./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/loop-invgen/apache-escape-absolute.i --full-output --witness-type correctness_witness --validate ../results/automizer-verification-files/SV-COMP24_unreach-call/apache-escape-absolute.yml/witness-2.1.yml --architecture 32bit


--------------------------------------------------------------------------------


Checking for ERROR reachability
Using default analysis
Version 04d6fb36
Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReachWitnessValidation.xml -i ../sv-benchmarks/c/loop-invgen/apache-escape-absolute.i ../results/automizer-verification-files/SV-COMP24_unreach-call/apache-escape-absolute.yml/witness-2.1.yml -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --traceabstraction.positions.where.we.compute.the.hoare.annotation None
--- Real Ultimate output ---
This is Ultimate 0.2.4-tmp.dk.referee-eval-04d6fb3-m
[2024-09-15 20:10:14,250 INFO  L188        SettingsManager]: Resetting all preferences to default values...
[2024-09-15 20:10:14,331 INFO  L114        SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf
[2024-09-15 20:10:14,338 WARN  L101        SettingsManager]: Preference file contains the following unknown settings:
[2024-09-15 20:10:14,339 WARN  L103        SettingsManager]:   * de.uni_freiburg.informatik.ultimate.core.Log level for class
[2024-09-15 20:10:14,364 INFO  L130        SettingsManager]: Preferences different from defaults after loading the file:
[2024-09-15 20:10:14,366 INFO  L151        SettingsManager]: Preferences of UltimateCore differ from their defaults:
[2024-09-15 20:10:14,367 INFO  L153        SettingsManager]:  * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR;
[2024-09-15 20:10:14,367 INFO  L151        SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults:
[2024-09-15 20:10:14,368 INFO  L153        SettingsManager]:  * Use memory slicer=true
[2024-09-15 20:10:14,368 INFO  L151        SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults:
[2024-09-15 20:10:14,371 INFO  L153        SettingsManager]:  * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS
[2024-09-15 20:10:14,371 INFO  L151        SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults:
[2024-09-15 20:10:14,372 INFO  L153        SettingsManager]:  * Create parallel compositions if possible=false
[2024-09-15 20:10:14,372 INFO  L153        SettingsManager]:  * Use SBE=true
[2024-09-15 20:10:14,372 INFO  L151        SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults:
[2024-09-15 20:10:14,373 INFO  L153        SettingsManager]:  * Pointer base address is valid at dereference=IGNORE
[2024-09-15 20:10:14,373 INFO  L153        SettingsManager]:  * sizeof long=4
[2024-09-15 20:10:14,373 INFO  L153        SettingsManager]:  * Overapproximate operations on floating types=true
[2024-09-15 20:10:14,374 INFO  L153        SettingsManager]:  * sizeof POINTER=4
[2024-09-15 20:10:14,378 INFO  L153        SettingsManager]:  * Check division by zero=IGNORE
[2024-09-15 20:10:14,379 INFO  L153        SettingsManager]:  * Pointer to allocated memory at dereference=IGNORE
[2024-09-15 20:10:14,379 INFO  L153        SettingsManager]:  * If two pointers are subtracted or compared they have the same base address=IGNORE
[2024-09-15 20:10:14,379 INFO  L153        SettingsManager]:  * Check array bounds for arrays that are off heap=IGNORE
[2024-09-15 20:10:14,380 INFO  L153        SettingsManager]:  * Allow undefined functions=false
[2024-09-15 20:10:14,380 INFO  L153        SettingsManager]:  * sizeof long double=12
[2024-09-15 20:10:14,381 INFO  L153        SettingsManager]:  * Check if freed pointer was valid=false
[2024-09-15 20:10:14,381 INFO  L153        SettingsManager]:  * Use constant arrays=true
[2024-09-15 20:10:14,381 INFO  L151        SettingsManager]: Preferences of RCFGBuilder differ from their defaults:
[2024-09-15 20:10:14,382 INFO  L153        SettingsManager]:  * Size of a code block=SequenceOfStatements
[2024-09-15 20:10:14,382 INFO  L153        SettingsManager]:  * Only consider context switches at boundaries of atomic blocks=true
[2024-09-15 20:10:14,383 INFO  L153        SettingsManager]:  * SMT solver=External_DefaultMode
[2024-09-15 20:10:14,383 INFO  L153        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000
[2024-09-15 20:10:14,383 INFO  L151        SettingsManager]: Preferences of TraceAbstraction differ from their defaults:
[2024-09-15 20:10:14,384 INFO  L153        SettingsManager]:  * Compute Interpolants along a Counterexample=FPandBP
[2024-09-15 20:10:14,384 INFO  L153        SettingsManager]:  * Positions where we compute the Hoare Annotation=LoopHeads
[2024-09-15 20:10:14,384 INFO  L153        SettingsManager]:  * Trace refinement strategy=CAMEL
[2024-09-15 20:10:14,385 INFO  L153        SettingsManager]:  * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in
[2024-09-15 20:10:14,385 INFO  L153        SettingsManager]:  * Apply one-shot large block encoding in concurrent analysis=false
[2024-09-15 20:10:14,385 INFO  L153        SettingsManager]:  * Automaton type used in concurrency analysis=PETRI_NET
[2024-09-15 20:10:14,386 INFO  L153        SettingsManager]:  * Order on configurations for Petri net unfoldings=DBO
[2024-09-15 20:10:14,386 INFO  L153        SettingsManager]:  * SMT solver=External_ModelsAndUnsatCoreMode
[2024-09-15 20:10:14,386 INFO  L153        SettingsManager]:  * Looper check in Petri net analysis=SEMANTIC
WARNING: An illegal reflective access operation has occurred
WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int)
WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1
WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
WARNING: All illegal access operations will be denied in a future release
Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main
Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> None
[2024-09-15 20:10:14,695 INFO  L75    nceAwareModelManager]: Repository-Root is: /tmp
[2024-09-15 20:10:14,714 INFO  L261   ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized
[2024-09-15 20:10:14,717 INFO  L217   ainManager$Toolchain]: [Toolchain 1]: Toolchain selected.
[2024-09-15 20:10:14,718 INFO  L270        PluginConnector]: Initializing CDTParser...
[2024-09-15 20:10:14,718 INFO  L274        PluginConnector]: CDTParser initialized
[2024-09-15 20:10:14,719 INFO  L431   ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/loop-invgen/apache-escape-absolute.i
[2024-09-15 20:10:16,238 INFO  L533              CDTParser]: Created temporary CDT project at NULL
[2024-09-15 20:10:16,418 INFO  L384              CDTParser]: Found 1 translation units.
[2024-09-15 20:10:16,419 INFO  L180              CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loop-invgen/apache-escape-absolute.i
[2024-09-15 20:10:16,428 INFO  L427              CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/3de2aac69/d5ebe465052e4218be03052a742342af/FLAG5f7396f06
[2024-09-15 20:10:16,444 INFO  L435              CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/3de2aac69/d5ebe465052e4218be03052a742342af
[2024-09-15 20:10:16,448 INFO  L270        PluginConnector]: Initializing Witness Parser...
[2024-09-15 20:10:16,449 INFO  L274        PluginConnector]: Witness Parser initialized
[2024-09-15 20:10:16,450 INFO  L431   ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../results/automizer-verification-files/SV-COMP24_unreach-call/apache-escape-absolute.yml/witness-2.1.yml
[2024-09-15 20:10:16,505 INFO  L299   ainManager$Toolchain]: ####################### [Toolchain 1] #######################
[2024-09-15 20:10:16,506 INFO  L133        ToolchainWalker]: Walking toolchain with 5 elements.
