024-09-13 10:27:24,900 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 116 transitions. Word has length 118 [2024-09-13 10:27:24,900 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 10:27:24,900 INFO L474 AbstractCegarLoop]: Abstraction has 81 states and 116 transitions. [2024-09-13 10:27:24,900 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 2.3125) internal successors, (74), 26 states have internal predecessors, (74), 11 states have call successors, (18), 2 states have call predecessors, (18), 15 states have return successors, (32), 18 states have call predecessors, (32), 11 states have call successors, (32) [2024-09-13 10:27:24,900 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 116 transitions. [2024-09-13 10:27:24,903 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 105 [2024-09-13 10:27:24,903 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 10:27:24,903 INFO L216 NwaCegarLoop]: trace histogram [15, 15, 9, 6, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:24,920 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2024-09-13 10:27:25,104 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:25,104 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ackermannErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 10:27:25,104 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 10:27:25,104 INFO L85 PathProgramCache]: Analyzing trace with hash 1065367807, now seen corresponding path program 3 times [2024-09-13 10:27:25,104 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 10:27:25,104 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [866130392] [2024-09-13 10:27:25,104 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:25,105 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 10:27:25,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,259 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:25,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,435 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:25,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,493 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:25,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,525 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:25,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,554 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:25,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,572 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:25,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,625 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:25,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,637 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2024-09-13 10:27:25,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,670 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:25,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,704 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:25,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,710 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:25,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,714 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2024-09-13 10:27:25,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,734 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:25,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,746 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:25,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,750 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:25,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:25,753 INFO L134 CoverageAnalysis]: Checked inductivity of 508 backedges. 148 proven. 171 refuted. 0 times theorem prover too weak. 189 trivial. 0 not checked. [2024-09-13 10:27:25,754 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 10:27:25,754 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [866130392] [2024-09-13 10:27:25,754 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [866130392] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 10:27:25,754 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [49116829] [2024-09-13 10:27:25,754 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-13 10:27:25,754 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:25,754 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 10:27:25,761 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 10:27:25,762 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-13 10:27:25,834 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 9 check-sat command(s) [2024-09-13 10:27:25,834 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-13 10:27:25,835 INFO L262 TraceCheckSpWp]: Trace formula consists of 237 conjuncts, 19 conjuncts are in the unsatisfiable core [2024-09-13 10:27:25,837 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 10:27:25,902 INFO L134 CoverageAnalysis]: Checked inductivity of 508 backedges. 190 proven. 71 refuted. 0 times theorem prover too weak. 247 trivial. 0 not checked. [2024-09-13 10:27:25,902 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-13 10:27:26,916 INFO L134 CoverageAnalysis]: Checked inductivity of 508 backedges. 208 proven. 61 refuted. 0 times theorem prover too weak. 239 trivial. 0 not checked. [2024-09-13 10:27:26,916 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [49116829] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-13 10:27:26,917 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-13 10:27:26,917 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 12, 15] total 28 [2024-09-13 10:27:26,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [323878067] [2024-09-13 10:27:26,917 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-13 10:27:26,917 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2024-09-13 10:27:26,917 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 10:27:26,918 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2024-09-13 10:27:26,918 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=102, Invalid=654, Unknown=0, NotChecked=0, Total=756 [2024-09-13 10:27:26,919 INFO L87 Difference]: Start difference. First operand 81 states and 116 transitions. Second operand has 28 states, 28 states have (on average 2.2142857142857144) internal successors, (62), 23 states have internal predecessors, (62), 11 states have call successors, (14), 1 states have call predecessors, (14), 11 states have return successors, (24), 14 states have call predecessors, (24), 11 states have call successors, (24) [2024-09-13 10:27:27,350 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 10:27:27,350 INFO L93 Difference]: Finished difference Result 102 states and 146 transitions. [2024-09-13 10:27:27,351 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2024-09-13 10:27:27,351 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 2.2142857142857144) internal successors, (62), 