[2024-09-15 20:10:16,508 INFO  L112        PluginConnector]: ------------------------CACSL2BoogieTranslator----------------------------
[2024-09-15 20:10:16,509 INFO  L270        PluginConnector]: Initializing CACSL2BoogieTranslator...
[2024-09-15 20:10:16,514 INFO  L274        PluginConnector]: CACSL2BoogieTranslator initialized
[2024-09-15 20:10:16,515 INFO  L184        PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.09 08:10:16" (1/2) ...
[2024-09-15 20:10:16,516 INFO  L204        PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@56022fed and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:10:16, skipping insertion in model container
[2024-09-15 20:10:16,517 INFO  L184        PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.09 08:10:16" (1/2) ...
[2024-09-15 20:10:16,518 INFO  L204        PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@5850bbee and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:10:16, skipping insertion in model container
[2024-09-15 20:10:16,519 INFO  L184        PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 15.09 08:10:16" (2/2) ...
[2024-09-15 20:10:16,519 INFO  L204        PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@56022fed and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16, skipping insertion in model container
[2024-09-15 20:10:16,519 INFO  L184        PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 15.09 08:10:16" (2/2) ...
[2024-09-15 20:10:16,534 INFO  L93    nessWitnessExtractor]: Found the following entries in the witness:
[2024-09-15 20:10:16,536 INFO  L1541             ArrayList]: Loop invariant at [L65-L77] ((((((long long) cp + 1) <= urilen) && (c == 0)) && (1 <= cp)) || (((1 <= c) && (((long long) cp + 1) <= urilen)) && (1 <= cp)))
[2024-09-15 20:10:16,536 INFO  L1541             ArrayList]: Loop invariant at [L47-L52] ((((long long) cp + 1) <= urilen) && (1 <= cp))
[2024-09-15 20:10:16,537 INFO  L1541             ArrayList]: Function contract at [L17]: requires (\old(cond) != 0), ensures (\old(cond) != 0)
[2024-09-15 20:10:16,559 INFO  L175         MainTranslator]: Built tables and reachable declarations
[2024-09-15 20:10:16,720 WARN  L248   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loop-invgen/apache-escape-absolute.i[893,906]
[2024-09-15 20:10:16,752 INFO  L210          PostProcessor]: Analyzing one entry point: main
[2024-09-15 20:10:16,762 INFO  L200         MainTranslator]: Completed pre-run
Start Parsing Global
Start Parsing Global
[2024-09-15 20:10:16,810 WARN  L248   ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loop-invgen/apache-escape-absolute.i[893,906]
Start Parsing Local
Start Parsing Local
[2024-09-15 20:10:16,837 INFO  L210          PostProcessor]: Analyzing one entry point: main
[2024-09-15 20:10:16,854 INFO  L204         MainTranslator]: Completed translation
[2024-09-15 20:10:16,855 INFO  L201        PluginConnector]: Adding new model witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16 WrapperNode
[2024-09-15 20:10:16,855 INFO  L131        PluginConnector]: ------------------------ END CACSL2BoogieTranslator----------------------------
[2024-09-15 20:10:16,856 INFO  L112        PluginConnector]: ------------------------Boogie Procedure Inliner----------------------------
[2024-09-15 20:10:16,857 INFO  L270        PluginConnector]: Initializing Boogie Procedure Inliner...
[2024-09-15 20:10:16,857 INFO  L274        PluginConnector]: Boogie Procedure Inliner initialized
[2024-09-15 20:10:16,863 INFO  L184        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16" (1/1) ...
[2024-09-15 20:10:16,873 INFO  L184        PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16" (1/1) ...
[2024-09-15 20:10:16,898 INFO  L138                Inliner]: procedures = 16, calls = 24, calls flagged for inlining = 2, calls inlined = 2, statements flattened = 112
[2024-09-15 20:10:16,901 INFO  L131        PluginConnector]: ------------------------ END Boogie Procedure Inliner----------------------------
[2024-09-15 20:10:16,902 INFO  L112        PluginConnector]: ------------------------Boogie Preprocessor----------------------------
[2024-09-15 20:10:16,902 INFO  L270        PluginConnector]: Initializing Boogie Preprocessor...
[2024-09-15 20:10:16,902 INFO  L274        PluginConnector]: Boogie Preprocessor initialized
[2024-09-15 20:10:16,912 INFO  L184        PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16" (1/1) ...
[2024-09-15 20:10:16,913 INFO  L184        PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16" (1/1) ...
[2024-09-15 20:10:16,914 INFO  L184        PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16" (1/1) ...
[2024-09-15 20:10:16,928 WARN  L109           MemorySlicer]: Omit memory slicing because it failed with the following exception: Unsupported: Procedure __VERIFIER_assert is not part of the Ultimate memory model but has specification other that is not a ModifiesSpecification
[2024-09-15 20:10:16,928 INFO  L184        PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16" (1/1) ...
[2024-09-15 20:10:16,928 INFO  L184        PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16" (1/1) ...
[2024-09-15 20:10:16,934 INFO  L184        PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16" (1/1) ...
[2024-09-15 20:10:16,938 INFO  L184        PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16" (1/1) ...
[2024-09-15 20:10:16,939 INFO  L184        PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16" (1/1) ...
[2024-09-15 20:10:16,940 INFO  L184        PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16" (1/1) ...
[2024-09-15 20:10:16,941 INFO  L131        PluginConnector]: ------------------------ END Boogie Preprocessor----------------------------
[2024-09-15 20:10:16,942 INFO  L112        PluginConnector]: ------------------------RCFGBuilder----------------------------
[2024-09-15 20:10:16,942 INFO  L270        PluginConnector]: Initializing RCFGBuilder...
[2024-09-15 20:10:16,942 INFO  L274        PluginConnector]: RCFGBuilder initialized
[2024-09-15 20:10:16,943 INFO  L184        PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16" (1/1) ...
[2024-09-15 20:10:16,953 INFO  L173          SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000
[2024-09-15 20:10:16,963 INFO  L189       MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3
[2024-09-15 20:10:16,983 INFO  L229       MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null)
[2024-09-15 20:10:16,987 INFO  L327       MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process
[2024-09-15 20:10:17,032 INFO  L130     BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit
[2024-09-15 20:10:17,033 INFO  L130     BoogieDeclarations]: Found specification of procedure write~init~int
[2024-09-15 20:10:17,033 INFO  L130     BoogieDeclarations]: Found specification of procedure ULTIMATE.start
[2024-09-15 20:10:17,033 INFO  L138     BoogieDeclarations]: Found implementation of procedure ULTIMATE.start
[2024-09-15 20:10:17,033 INFO  L130     BoogieDeclarations]: Found specification of procedure __VERIFIER_assert
[2024-09-15 20:10:17,033 INFO  L138     BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert
[2024-09-15 20:10:17,103 INFO  L242             CfgBuilder]: Building ICFG
[2024-09-15 20:10:17,105 INFO  L268             CfgBuilder]: Building CFG for each procedure with an implementation
[2024-09-15 20:10:17,362 WARN  L783   $ProcedureCfgBuilder]: Label in the middle of a codeblock.
[2024-09-15 20:10:17,395 INFO  L?                        ?]: Removed 54 outVars from TransFormulas that were not future-live.
[2024-09-15 20:10:17,395 INFO  L291             CfgBuilder]: Performing block encoding
[2024-09-15 20:10:17,423 INFO  L313             CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start)
[2024-09-15 20:10:17,425 INFO  L318             CfgBuilder]: Removed 2 assume(true) statements.
[2024-09-15 20:10:17,425 INFO  L201        PluginConnector]: Adding new model witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.09 08:10:17 BoogieIcfgContainer
[2024-09-15 20:10:17,426 INFO  L131        PluginConnector]: ------------------------ END RCFGBuilder----------------------------
[2024-09-15 20:10:17,428 INFO  L112        PluginConnector]: ------------------------TraceAbstraction----------------------------
[2024-09-15 20:10:17,428 INFO  L270        PluginConnector]: Initializing TraceAbstraction...
[2024-09-15 20:10:17,431 INFO  L274        PluginConnector]: TraceAbstraction initialized
[2024-09-15 20:10:17,432 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 15.09 08:10:16" (1/4) ...
[2024-09-15 20:10:17,433 INFO  L204        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@ed1ce9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.09 08:10:17, skipping insertion in model container
[2024-09-15 20:10:17,434 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 15.09 08:10:16" (2/4) ...
[2024-09-15 20:10:17,434 INFO  L204        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@ed1ce9 and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CORRECTNESS_WITNESS 15.09 08:10:17, skipping insertion in model container
[2024-09-15 20:10:17,435 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:10:16" (3/4) ...
[2024-09-15 20:10:17,435 INFO  L204        PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@ed1ce9 and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CORRECTNESS_WITNESS 15.09 08:10:17, skipping insertion in model container
[2024-09-15 20:10:17,435 INFO  L184        PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.09 08:10:17" (4/4) ...
[2024-09-15 20:10:17,436 INFO  L112   eAbstractionObserver]: Analyzing ICFG apache-escape-absolute.i
[2024-09-15 20:10:17,452 INFO  L209   ceAbstractionStarter]: Automizer settings: Hoare:None NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION
[2024-09-15 20:10:17,452 INFO  L149   ceAbstractionStarter]: Applying trace abstraction to program that has 22 error locations.
[2024-09-15 20:10:17,510 INFO  L335      AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ========
[2024-09-15 20:10:17,517 INFO  L336      AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=None, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@798f5aa0, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms]
[2024-09-15 20:10:17,519 INFO  L337      AbstractCegarLoop]: Starting to check reachability of 22 error locations.
[2024-09-15 20:10:17,522 INFO  L276                IsEmpty]: Start isEmpty. Operand  has 70 states, 46 states have (on average 1.4782608695652173) internal successors, (68), 53 states have internal predecessors, (68), 18 states have call successors, (18), 1 states have call predecessors, (18), 1 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18)
[2024-09-15 20:10:17,529 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 10
[2024-09-15 20:10:17,529 INFO  L208           NwaCegarLoop]: Found error trace
[2024-09-15 20:10:17,530 INFO  L216           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-09-15 20:10:17,530 INFO  L399      AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION === [ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 19 more)] ===
[2024-09-15 20:10:17,535 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2024-09-15 20:10:17,536 INFO  L85        PathProgramCache]: Analyzing trace with hash 1418037106, now seen corresponding path program 1 times
[2024-09-15 20:10:17,545 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-09-15 20:10:17,545 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [484781014]
[2024-09-15 20:10:17,545 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-09-15 20:10:17,546 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-09-15 20:10:17,661 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:17,771 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-09-15 20:10:17,772 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-09-15 20:10:17,772 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [484781014]
[2024-09-15 20:10:17,773 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [484781014] provided 1 perfect and 0 imperfect interpolant sequences
[2024-09-15 20:10:17,773 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-09-15 20:10:17,773 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2024-09-15 20:10:17,775 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1231520411]
[2024-09-15 20:10:17,775 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-09-15 20:10:17,781 INFO  L551      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2024-09-15 20:10:17,781 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-09-15 20:10:17,832 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2024-09-15 20:10:17,836 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-09-15 20:10:17,838 INFO  L87              Difference]: Start difference. First operand  has 70 states, 46 states have (on average 1.4782608695652173) internal successors, (68), 53 states have internal predecessors, (68), 18 states have call successors, (18), 1 states have call predecessors, (18), 1 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18) Second operand  has 3 states, 2 states have (on average 4.5) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-09-15 20:10:18,002 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-09-15 20:10:18,003 INFO  L93              Difference]: Finished difference Result 67 states and 99 transitions.
[2024-09-15 20:10:18,004 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2024-09-15 20:10:18,005 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 2 states have (on average 4.5) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9
[2024-09-15 20:10:18,006 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-09-15 20:10:18,014 INFO  L225             Difference]: With dead ends: 67
[2024-09-15 20:10:18,014 INFO  L226             Difference]: Without dead ends: 62
[2024-09-15 20:10:18,016 INFO  L433           NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-09-15 20:10:18,020 INFO  L434           NwaCegarLoop]: 73 mSDtfsCounter, 16 mSDsluCounter, 36 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 7 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 32 SdHoareTripleChecker+Valid, 109 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 7 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2024-09-15 20:10:18,021 INFO  L435           NwaCegarLoop]: SdHoareTripleChecker [32 Valid, 109 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [7 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2024-09-15 20:10:18,037 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 62 states.
[2024-09-15 20:10:18,064 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 61.
[2024-09-15 20:10:18,066 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 61 states, 38 states have (on average 1.1842105263157894) internal successors, (45), 44 states have internal predecessors, (45), 18 states have call successors, (18), 1 states have call predecessors, (18), 1 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18)
[2024-09-15 20:10:18,069 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 81 transitions.
[2024-09-15 20:10:18,072 INFO  L78                 Accepts]: Start accepts. Automaton has 61 states and 81 transitions. Word has length 9
[2024-09-15 20:10:18,072 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-09-15 20:10:18,072 INFO  L474      AbstractCegarLoop]: Abstraction has 61 states and 81 transitions.
[2024-09-15 20:10:18,072 INFO  L475      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 2 states have (on average 4.5) internal successors, (9), 3 states have internal predecessors, (9), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-09-15 20:10:18,072 INFO  L276                IsEmpty]: Start isEmpty. Operand 61 states and 81 transitions.
[2024-09-15 20:10:18,073 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 13
[2024-09-15 20:10:18,073 INFO  L208           NwaCegarLoop]: Found error trace
[2024-09-15 20:10:18,074 INFO  L216           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-09-15 20:10:18,074 WARN  L456      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0
[2024-09-15 20:10:18,074 INFO  L399      AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 19 more)] ===
[2024-09-15 20:10:18,075 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2024-09-15 20:10:18,077 INFO  L85        PathProgramCache]: Analyzing trace with hash -551249728, now seen corresponding path program 1 times
[2024-09-15 20:10:18,077 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-09-15 20:10:18,077 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [905561484]
[2024-09-15 20:10:18,077 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-09-15 20:10:18,077 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-09-15 20:10:18,101 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,166 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-09-15 20:10:18,168 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-09-15 20:10:18,169 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [905561484]
[2024-09-15 20:10:18,169 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [905561484] provided 1 perfect and 0 imperfect interpolant sequences
[2024-09-15 20:10:18,169 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-09-15 20:10:18,169 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2024-09-15 20:10:18,169 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1011567231]
[2024-09-15 20:10:18,169 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-09-15 20:10:18,170 INFO  L551      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2024-09-15 20:10:18,170 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-09-15 20:10:18,172 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2024-09-15 20:10:18,173 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-09-15 20:10:18,173 INFO  L87              Difference]: Start difference. First operand 61 states and 81 transitions. Second operand  has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-09-15 20:10:18,192 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-09-15 20:10:18,194 INFO  L93              Difference]: Finished difference Result 59 states and 79 transitions.