23 states have internal predecessors, (62), 11 states have call successors, (14), 1 states have call predecessors, (14), 11 states have return successors, (24), 14 states have call predecessors, (24), 11 states have call successors, (24) Word has length 104 [2024-09-13 10:27:27,351 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 10:27:27,352 INFO L225 Difference]: With dead ends: 102 [2024-09-13 10:27:27,352 INFO L226 Difference]: Without dead ends: 99 [2024-09-13 10:27:27,353 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 276 GetRequests, 226 SyntacticMatches, 5 SemanticMatches, 45 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 348 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=379, Invalid=1783, Unknown=0, NotChecked=0, Total=2162 [2024-09-13 10:27:27,353 INFO L434 NwaCegarLoop]: 13 mSDtfsCounter, 44 mSDsluCounter, 91 mSDsCounter, 0 mSdLazyCounter, 529 mSolverCounterSat, 58 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 44 SdHoareTripleChecker+Valid, 104 SdHoareTripleChecker+Invalid, 587 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 58 IncrementalHoareTripleChecker+Valid, 529 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-13 10:27:27,353 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [44 Valid, 104 Invalid, 587 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [58 Valid, 529 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-13 10:27:27,354 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2024-09-13 10:27:27,363 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 99. [2024-09-13 10:27:27,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 99 states, 65 states have (on average 1.0923076923076922) internal successors, (71), 66 states have internal predecessors, (71), 19 states have call successors, (19), 8 states have call predecessors, (19), 14 states have return successors, (49), 24 states have call predecessors, (49), 19 states have call successors, (49) [2024-09-13 10:27:27,367 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 139 transitions. [2024-09-13 10:27:27,368 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 139 transitions. Word has length 104 [2024-09-13 10:27:27,368 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 10:27:27,368 INFO L474 AbstractCegarLoop]: Abstraction has 99 states and 139 transitions. [2024-09-13 10:27:27,368 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 2.2142857142857144) internal successors, (62), 23 states have internal predecessors, (62), 11 states have call successors, (14), 1 states have call predecessors, (14), 11 states have return successors, (24), 14 states have call predecessors, (24), 11 states have call successors, (24) [2024-09-13 10:27:27,368 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 139 transitions. [2024-09-13 10:27:27,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 131 [2024-09-13 10:27:27,370 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 10:27:27,370 INFO L216 NwaCegarLoop]: trace histogram [19, 19, 11, 8, 7, 7, 7, 7, 7, 7, 7, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:27,382 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-09-13 10:27:27,574 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:27,575 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ackermannErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 10:27:27,575 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 10:27:27,575 INFO L85 PathProgramCache]: Analyzing trace with hash -1993615657, now seen corresponding path program 4 times [2024-09-13 10:27:27,576 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 10:27:27,576 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [242739685] [2024-09-13 10:27:27,576 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:27,576 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 10:27:27,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:27,712 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:27,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:27,830 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:27,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:27,892 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:27,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:27,921 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:27,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:27,947 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:27,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:27,965 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:27,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:27,995 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:27,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:28,006 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2024-09-13 10:27:28,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:28,044 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:28,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:28,068 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:28,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:28,115 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:28,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:28,119 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:28,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:28,123 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2024-09-13 10:27:28,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:28,126 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2024-09-13 10:27:28,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:28,135 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:28,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:28,141 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:28,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:28,144 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:28,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:28,146 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:28,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:28,148 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2024-09-13 10:27:28,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:28,154 INFO L134 CoverageAnalysis]: Checked inductivity of 835 backedges. 139 proven. 307 refuted. 0 times theorem prover too weak. 389 trivial. 0 not checked. [2024-09-13 10:27:28,155 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 10:27:28,156 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [242739685] [2024-09-13 10:27:28,156 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [242739685] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 10:27:28,156 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1220214287] [2024-09-13 10:27:28,156 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-13 10:27:28,156 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:28,157 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 10:27:28,158 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 10:27:28,159 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-13 10:27:28,267 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-13 10:27:28,268 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-13 10:27:28,269 INFO L262 TraceCheckSpWp]: Trace formula consists of 419 conjuncts, 21 conjuncts are in the unsatisfiable core [2024-09-13 10:27:28,272 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 10:27:28,351 INFO L134 CoverageAnalysis]: Checked inductivity of 835 backedges. 475 proven. 114 refuted. 0 times theorem prover too weak. 246 trivial. 0 not checked. [2024-09-13 10:27:28,351 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-13 10:27:29,723 INFO L134 CoverageAnalysis]: Checked inductivity of 835 backedges. 155 proven. 295 refuted. 0 times theorem prover too weak. 385 trivial. 0 not checked. [2024-09-13 10:27:29,723 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1220214287] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-13 10:27:29,723 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-13 10:27:29,723 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 14, 17] total 24 [2024-09-13 10:27:29,723 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1724111336] [2024-09-13 10:27:29,723 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-13 10:27:29,724 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2024-09-13 10:27:29,724 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 10:27:29,724 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2024-09-13 10:27:29,724 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=86, Invalid=466, Unknown=0, NotChecked=0, Total=552 [2024-09-13 10:27:29,725 INFO L87 Difference]: Start difference. First operand 99 states and 139 transitions. Second operand has 24 states, 24 states have (on average 2.875) internal successors, (69), 21 states have internal predecessors, (69), 12 states have call successors, (18), 2 states have call predecessors, (18), 11 states have return successors, (27), 11 states have call predecessors, (27), 12 states have call successors, (27) [2024-09-13 10:27:30,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 10:27:30,138 INFO L93 Difference]: Finished difference Result 121 states and 175 transitions. [2024-09-13 10:27:30,138 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 25 states. [2024-09-13 10:27:30,138 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 24 states have (on average 2.875) internal successors, (69), 21 states have internal predecessors, (69), 12 states have call successors, (18), 2 states have call predecessors, (18), 11 states have return successors, (27), 11 states have call predecessors, (27), 12 states have call successors, (27) Word has length 130 [2024-09-13 10:27:30,139 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 10:27:30,140 INFO L225 Difference]: With dead ends: 121 [2024-09-13 10:27:30,140 INFO L226 Difference]: Without dead ends: 121 [2024-09-13 10:27:30,141 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 336 GetRequests, 282 SyntacticMatches, 11 SemanticMatches, 43 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 353 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=405, Invalid=1575, Unknown=0, NotChecked=0, Total=1980 [2024-09-13 10:27:30,142 INFO L434 NwaCegarLoop]: 12 mSDtfsCounter, 53 mSDsluCounter, 90 mSDsCounter, 0 mSdLazyCounter, 423 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 102 SdHoareTripleChecker+Invalid, 489 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 423 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-13 10:27:30,142 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 102 Invalid, 489 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 423 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-13 10:27:30,143 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2024-09-13 10:27:30,153 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 114. [2024-09-13 10:27:30,157 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 114 states, 74 states have (on average 1.0810810810810811) internal successors, (80), 75 states have internal predecessors, (80), 22 states have call successors, (22), 8 states have call predecessors, (22), 17 states have return successors, (62), 30 states have call predecessors, (62), 22 states have call successors, (62) [2024-09-13 10:27:30,158 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 114 states to 114 states and 164 transitions. [2024-09-13 10:27:30,158 INFO L78 Accepts]: Start accepts. Automaton has 114 states and 164 transitions. Word has length 130 [2024-09-13 10:27:30,158 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 10:27:30,158 INFO L474 AbstractCegarLoop]: Abstraction has 114 states and 164 transitions. [2024-09-13 10:27:30,158 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 24 states have (on average 2.875) internal successors, (69), 21 states have internal predecessors, (69), 12 states have call successors, (18), 2 states have call predecessors, (18), 11 states have return successors, (27), 11 states have call predecessors, (27), 12 states have call successors, (27) [2024-09-13 10:27:30,158 INFO L276 IsEmpty]: Start isEmpty. Operand 114 states and 164 transitions. [2024-09-13 10:27:30,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 157 [2024-09-13 10:27:30,160 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 10:27:30,160 INFO L216 NwaCegarLoop]: trace histogram [23, 23, 13, 10, 9, 9, 9, 9, 9, 9, 9, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:30,174 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2024-09-13 10:27:30,360 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2024-09-13 10:27:30,361 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ackermannErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 10:27:30,361 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 10:27:30,361 INFO L85 PathProgramCache]: Analyzing trace with hash -1800834689, now seen corresponding path program 5 times [2024-09-13 10:27:30,361 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 10:27:30,362 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [631085303] [2024-09-13 10:27:30,362 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:30,362 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 10:27:30,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:30,636 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:30,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:30,826 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:30,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:30,937 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:30,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:30,942 