[2024-09-15 20:10:18,194 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2024-09-15 20:10:18,194 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12
[2024-09-15 20:10:18,195 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-09-15 20:10:18,196 INFO  L225             Difference]: With dead ends: 59
[2024-09-15 20:10:18,198 INFO  L226             Difference]: Without dead ends: 59
[2024-09-15 20:10:18,198 INFO  L433           NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-09-15 20:10:18,199 INFO  L434           NwaCegarLoop]: 76 mSDtfsCounter, 0 mSDsluCounter, 76 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 152 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-09-15 20:10:18,200 INFO  L435           NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 152 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-09-15 20:10:18,200 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 59 states.
[2024-09-15 20:10:18,208 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 59.
[2024-09-15 20:10:18,210 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 59 states, 37 states have (on average 1.162162162162162) internal successors, (43), 42 states have internal predecessors, (43), 18 states have call successors, (18), 1 states have call predecessors, (18), 1 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18)
[2024-09-15 20:10:18,213 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 79 transitions.
[2024-09-15 20:10:18,214 INFO  L78                 Accepts]: Start accepts. Automaton has 59 states and 79 transitions. Word has length 12
[2024-09-15 20:10:18,214 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-09-15 20:10:18,215 INFO  L474      AbstractCegarLoop]: Abstraction has 59 states and 79 transitions.
[2024-09-15 20:10:18,215 INFO  L475      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-09-15 20:10:18,215 INFO  L276                IsEmpty]: Start isEmpty. Operand 59 states and 79 transitions.
[2024-09-15 20:10:18,215 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 13
[2024-09-15 20:10:18,215 INFO  L208           NwaCegarLoop]: Found error trace
[2024-09-15 20:10:18,216 INFO  L216           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-09-15 20:10:18,216 WARN  L456      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1
[2024-09-15 20:10:18,216 INFO  L399      AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr1ENSURES_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 19 more)] ===
[2024-09-15 20:10:18,216 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2024-09-15 20:10:18,217 INFO  L85        PathProgramCache]: Analyzing trace with hash -551249567, now seen corresponding path program 1 times
[2024-09-15 20:10:18,217 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-09-15 20:10:18,217 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1572125296]
[2024-09-15 20:10:18,217 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-09-15 20:10:18,221 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-09-15 20:10:18,233 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,274 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-09-15 20:10:18,275 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-09-15 20:10:18,275 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1572125296]
[2024-09-15 20:10:18,275 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1572125296] provided 1 perfect and 0 imperfect interpolant sequences
[2024-09-15 20:10:18,275 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-09-15 20:10:18,275 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2
[2024-09-15 20:10:18,275 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2001357577]
[2024-09-15 20:10:18,275 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-09-15 20:10:18,276 INFO  L551      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2024-09-15 20:10:18,276 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-09-15 20:10:18,276 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2024-09-15 20:10:18,277 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-09-15 20:10:18,277 INFO  L87              Difference]: Start difference. First operand 59 states and 79 transitions. Second operand  has 3 states, 2 states have (on average 5.5) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-09-15 20:10:18,386 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-09-15 20:10:18,386 INFO  L93              Difference]: Finished difference Result 58 states and 78 transitions.
[2024-09-15 20:10:18,388 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2024-09-15 20:10:18,388 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 2 states have (on average 5.5) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12
[2024-09-15 20:10:18,389 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-09-15 20:10:18,389 INFO  L225             Difference]: With dead ends: 58
[2024-09-15 20:10:18,389 INFO  L226             Difference]: Without dead ends: 58
[2024-09-15 20:10:18,390 INFO  L433           NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-09-15 20:10:18,391 INFO  L434           NwaCegarLoop]: 57 mSDtfsCounter, 1 mSDsluCounter, 38 mSDsCounter, 0 mSdLazyCounter, 58 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 95 SdHoareTripleChecker+Invalid, 58 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 58 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2024-09-15 20:10:18,391 INFO  L435           NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 95 Invalid, 58 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 58 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2024-09-15 20:10:18,392 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 58 states.
[2024-09-15 20:10:18,400 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 58.
[2024-09-15 20:10:18,400 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 58 states, 37 states have (on average 1.135135135135135) internal successors, (42), 41 states have internal predecessors, (42), 18 states have call successors, (18), 1 states have call predecessors, (18), 1 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18)
[2024-09-15 20:10:18,402 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 78 transitions.
[2024-09-15 20:10:18,403 INFO  L78                 Accepts]: Start accepts. Automaton has 58 states and 78 transitions. Word has length 12
[2024-09-15 20:10:18,403 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-09-15 20:10:18,403 INFO  L474      AbstractCegarLoop]: Abstraction has 58 states and 78 transitions.
[2024-09-15 20:10:18,403 INFO  L475      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 2 states have (on average 5.5) internal successors, (11), 3 states have internal predecessors, (11), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-09-15 20:10:18,404 INFO  L276                IsEmpty]: Start isEmpty. Operand 58 states and 78 transitions.
[2024-09-15 20:10:18,404 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 15
[2024-09-15 20:10:18,404 INFO  L208           NwaCegarLoop]: Found error trace
[2024-09-15 20:10:18,404 INFO  L216           NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-09-15 20:10:18,404 WARN  L456      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2
[2024-09-15 20:10:18,405 INFO  L399      AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION === [ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 19 more)] ===
[2024-09-15 20:10:18,405 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2024-09-15 20:10:18,406 INFO  L85        PathProgramCache]: Analyzing trace with hash -1469852467, now seen corresponding path program 1 times
[2024-09-15 20:10:18,406 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-09-15 20:10:18,407 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [270334785]
[2024-09-15 20:10:18,407 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-09-15 20:10:18,407 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-09-15 20:10:18,422 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,512 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8
[2024-09-15 20:10:18,515 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,523 INFO  L134       CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked.
[2024-09-15 20:10:18,524 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-09-15 20:10:18,524 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [270334785]
[2024-09-15 20:10:18,524 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [270334785] provided 1 perfect and 0 imperfect interpolant sequences
[2024-09-15 20:10:18,524 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-09-15 20:10:18,524 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2024-09-15 20:10:18,524 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1798543477]
[2024-09-15 20:10:18,525 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-09-15 20:10:18,525 INFO  L551      AbstractCegarLoop]: INTERPOLANT automaton has 4 states
[2024-09-15 20:10:18,525 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-09-15 20:10:18,527 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants.
[2024-09-15 20:10:18,527 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12
[2024-09-15 20:10:18,528 INFO  L87              Difference]: Start difference. First operand 58 states and 78 transitions. Second operand  has 4 states, 3 states have (on average 4.0) internal successors, (12), 4 states have internal predecessors, (12), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-09-15 20:10:18,594 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-09-15 20:10:18,594 INFO  L93              Difference]: Finished difference Result 50 states and 70 transitions.
[2024-09-15 20:10:18,598 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. 
[2024-09-15 20:10:18,599 INFO  L78                 Accepts]: Start accepts. Automaton has  has 4 states, 3 states have (on average 4.0) internal successors, (12), 4 states have internal predecessors, (12), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 14
[2024-09-15 20:10:18,599 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-09-15 20:10:18,600 INFO  L225             Difference]: With dead ends: 50
[2024-09-15 20:10:18,600 INFO  L226             Difference]: Without dead ends: 50
[2024-09-15 20:10:18,600 INFO  L433           NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12
[2024-09-15 20:10:18,601 INFO  L434           NwaCegarLoop]: 54 mSDtfsCounter, 16 mSDsluCounter, 78 mSDsCounter, 0 mSdLazyCounter, 39 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 132 SdHoareTripleChecker+Invalid, 49 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 39 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2024-09-15 20:10:18,605 INFO  L435           NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 132 Invalid, 49 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 39 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2024-09-15 20:10:18,606 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 50 states.
[2024-09-15 20:10:18,612 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 50.
[2024-09-15 20:10:18,613 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 50 states, 29 states have (on average 1.1724137931034482) internal successors, (34), 33 states have internal predecessors, (34), 18 states have call successors, (18), 1 states have call predecessors, (18), 1 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18)
[2024-09-15 20:10:18,613 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 50 states to 50 states and 70 transitions.
[2024-09-15 20:10:18,628 INFO  L78                 Accepts]: Start accepts. Automaton has 50 states and 70 transitions. Word has length 14
[2024-09-15 20:10:18,629 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-09-15 20:10:18,630 INFO  L474      AbstractCegarLoop]: Abstraction has 50 states and 70 transitions.
[2024-09-15 20:10:18,631 INFO  L475      AbstractCegarLoop]: INTERPOLANT automaton has  has 4 states, 3 states have (on average 4.0) internal successors, (12), 4 states have internal predecessors, (12), 1 states have call successors, (1), 1 states have call predecessors, (1), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1)
[2024-09-15 20:10:18,631 INFO  L276                IsEmpty]: Start isEmpty. Operand 50 states and 70 transitions.
[2024-09-15 20:10:18,632 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 32
[2024-09-15 20:10:18,632 INFO  L208           NwaCegarLoop]: Found error trace
[2024-09-15 20:10:18,633 INFO  L216           NwaCegarLoop]: trace histogram [4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-09-15 20:10:18,633 WARN  L456      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3
[2024-09-15 20:10:18,634 INFO  L399      AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr4ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 19 more)] ===
[2024-09-15 20:10:18,634 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2024-09-15 20:10:18,634 INFO  L85        PathProgramCache]: Analyzing trace with hash 1163595571, now seen corresponding path program 1 times
[2024-09-15 20:10:18,635 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-09-15 20:10:18,635 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2043594444]
[2024-09-15 20:10:18,635 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-09-15 20:10:18,635 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-09-15 20:10:18,652 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,745 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8
[2024-09-15 20:10:18,749 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,756 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13
[2024-09-15 20:10:18,758 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,763 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20
[2024-09-15 20:10:18,766 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,772 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25
[2024-09-15 20:10:18,774 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,780 INFO  L134       CoverageAnalysis]: Checked inductivity of 24 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked.
[2024-09-15 20:10:18,780 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-09-15 20:10:18,781 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2043594444]
[2024-09-15 20:10:18,781 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2043594444] provided 1 perfect and 0 imperfect interpolant sequences
[2024-09-15 20:10:18,781 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-09-15 20:10:18,781 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2024-09-15 20:10:18,781 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [899246690]
[2024-09-15 20:10:18,782 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-09-15 20:10:18,782 INFO  L551      AbstractCegarLoop]: INTERPOLANT automaton has 4 states
[2024-09-15 20:10:18,782 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-09-15 20:10:18,783 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants.
[2024-09-15 20:10:18,783 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12
[2024-09-15 20:10:18,783 INFO  L87              Difference]: Start difference. First operand 50 states and 70 transitions. Second operand  has 4 states, 3 states have (on average 4.666666666666667) internal successors, (14), 4 states have internal predecessors, (14), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4)
[2024-09-15 20:10:18,855 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-09-15 20:10:18,855 INFO  L93              Difference]: Finished difference Result 51 states and 71 transitions.
[2024-09-15 20:10:18,855 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. 
[2024-09-15 20:10:18,856 INFO  L78                 Accepts]: Start accepts. Automaton has  has 4 states, 3 states have (on average 4.666666666666667) internal successors, (14), 4 states have internal predecessors, (14), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4) Word has length 31
[2024-09-15 20:10:18,856 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-09-15 20:10:18,857 INFO  L225             Difference]: With dead ends: 51
[2024-09-15 20:10:18,857 INFO  L226             Difference]: Without dead ends: 51
[2024-09-15 20:10:18,857 INFO  L433           NwaCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12
[2024-09-15 20:10:18,858 INFO  L434           NwaCegarLoop]: 58 mSDtfsCounter, 12 mSDsluCounter, 83 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 24 SdHoareTripleChecker+Valid, 141 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2024-09-15 20:10:18,859 INFO  L435           NwaCegarLoop]: SdHoareTripleChecker [24 Valid, 141 Invalid, 38 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2024-09-15 20:10:18,860 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 51 states.
[2024-09-15 20:10:18,864 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51.
[2024-09-15 20:10:18,864 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 51 states, 30 states have (on average 1.1666666666666667) internal successors, (35), 33 states have internal predecessors, (35), 18 states have call successors, (18), 1 states have call predecessors, (18), 1 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18)
[2024-09-15 20:10:18,865 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 71 transitions.
[2024-09-15 20:10:18,865 INFO  L78                 Accepts]: Start accepts. Automaton has 51 states and 71 transitions. Word has length 31
[2024-09-15 20:10:18,866 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-09-15 20:10:18,866 INFO  L474      AbstractCegarLoop]: Abstraction has 51 states and 71 transitions.
[2024-09-15 20:10:18,866 INFO  L475      AbstractCegarLoop]: INTERPOLANT automaton has  has 4 states, 3 states have (on average 4.666666666666667) internal successors, (14), 4 states have internal predecessors, (14), 1 states have call successors, (4), 1 states have call predecessors, (4), 1 states have return successors, (4), 1 states have call predecessors, (4), 1 states have call successors, (4)
[2024-09-15 20:10:18,866 INFO  L276                IsEmpty]: Start isEmpty. Operand 51 states and 71 transitions.
[2024-09-15 20:10:18,867 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 45
[2024-09-15 20:10:18,867 INFO  L208           NwaCegarLoop]: Found error trace
[2024-09-15 20:10:18,868 INFO  L216           NwaCegarLoop]: trace histogram [6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-09-15 20:10:18,868 WARN  L456      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4
[2024-09-15 20:10:18,868 INFO  L399      AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONPRE_CONDITION === [ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 19 more)] ===
[2024-09-15 20:10:18,869 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2024-09-15 20:10:18,869 INFO  L85        PathProgramCache]: Analyzing trace with hash -371231729, now seen corresponding path program 1 times
[2024-09-15 20:10:18,869 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-09-15 20:10:18,869 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1001750332]
[2024-09-15 20:10:18,869 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-09-15 20:10:18,870 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-09-15 20:10:18,885 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,920 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8
[2024-09-15 20:10:18,924 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,928 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13
[2024-09-15 20:10:18,929 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,931 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20
[2024-09-15 20:10:18,932 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,934 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25
[2024-09-15 20:10:18,935 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,937 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 32
[2024-09-15 20:10:18,941 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,949 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37
[2024-09-15 20:10:18,951 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:18,958 INFO  L134       CoverageAnalysis]: Checked inductivity of 60 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked.