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:30,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:30,945 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:30,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:30,949 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:30,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:30,951 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:30,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:30,952 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2024-09-13 10:27:30,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,000 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:31,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,041 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:31,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,074 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:31,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,094 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:31,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,126 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:31,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,137 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2024-09-13 10:27:31,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,148 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2024-09-13 10:27:31,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,159 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2024-09-13 10:27:31,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,204 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:31,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,233 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:31,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,258 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:31,260 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,292 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:31,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,294 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:31,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,296 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2024-09-13 10:27:31,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,298 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2024-09-13 10:27:31,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:31,302 INFO L134 CoverageAnalysis]: Checked inductivity of 1246 backedges. 421 proven. 308 refuted. 0 times theorem prover too weak. 517 trivial. 0 not checked. [2024-09-13 10:27:31,302 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 10:27:31,302 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [631085303] [2024-09-13 10:27:31,302 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [631085303] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 10:27:31,302 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [314414885] [2024-09-13 10:27:31,302 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-13 10:27:31,302 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:31,302 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 10:27:31,304 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 10:27:31,306 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-13 10:27:31,430 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 13 check-sat command(s) [2024-09-13 10:27:31,430 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-13 10:27:31,433 INFO L262 TraceCheckSpWp]: Trace formula consists of 418 conjuncts, 35 conjuncts are in the unsatisfiable core [2024-09-13 10:27:31,435 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 10:27:31,533 INFO L134 CoverageAnalysis]: Checked inductivity of 1246 backedges. 421 proven. 286 refuted. 0 times theorem prover too weak. 539 trivial. 0 not checked. [2024-09-13 10:27:31,533 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-13 10:27:34,928 INFO L134 CoverageAnalysis]: Checked inductivity of 1246 backedges. 467 proven. 286 refuted. 0 times theorem prover too weak. 493 trivial. 0 not checked. [2024-09-13 10:27:34,929 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [314414885] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-13 10:27:34,929 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-13 10:27:34,929 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [23, 20, 27] total 38 [2024-09-13 10:27:34,929 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [223595158] [2024-09-13 10:27:34,929 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-13 10:27:34,930 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-13 10:27:34,930 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 10:27:34,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-13 10:27:34,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=176, Invalid=1230, Unknown=0, NotChecked=0, Total=1406 [2024-09-13 10:27:34,932 INFO L87 Difference]: Start difference. First operand 114 states and 164 transitions. Second operand has 38 states, 38 states have (on average 2.1578947368421053) internal successors, (82), 32 states have internal predecessors, (82), 16 states have call successors, (19), 1 states have call predecessors, (19), 17 states have return successors, (35), 18 states have call predecessors, (35), 16 states have call successors, (35) [2024-09-13 10:27:35,566 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 10:27:35,566 INFO L93 Difference]: Finished difference Result 143 states and 219 transitions. [2024-09-13 10:27:35,567 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 31 states. [2024-09-13 10:27:35,567 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 2.1578947368421053) internal successors, (82), 32 states have internal predecessors, (82), 16 states have call successors, (19), 1 states have call predecessors, (19), 17 states have return successors, (35), 18 states have call predecessors, (35), 16 states have call successors, (35) Word has length 156 [2024-09-13 10:27:35,567 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 10:27:35,568 INFO L225 Difference]: With dead ends: 143 [2024-09-13 10:27:35,569 INFO L226 Difference]: Without dead ends: 143 [2024-09-13 10:27:35,570 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 412 GetRequests, 335 SyntacticMatches, 14 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 870 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=752, Invalid=3408, Unknown=0, NotChecked=0, Total=4160 [2024-09-13 10:27:35,570 INFO L434 NwaCegarLoop]: 15 mSDtfsCounter, 37 mSDsluCounter, 105 mSDsCounter, 0 mSdLazyCounter, 617 mSolverCounterSat, 66 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 683 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 66 IncrementalHoareTripleChecker+Valid, 617 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-13 10:27:35,571 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 120 Invalid, 