[2024-09-15 20:10:18,959 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-09-15 20:10:18,959 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1001750332]
[2024-09-15 20:10:18,959 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1001750332] provided 1 perfect and 0 imperfect interpolant sequences
[2024-09-15 20:10:18,959 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-09-15 20:10:18,960 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2024-09-15 20:10:18,960 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [539563593]
[2024-09-15 20:10:18,960 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-09-15 20:10:18,960 INFO  L551      AbstractCegarLoop]: INTERPOLANT automaton has 3 states
[2024-09-15 20:10:18,961 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-09-15 20:10:18,961 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants.
[2024-09-15 20:10:18,961 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-09-15 20:10:18,961 INFO  L87              Difference]: Start difference. First operand 51 states and 71 transitions. Second operand  has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6)
[2024-09-15 20:10:18,989 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-09-15 20:10:18,990 INFO  L93              Difference]: Finished difference Result 54 states and 75 transitions.
[2024-09-15 20:10:18,991 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. 
[2024-09-15 20:10:18,991 INFO  L78                 Accepts]: Start accepts. Automaton has  has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 44
[2024-09-15 20:10:18,991 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-09-15 20:10:18,992 INFO  L225             Difference]: With dead ends: 54
[2024-09-15 20:10:18,992 INFO  L226             Difference]: Without dead ends: 51
[2024-09-15 20:10:18,992 INFO  L433           NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 14 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6
[2024-09-15 20:10:18,994 INFO  L434           NwaCegarLoop]: 68 mSDtfsCounter, 0 mSDsluCounter, 52 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 120 SdHoareTripleChecker+Invalid, 19 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-09-15 20:10:18,994 INFO  L435           NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 120 Invalid, 19 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-09-15 20:10:18,995 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 51 states.
[2024-09-15 20:10:19,001 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 51.
[2024-09-15 20:10:19,001 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 51 states, 30 states have (on average 1.1333333333333333) internal successors, (34), 33 states have internal predecessors, (34), 18 states have call successors, (18), 1 states have call predecessors, (18), 1 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18)
[2024-09-15 20:10:19,002 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 70 transitions.
[2024-09-15 20:10:19,003 INFO  L78                 Accepts]: Start accepts. Automaton has 51 states and 70 transitions. Word has length 44
[2024-09-15 20:10:19,003 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-09-15 20:10:19,003 INFO  L474      AbstractCegarLoop]: Abstraction has 51 states and 70 transitions.
[2024-09-15 20:10:19,003 INFO  L475      AbstractCegarLoop]: INTERPOLANT automaton has  has 3 states, 3 states have (on average 5.666666666666667) internal successors, (17), 3 states have internal predecessors, (17), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6)
[2024-09-15 20:10:19,004 INFO  L276                IsEmpty]: Start isEmpty. Operand 51 states and 70 transitions.
[2024-09-15 20:10:19,006 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 46
[2024-09-15 20:10:19,006 INFO  L208           NwaCegarLoop]: Found error trace
[2024-09-15 20:10:19,006 INFO  L216           NwaCegarLoop]: trace histogram [6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-09-15 20:10:19,007 WARN  L456      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5
[2024-09-15 20:10:19,007 INFO  L399      AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONPRE_CONDITION === [ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 19 more)] ===
[2024-09-15 20:10:19,007 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2024-09-15 20:10:19,008 INFO  L85        PathProgramCache]: Analyzing trace with hash 663179677, now seen corresponding path program 1 times
[2024-09-15 20:10:19,008 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-09-15 20:10:19,008 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1711732512]
[2024-09-15 20:10:19,008 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-09-15 20:10:19,008 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-09-15 20:10:19,025 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,092 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8
[2024-09-15 20:10:19,094 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,096 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13
[2024-09-15 20:10:19,097 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,115 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20
[2024-09-15 20:10:19,120 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,123 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25
[2024-09-15 20:10:19,125 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,127 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33
[2024-09-15 20:10:19,129 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,134 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38
[2024-09-15 20:10:19,138 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,142 INFO  L134       CoverageAnalysis]: Checked inductivity of 60 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked.
[2024-09-15 20:10:19,142 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-09-15 20:10:19,142 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1711732512]
[2024-09-15 20:10:19,143 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1711732512] provided 1 perfect and 0 imperfect interpolant sequences
[2024-09-15 20:10:19,143 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-09-15 20:10:19,143 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2024-09-15 20:10:19,143 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [954679310]
[2024-09-15 20:10:19,143 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-09-15 20:10:19,145 INFO  L551      AbstractCegarLoop]: INTERPOLANT automaton has 4 states
[2024-09-15 20:10:19,145 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-09-15 20:10:19,146 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants.
[2024-09-15 20:10:19,146 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12
[2024-09-15 20:10:19,147 INFO  L87              Difference]: Start difference. First operand 51 states and 70 transitions. Second operand  has 4 states, 3 states have (on average 6.0) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6)
[2024-09-15 20:10:19,222 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-09-15 20:10:19,223 INFO  L93              Difference]: Finished difference Result 51 states and 71 transitions.
[2024-09-15 20:10:19,223 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. 
[2024-09-15 20:10:19,224 INFO  L78                 Accepts]: Start accepts. Automaton has  has 4 states, 3 states have (on average 6.0) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 45
[2024-09-15 20:10:19,225 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-09-15 20:10:19,226 INFO  L225             Difference]: With dead ends: 51
[2024-09-15 20:10:19,226 INFO  L226             Difference]: Without dead ends: 51
[2024-09-15 20:10:19,226 INFO  L433           NwaCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12
[2024-09-15 20:10:19,228 INFO  L434           NwaCegarLoop]: 55 mSDtfsCounter, 22 mSDsluCounter, 26 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 38 SdHoareTripleChecker+Valid, 81 SdHoareTripleChecker+Invalid, 46 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2024-09-15 20:10:19,228 INFO  L435           NwaCegarLoop]: SdHoareTripleChecker [38 Valid, 81 Invalid, 46 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2024-09-15 20:10:19,230 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 51 states.
[2024-09-15 20:10:19,234 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 51 to 49.
[2024-09-15 20:10:19,234 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 49 states, 28 states have (on average 1.1428571428571428) internal successors, (32), 31 states have internal predecessors, (32), 18 states have call successors, (18), 1 states have call predecessors, (18), 1 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18)
[2024-09-15 20:10:19,235 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 68 transitions.
[2024-09-15 20:10:19,235 INFO  L78                 Accepts]: Start accepts. Automaton has 49 states and 68 transitions. Word has length 45
[2024-09-15 20:10:19,236 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-09-15 20:10:19,236 INFO  L474      AbstractCegarLoop]: Abstraction has 49 states and 68 transitions.
[2024-09-15 20:10:19,236 INFO  L475      AbstractCegarLoop]: INTERPOLANT automaton has  has 4 states, 3 states have (on average 6.0) internal successors, (18), 4 states have internal predecessors, (18), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6)
[2024-09-15 20:10:19,236 INFO  L276                IsEmpty]: Start isEmpty. Operand 49 states and 68 transitions.
[2024-09-15 20:10:19,237 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 46
[2024-09-15 20:10:19,238 INFO  L208           NwaCegarLoop]: Found error trace
[2024-09-15 20:10:19,238 INFO  L216           NwaCegarLoop]: trace histogram [6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-09-15 20:10:19,238 WARN  L456      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6
[2024-09-15 20:10:19,239 INFO  L399      AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr4ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 19 more)] ===
[2024-09-15 20:10:19,239 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2024-09-15 20:10:19,239 INFO  L85        PathProgramCache]: Analyzing trace with hash 1923684362, now seen corresponding path program 1 times
[2024-09-15 20:10:19,240 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-09-15 20:10:19,240 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1306345682]
[2024-09-15 20:10:19,240 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-09-15 20:10:19,240 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-09-15 20:10:19,256 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,356 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8
[2024-09-15 20:10:19,357 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,359 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13
[2024-09-15 20:10:19,362 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,363 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20
[2024-09-15 20:10:19,364 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,370 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25
[2024-09-15 20:10:19,371 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,373 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33
[2024-09-15 20:10:19,378 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,382 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38
[2024-09-15 20:10:19,386 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,391 INFO  L134       CoverageAnalysis]: Checked inductivity of 61 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked.
[2024-09-15 20:10:19,393 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-09-15 20:10:19,393 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1306345682]
[2024-09-15 20:10:19,396 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1306345682] provided 1 perfect and 0 imperfect interpolant sequences
[2024-09-15 20:10:19,396 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-09-15 20:10:19,397 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4
[2024-09-15 20:10:19,397 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2013661081]
[2024-09-15 20:10:19,397 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-09-15 20:10:19,397 INFO  L551      AbstractCegarLoop]: INTERPOLANT automaton has 5 states
[2024-09-15 20:10:19,397 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-09-15 20:10:19,398 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants.
[2024-09-15 20:10:19,398 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20
[2024-09-15 20:10:19,398 INFO  L87              Difference]: Start difference. First operand 49 states and 68 transitions. Second operand  has 5 states, 4 states have (on average 4.5) internal successors, (18), 5 states have internal predecessors, (18), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6)
[2024-09-15 20:10:19,519 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-09-15 20:10:19,520 INFO  L93              Difference]: Finished difference Result 61 states and 88 transitions.
[2024-09-15 20:10:19,521 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. 
[2024-09-15 20:10:19,521 INFO  L78                 Accepts]: Start accepts. Automaton has  has 5 states, 4 states have (on average 4.5) internal successors, (18), 5 states have internal predecessors, (18), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 45
[2024-09-15 20:10:19,522 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-09-15 20:10:19,523 INFO  L225             Difference]: With dead ends: 61
[2024-09-15 20:10:19,523 INFO  L226             Difference]: Without dead ends: 61
[2024-09-15 20:10:19,523 INFO  L433           NwaCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30
[2024-09-15 20:10:19,524 INFO  L434           NwaCegarLoop]: 70 mSDtfsCounter, 25 mSDsluCounter, 110 mSDsCounter, 0 mSdLazyCounter, 48 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 29 SdHoareTripleChecker+Valid, 180 SdHoareTripleChecker+Invalid, 74 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 48 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2024-09-15 20:10:19,524 INFO  L435           NwaCegarLoop]: SdHoareTripleChecker [29 Valid, 180 Invalid, 74 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 48 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2024-09-15 20:10:19,525 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 61 states.
[2024-09-15 20:10:19,532 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 61 to 47.
[2024-09-15 20:10:19,533 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 47 states, 27 states have (on average 1.1111111111111112) internal successors, (30), 30 states have internal predecessors, (30), 18 states have call successors, (18), 1 states have call predecessors, (18), 1 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18)
[2024-09-15 20:10:19,534 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 66 transitions.
[2024-09-15 20:10:19,534 INFO  L78                 Accepts]: Start accepts. Automaton has 47 states and 66 transitions. Word has length 45
[2024-09-15 20:10:19,535 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-09-15 20:10:19,536 INFO  L474      AbstractCegarLoop]: Abstraction has 47 states and 66 transitions.
[2024-09-15 20:10:19,537 INFO  L475      AbstractCegarLoop]: INTERPOLANT automaton has  has 5 states, 4 states have (on average 4.5) internal successors, (18), 5 states have internal predecessors, (18), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6)
[2024-09-15 20:10:19,537 INFO  L276                IsEmpty]: Start isEmpty. Operand 47 states and 66 transitions.
[2024-09-15 20:10:19,538 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 68
[2024-09-15 20:10:19,538 INFO  L208           NwaCegarLoop]: Found error trace
[2024-09-15 20:10:19,538 INFO  L216           NwaCegarLoop]: trace histogram [10, 10, 10, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-09-15 20:10:19,538 WARN  L456      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7
[2024-09-15 20:10:19,538 INFO  L399      AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr13ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 19 more)] ===
[2024-09-15 20:10:19,539 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2024-09-15 20:10:19,539 INFO  L85        PathProgramCache]: Analyzing trace with hash -1124997950, now seen corresponding path program 1 times
[2024-09-15 20:10:19,539 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-09-15 20:10:19,539 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [468520102]
[2024-09-15 20:10:19,539 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-09-15 20:10:19,539 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-09-15 20:10:19,562 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,704 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8
[2024-09-15 20:10:19,706 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,709 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13
[2024-09-15 20:10:19,710 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,711 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20
[2024-09-15 20:10:19,712 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,716 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25
[2024-09-15 20:10:19,719 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,724 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33
[2024-09-15 20:10:19,726 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,729 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38
[2024-09-15 20:10:19,731 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,734 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44
[2024-09-15 20:10:19,736 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,739 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49
[2024-09-15 20:10:19,741 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,743 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56
[2024-09-15 20:10:19,745 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,752 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61
[2024-09-15 20:10:19,756 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,759 INFO  L134       CoverageAnalysis]: Checked inductivity of 180 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 180 trivial. 0 not checked.
[2024-09-15 20:10:19,759 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-09-15 20:10:19,760 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [468520102]
[2024-09-15 20:10:19,760 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [468520102] provided 1 perfect and 0 imperfect interpolant sequences
[2024-09-15 20:10:19,760 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-09-15 20:10:19,760 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5
[2024-09-15 20:10:19,760 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [301145464]
[2024-09-15 20:10:19,760 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-09-15 20:10:19,760 INFO  L551      AbstractCegarLoop]: INTERPOLANT automaton has 6 states
[2024-09-15 20:10:19,761 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-09-15 20:10:19,761 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants.
[2024-09-15 20:10:19,761 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30
[2024-09-15 20:10:19,762 INFO  L87              Difference]: Start difference. First operand 47 states and 66 transitions. Second operand  has 6 states, 5 states have (on average 4.0) internal successors, (20), 6 states have internal predecessors, (20), 3 states have call successors, (10), 1 states have call predecessors, (10), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10)
[2024-09-15 20:10:19,887 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-09-15 20:10:19,888 INFO  L93              Difference]: Finished difference Result 68 states and 97 transitions.
[2024-09-15 20:10:19,888 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. 
[2024-09-15 20:10:19,889 INFO  L78                 Accepts]: Start accepts. Automaton has  has 6 states, 5 states have (on average 4.0) internal successors, (20), 6 states have internal predecessors, (20), 3 states have call successors, (10), 1 states have call predecessors, (10), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 67
[2024-09-15 20:10:19,889 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-09-15 20:10:19,890 INFO  L225             Difference]: With dead ends: 68
[2024-09-15 20:10:19,890 INFO  L226             Difference]: Without dead ends: 68
[2024-09-15 20:10:19,890 INFO  L433           NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=25, Invalid=31, Unknown=0, NotChecked=0, Total=56
[2024-09-15 20:10:19,891 INFO  L434           NwaCegarLoop]: 69 mSDtfsCounter, 46 mSDsluCounter, 44 mSDsCounter, 0 mSdLazyCounter, 71 mSolverCounterSat, 43 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 48 SdHoareTripleChecker+Valid, 113 SdHoareTripleChecker+Invalid, 114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 43 IncrementalHoareTripleChecker+Valid, 71 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2024-09-15 20:10:19,891 INFO  L435           NwaCegarLoop]: SdHoareTripleChecker [48 Valid, 113 Invalid, 114 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [43 Valid, 71 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2024-09-15 20:10:19,892 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 68 states.
[2024-09-15 20:10:19,895 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 54.
[2024-09-15 20:10:19,895 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 54 states, 32 states have (on average 1.125) internal successors, (36), 35 states have internal predecessors, (36), 20 states have call successors, (20), 1 states have call predecessors, (20), 1 states have return successors, (20), 20 states have call predecessors, (20), 20 states have call successors, (20)
[2024-09-15 20:10:19,896 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 76 transitions.
[2024-09-15 20:10:19,896 INFO  L78                 Accepts]: Start accepts. Automaton has 54 states and 76 transitions. Word has length 67
[2024-09-15 20:10:19,896 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-09-15 20:10:19,896 INFO  L474      AbstractCegarLoop]: Abstraction has 54 states and 76 transitions.
[2024-09-15 20:10:19,896 INFO  L475      AbstractCegarLoop]: INTERPOLANT automaton has  has 6 states, 5 states have (on average 4.0) internal successors, (20), 6 states have internal predecessors, (20), 3 states have call successors, (10), 1 states have call predecessors, (10), 1 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10)
[2024-09-15 20:10:19,897 INFO  L276                IsEmpty]: Start isEmpty. Operand 54 states and 76 transitions.
[2024-09-15 20:10:19,897 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 82
[2024-09-15 20:10:19,898 INFO  L208           NwaCegarLoop]: Found error trace
[2024-09-15 20:10:19,898 INFO  L216           NwaCegarLoop]: trace histogram [12, 12, 12, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-09-15 20:10:19,898 WARN  L456      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8
[2024-09-15 20:10:19,898 INFO  L399      AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr16REQUIRES_VIOLATIONPRE_CONDITION === [ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 19 more)] ===
[2024-09-15 20:10:19,898 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2024-09-15 20:10:19,898 INFO  L85        PathProgramCache]: Analyzing trace with hash -1959119514, now seen corresponding path program 1 times
[2024-09-15 20:10:19,898 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-09-15 20:10:19,899 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1189313227]
[2024-09-15 20:10:19,899 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-09-15 20:10:19,899 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-09-15 20:10:19,910 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,966 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8
[2024-09-15 20:10:19,967 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,968 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13
[2024-09-15 20:10:19,969 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,970 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20
[2024-09-15 20:10:19,971 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,973 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25
[2024-09-15 20:10:19,973 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,975 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33
[2024-09-15 20:10:19,975 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,977 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38
[2024-09-15 20:10:19,977 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,978 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44
[2024-09-15 20:10:19,979 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,980 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49
[2024-09-15 20:10:19,981 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,982 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56
[2024-09-15 20:10:19,983 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,984 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61
[2024-09-15 20:10:19,985 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,986 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68
[2024-09-15 20:10:19,988 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,990 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73
[2024-09-15 20:10:19,992 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:19,997 INFO  L134       CoverageAnalysis]: Checked inductivity of 264 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 264 trivial. 0 not checked.
[2024-09-15 20:10:20,000 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-09-15 20:10:20,000 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1189313227]
[2024-09-15 20:10:20,000 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1189313227] provided 1 perfect and 0 imperfect interpolant sequences
[2024-09-15 20:10:20,001 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-09-15 20:10:20,001 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2024-09-15 20:10:20,001 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1846413625]
[2024-09-15 20:10:20,001 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-09-15 20:10:20,001 INFO  L551      AbstractCegarLoop]: INTERPOLANT automaton has 4 states
[2024-09-15 20:10:20,001 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-09-15 20:10:20,002 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants.
[2024-09-15 20:10:20,002 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12
[2024-09-15 20:10:20,002 INFO  L87              Difference]: Start difference. First operand 54 states and 76 transitions. Second operand  has 4 states, 3 states have (on average 8.0) internal successors, (24), 4 states have internal predecessors, (24), 2 states have call successors, (12), 1 states have call predecessors, (12), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12)
[2024-09-15 20:10:20,061 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-09-15 20:10:20,061 INFO  L93              Difference]: Finished difference Result 58 states and 81 transitions.
[2024-09-15 20:10:20,062 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. 
[2024-09-15 20:10:20,062 INFO  L78                 Accepts]: Start accepts. Automaton has  has 4 states, 3 states have (on average 8.0) internal successors, (24), 4 states have internal predecessors, (24), 2 states have call successors, (12), 1 states have call predecessors, (12), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 81
[2024-09-15 20:10:20,062 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-09-15 20:10:20,063 INFO  L225             Difference]: With dead ends: 58
[2024-09-15 20:10:20,063 INFO  L226             Difference]: Without dead ends: 58
[2024-09-15 20:10:20,063 INFO  L433           NwaCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12
[2024-09-15 20:10:20,064 INFO  L434           NwaCegarLoop]: 60 mSDtfsCounter, 5 mSDsluCounter, 93 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 9 SdHoareTripleChecker+Valid, 153 SdHoareTripleChecker+Invalid, 32 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2024-09-15 20:10:20,064 INFO  L435           NwaCegarLoop]: SdHoareTripleChecker [9 Valid, 153 Invalid, 32 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2024-09-15 20:10:20,065 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 58 states.
[2024-09-15 20:10:20,067 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 58 to 53.
[2024-09-15 20:10:20,068 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 53 states, 31 states have (on average 1.1290322580645162) internal successors, (35), 34 states have internal predecessors, (35), 20 states have call successors, (20), 1 states have call predecessors, (20), 1 states have return successors, (20), 20 states have call predecessors, (20), 20 states have call successors, (20)
[2024-09-15 20:10:20,071 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 75 transitions.
[2024-09-15 20:10:20,071 INFO  L78                 Accepts]: Start accepts. Automaton has 53 states and 75 transitions. Word has length 81
[2024-09-15 20:10:20,071 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-09-15 20:10:20,071 INFO  L474      AbstractCegarLoop]: Abstraction has 53 states and 75 transitions.
[2024-09-15 20:10:20,071 INFO  L475      AbstractCegarLoop]: INTERPOLANT automaton has  has 4 states, 3 states have (on average 8.0) internal successors, (24), 4 states have internal predecessors, (24), 2 states have call successors, (12), 1 states have call predecessors, (12), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12)
[2024-09-15 20:10:20,071 INFO  L276                IsEmpty]: Start isEmpty. Operand 53 states and 75 transitions.
[2024-09-15 20:10:20,072 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 87
[2024-09-15 20:10:20,072 INFO  L208           NwaCegarLoop]: Found error trace
[2024-09-15 20:10:20,074 INFO  L216           NwaCegarLoop]: trace histogram [13, 13, 13, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-09-15 20:10:20,074 WARN  L456      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9
[2024-09-15 20:10:20,074 INFO  L399      AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr17REQUIRES_VIOLATIONPRE_CONDITION === [ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 19 more)] ===
[2024-09-15 20:10:20,075