683 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [66 Valid, 617 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-09-13 10:27:35,571 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 143 states. [2024-09-13 10:27:35,577 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 143 to 129. [2024-09-13 10:27:35,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 129 states, 83 states have (on average 1.072289156626506) internal successors, (89), 84 states have internal predecessors, (89), 25 states have call successors, (25), 8 states have call predecessors, (25), 20 states have return successors, (83), 36 states have call predecessors, (83), 25 states have call successors, (83) [2024-09-13 10:27:35,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 129 states to 129 states and 197 transitions. [2024-09-13 10:27:35,579 INFO L78 Accepts]: Start accepts. Automaton has 129 states and 197 transitions. Word has length 156 [2024-09-13 10:27:35,579 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 10:27:35,579 INFO L474 AbstractCegarLoop]: Abstraction has 129 states and 197 transitions. [2024-09-13 10:27:35,580 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 2.1578947368421053) internal successors, (82), 32 states have internal predecessors, (82), 16 states have call successors, (19), 1 states have call predecessors, (19), 17 states have return successors, (35), 18 states have call predecessors, (35), 16 states have call successors, (35) [2024-09-13 10:27:35,580 INFO L276 IsEmpty]: Start isEmpty. Operand 129 states and 197 transitions. [2024-09-13 10:27:35,581 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2024-09-13 10:27:35,581 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 10:27:35,581 INFO L216 NwaCegarLoop]: trace histogram [25, 25, 14, 11, 10, 10, 10, 10, 10, 10, 10, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:35,594 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2024-09-13 10:27:35,785 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:35,786 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ackermannErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 10:27:35,786 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 10:27:35,786 INFO L85 PathProgramCache]: Analyzing trace with hash -707320168, now seen corresponding path program 6 times [2024-09-13 10:27:35,787 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 10:27:35,787 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [352300524] [2024-09-13 10:27:35,787 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:35,787 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 10:27:35,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,038 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,216 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,292 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,299 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,302 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,304 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,304 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,308 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:36,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,310 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2024-09-13 10:27:36,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,390 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,441 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,480 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,503 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,546 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:36,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,557 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2024-09-13 10:27:36,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,572 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2024-09-13 10:27:36,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,583 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2024-09-13 10:27:36,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,651 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,687 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,718 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,741 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,776 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:36,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,779 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:36,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,782 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2024-09-13 10:27:36,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,784 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2024-09-13 10:27:36,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,785 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2024-09-13 10:27:36,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:36,790 INFO L134 CoverageAnalysis]: Checked inductivity of 1483 backedges. 477 proven. 400 refuted. 0 times theorem prover too weak. 606 trivial. 0 not checked. [2024-09-13 10:27:36,790 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 10:27:36,790 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [352300524] [2024-09-13 10:27:36,790 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [352300524] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 10:27:36,790 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [925623154] [2024-09-13 10:27:36,790 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-09-13 10:27:36,790 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:36,790 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 10:27:36,793 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 10:27:36,794 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-13 10:27:36,965 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 18 check-sat command(s) [2024-09-13 10:27:36,966 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-13 10:27:36,968 INFO L262 TraceCheckSpWp]: Trace formula consists of 539 conjuncts, 37 conjuncts are in the unsatisfiable core [2024-09-13 10:27:36,972 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 10:27:37,066 INFO L134 CoverageAnalysis]: Checked inductivity of 1483 backedges. 477 proven. 372 refuted. 0 times theorem prover too weak. 634 trivial. 0 not checked. [2024-09-13 10:27:37,066 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-13 10:27:40,468 INFO L134 CoverageAnalysis]: Checked inductivity of 1483 backedges. 525 proven. 384 refuted. 0 times theorem prover too weak. 574 trivial. 0 not checked. [2024-09-13 10:27:40,468 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [925623154] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-13 10:27:40,468 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-13 10:27:40,468 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 21, 28] total 35 [2024-09-13 10:27:40,468 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [719472704] [2024-09-13 10:27:40,469 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-13 10:27:40,469 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 35 states [2024-09-13 10:27:40,469 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 10:27:40,470 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 35 interpolants. [2024-09-13 10:27:40,470 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=164, Invalid=1026, Unknown=0, NotChecked=0, Total=1190 [2024-09-13 10:27:40,470 INFO L87 Difference]: Start difference. First operand 129 states and 197 transitions. Second operand has 35 states, 35 states have (on average 2.3714285714285714) internal successors, (83), 31 states have internal predecessors, (83), 17 states have call successors, (20), 1 states have call predecessors, (20), 17 states have return successors, (36), 16 states have call predecessors, (36), 17 states have call successors, (36) [2024-09-13 10:27:41,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 10:27:41,149 INFO L93 Difference]: Finished difference Result 165 states and 263 transitions. [2024-09-13 10:27:41,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 34 states. [2024-09-13 10:27:41,150 INFO L78 Accepts]: Start accepts. Automaton has has 35 states, 35 states have (on average 2.3714285714285714) internal successors, (83), 31 states have internal predecessors, (83), 17 states have call successors, (20), 1 states have call predecessors, (20), 17 states have return successors, (36), 16 states have call predecessors, (36), 17 states have call successors, (36) Word has length 169 [2024-09-13 10:27:41,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 10:27:41,151 INFO L225 Difference]: With dead ends: 165 [2024-09-13 10:27:41,151 INFO L226 Difference]: Without dead ends: 165 [2024-09-13 10:27:41,153 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 446 GetRequests, 364 SyntacticMatches, 19 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 959 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=820, Invalid=3340, Unknown=0, NotChecked=0, Total=4160 [2024-09-13 10:27:41,153 INFO L434 NwaCegarLoop]: 15 mSDtfsCounter, 119 mSDsluCounter, 109 mSDsCounter, 0 mSdLazyCounter, 689 mSolverCounterSat, 146 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 119 SdHoareTripleChecker+Valid, 124 SdHoareTripleChecker+Invalid, 835 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 146 IncrementalHoareTripleChecker+Valid, 689 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-13 10:27:41,153 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [119 Valid, 124 Invalid, 835 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [146 Valid, 689 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-09-13 10:27:41,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 165 states. [2024-09-13 10:27:41,160 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 165 to 144. [2024-09-13 10:27:41,161 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 144 states, 92 states have (on average 1.065217391304348) internal successors, (98), 93 states have internal predecessors, (98), 28 states have call successors, (28), 8 states have call predecessors, (28), 23 states have return successors, (104), 42 states have call predecessors, (104), 28 states have call successors, (104) [2024-09-13 10:27:41,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 230 transitions. [2024-09-13 10:27:41,162 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 230 transitions. Word has length 169 [2024-09-13 10:27:41,163 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 10:27:41,163 INFO L474 AbstractCegarLoop]: Abstraction has 144 states and 230 transitions. [2024-09-13 10:27:41,163 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 35 states, 35 states have (on average 2.3714285714285714) internal successors, (83), 31 states have internal predecessors, (83), 17 states have call successors, (20), 1 states have call predecessors, (20), 17 states have return successors, (36), 16 states have call predecessors, (36), 17 states have call successors, (36) [2024-09-13 10:27:41,163 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 230 transitions. [2024-09-13 10:27:41,164 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 183 [2024-09-13 10:27:41,164 INFO L208 NwaCegarLoop]: Found error trace [2024-09-13 10:27:41,164 INFO L216 NwaCegarLoop]: trace histogram [27, 27, 15, 12, 11, 11, 11, 11, 11, 11, 11, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:41,178 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2024-09-13 10:27:41,365 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:41,365 INFO L399 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ackermannErr0ENSURES_VIOLATIONPOST_CONDITION] === [2024-09-13 10:27:41,366 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-13 10:27:41,366 INFO L85 PathProgramCache]: Analyzing trace with hash -1950095843, now seen corresponding path program 7 times [2024-09-13 10:27:41,366 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-13 10:27:41,366 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1683402984] [2024-09-13 10:27:41,366 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-13 10:27:41,366 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-13 10:27:41,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,662 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:41,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,897 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:41,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,909 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:41,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,914 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:41,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,918 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:41,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,920 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:41,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,925 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:41,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,927 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2024-09-13 10:27:41,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,934 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:41,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,940 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:41,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,944 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:41,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,946 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:41,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,948 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:41,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,949 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2024-09-13 10:27:41,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,952 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2024-09-13 10:27:41,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:41,954 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2024-09-13 10:27:41,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:42,076 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:42,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:42,159 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:42,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:42,228 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:42,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:42,277 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:42,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:42,319 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:42,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:42,348 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2024-09-13 10:27:42,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:42,389 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2024-09-13 10:27:42,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:42,398 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 29 [2024-09-13 10:27:42,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:42,407 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2024-09-13 10:27:42,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:42,416 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2024-09-13 10:27:42,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:42,425 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68 [2024-09-13 10:27:42,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:42,436 INFO L134 CoverageAnalysis]: Checked inductivity of 1741 backedges. 657 proven. 84 refuted. 0 times theorem prover too weak. 1000 trivial. 0 not checked. [2024-09-13 10:27:42,436 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-13 10:27:42,436 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1683402984] [2024-09-13 10:27:42,436 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1683402984] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-13 10:27:42,436 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [33640273] [2024-09-13 10:27:42,436 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-09-13 10:27:42,437 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-13 10:27:42,437 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-13 10:27:42,438 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-13 10:27:42,439 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-13 10:27:42,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-13 10:27:42,633 INFO L262 TraceCheckSpWp]: Trace formula consists of 579 conjuncts, 40 conjuncts are in the unsatisfiable core [2024-09-13 10:27:42,636 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-13 10:27:42,703 INFO L134 CoverageAnalysis]: Checked inductivity of 1741 backedges. 657 proven. 84 refuted. 0 times theorem prover too weak. 1000 trivial. 0 not checked. [2024-09-13 10:27:42,704 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-13 10:27:48,457 INFO L134 CoverageAnalysis]: Checked inductivity of 1741 backedges. 711 proven. 75 refuted. 0 times theorem prover too weak. 955 trivial. 0 not checked. [2024-09-13 10:27:48,458 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [33640273] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-13 10:27:48,458 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-13 10:27:48,458 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [24, 23, 33] total 37 [2024-09-13 10:27:48,458 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [205433349] [2024-09-13 10:27:48,459 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-13 10:27:48,459 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 37 states [2024-09-13 10:27:48,459 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-13 10:27:48,460 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 37 interpolants. [2024-09-13 10:27:48,460 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=140, Invalid=1192, Unknown=0, NotChecked=0, Total=1332 [2024-09-13 10:27:48,461 INFO L87 Difference]: Start difference. First operand 144 states and 230 transitions. Second operand has 37 states, 37 states have (on average 1.5135135135135136) internal successors, (56), 30 states have internal predecessors, (56), 6 states have call successors, (9), 1 states have call predecessors, (9), 14 states have return successors, (22), 13 states have call predecessors, (22), 6 states have call successors, (22) [2024-09-13 10:27:49,582 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-13 10:27:49,582 INFO L93 Difference]: Finished difference Result 160 states and 252 transitions. [2024-09-13 10:27:49,583 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 35 states. [2024-09-13 10:27:49,583 INFO L78 Accepts]: Start accepts. Automaton has has 37 states, 37 states have (on average 1.5135135135135136) internal successors, (56), 30 states have internal predecessors, (56), 6 states have call successors, (9), 1 states have call predecessors, (9), 14 states have return successors, (22), 13 states have call predecessors, (22), 6 states have call successors, (22) Word has length 182 [2024-09-13 10:27:49,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-13 10:27:49,583 INFO L225 Difference]: With dead ends: 160 [2024-09-13 10:27:49,584 INFO L226 Difference]: Without dead ends: 0 [2024-09-13 10:27:49,585 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 482 GetRequests, 396 SyntacticMatches, 20 SemanticMatches, 66 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 868 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=766, Invalid=3790, Unknown=0, NotChecked=0, Total=4556 [2024-09-13 10:27:49,585 INFO L434 NwaCegarLoop]: 12 mSDtfsCounter, 61 mSDsluCounter, 60 mSDsCounter, 0 mSdLazyCounter, 938 mSolverCounterSat, 101 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 61 SdHoareTripleChecker+Valid, 72 SdHoareTripleChecker+Invalid, 1039 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 101 IncrementalHoareTripleChecker+Valid, 938 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-13 10:27:49,586 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [61 Valid, 72 Invalid, 1039 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [101 Valid, 938 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-13 10:27:49,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-09-13 10:27:49,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-09-13 10:27:49,586 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-13 10:27:49,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-09-13 10:27:49,587 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 182 [2024-09-13 10:27:49,587 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-13 10:27:49,587 INFO L474 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-09-13 10:27:49,587 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 37 states, 37 states have (on average 1.5135135135135136) internal successors, (56), 30 states have internal predecessors, (56), 6 states have call successors, (9), 1 states have call predecessors, (9), 14 states have return successors, (22), 13 states have call predecessors, (22), 6 states have call successors, (22) [2024-09-13 10:27:49,587 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-09-13 10:27:49,587 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-09-13 10:27:49,589 INFO L785 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 2 remaining) [2024-09-13 10:27:49,590 INFO L785 garLoopResultBuilder]: Registering result SAFE for location ackermannErr0ENSURES_VIOLATIONPOST_CONDITION (0 of 2 remaining) [2024-09-13 10:27:49,606 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2024-09-13 10:27:49,793 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2024-09-13 10:27:49,796 INFO L408 BasicCegarLoop]: Path program histogram: [7, 1, 1, 1, 1, 1, 1] [2024-09-13 10:27:49,798 INFO L165 ceAbstractionStarter]: Computing trace abstraction results [2024-09-13 10:27:49,801 INFO L201 PluginConnector]: Adding new model witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 13.09 10:27:49 BoogieIcfgContainer [2024-09-13 10:27:49,801 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-09-13 10:27:49,802 INFO L158 Benchmark]: Toolchain (without parser) took 31767.77ms. Allocated memory was 201.3MB in the beginning and 780.1MB in the end (delta: 578.8MB). Free memory was 127.9MB in the beginning and 566.8MB in the end (delta: -438.9MB). Peak memory consumption was 142.9MB. Max. memory is 16.1GB. [2024-09-13 10:27:49,804 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 138.4MB. Free memory is still 105.3MB. There was no memory consumed. Max. memory is 16.1GB. [2024-09-13 10:27:49,804 INFO L158 Benchmark]: Witness Parser took 0.16ms. Allocated memory is still 201.3MB. Free memory is still 130.0MB. There was no memory consumed. Max. memory is 16.1GB. [2024-09-13 10:27:49,804 INFO L158 Benchmark]: CACSL2BoogieTranslator took 241.11ms. Allocated memory is still 201.3MB. Free memory was 127.9MB in the beginning and 114.9MB in the end (delta: 13.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2024-09-13 10:27:49,804 INFO L158 Benchmark]: Boogie Procedure Inliner took 22.11ms. Allocated memory is still 201.3MB. Free memory was 114.9MB in the beginning and 113.4MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. [2024-09-13 10:27:49,805 INFO L158 Benchmark]: Boogie Preprocessor took 19.78ms. Allocated memory is still 201.3MB. Free memory was 113.4MB in the beginning and 112.0MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2024-09-13 10:27:49,805 INFO L158 Benchmark]: RCFGBuilder took 342.72ms. Allocated memory is still 201.3MB. Free memory was 112.0MB in the beginning and 160.6MB in the end (delta: -48.7MB). Peak memory consumption was 9.1MB. Max. memory is 16.1GB. [2024-09-13 10:27:49,805 INFO L158 Benchmark]: TraceAbstraction took 31136.02ms. Allocated memory was 201.3MB in the beginning and 780.1MB in the end (delta: 578.8MB). Free memory was 159.8MB in the beginning and 566.8MB in the end (delta: -407.0MB). Peak memory consumption was 173.7MB. Max. memory is 16.1GB. [2024-09-13 10:27:49,806 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17ms. Allocated memory is still 138.4MB. Free memory is still 105.3MB. There was no memory consumed. Max. memory is 16.1GB. * Witness Parser took 0.16ms. Allocated memory is still 201.3MB. Free memory is still 130.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 241.11ms. Allocated memory is still 201.3MB. Free memory was 127.9MB in the beginning and 114.9MB in the end (delta: 13.0MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 22.11ms. Allocated memory is still 201.3MB. Free memory was 114.9MB in the beginning and 113.4MB in the end (delta: 1.5MB). There was no memory consumed. Max. memory is 16.1GB. * Boogie Preprocessor took 19.78ms. Allocated memory is still 201.3MB. Free memory was 113.4MB in the beginning and 112.0MB in the end (delta: 1.5MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 342.72ms. Allocated memory is still 201.3MB. Free memory was 112.0MB in the beginning and 160.6MB in the end (delta: -48.7MB). Peak memory consumption was 9.1MB. Max. memory is 16.1GB. * TraceAbstraction took 31136.02ms. Allocated memory was 201.3MB in the beginning and 780.1MB in the end (delta: 578.8MB). Free memory was 159.8MB in the beginning and 566.8MB in the end (delta: -407.0MB). Peak memory consumption was 173.7MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 45]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - PositiveResult [Line: 16]: procedure postcondition always holds For all program executions holds that procedure postcondition always holds at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 2 procedures, 22 locations, 2 error locations. Started 1 CEGAR loops. OverallTime: 31.1s, OverallIterations: 13, TraceHistogramMax: 27, PathProgramHistogramMax: 7, EmptinessCheckTime: 0.0s, AutomataDifference: 4.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 477 SdHoareTripleChecker+Valid, 2.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 449 mSDsluCounter, 946 SdHoareTripleChecker+Invalid, 1.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 738 mSDsCounter, 547 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 4290 IncrementalHoareTripleChecker+Invalid, 4837 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 547 mSolverCounterUnsat, 208 mSDtfsCounter, 4290 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2454 GetRequests, 2002 SyntacticMatches, 75 SemanticMatches, 377 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4103 ImplicationChecksByTransitivity, 4.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=144occurred in iteration=12, InterpolantAutomatonStates: 221, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 13 MinimizatonAttempts, 95 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 23.2s InterpolantComputationTime, 1910 NumberOfCodeBlocks, 1857 NumberOfCodeBlocksAsserted, 61 NumberOfCheckSat, 2801 ConstructedInterpolants, 0 QuantifiedInterpolants, 5671 SizeOfPredicates, 28 NumberOfNonLiveVariables, 2870 ConjunctsInSsa, 188 ConjunctsInUnsatCore, 30 InterpolantComputations, 5 PerfectInterpolantSequences, 15744/19669 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 2 specifications checked. All of them hold RESULT: Ultimate proved your program to be correct! [2024-09-13 10:27:49,831 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE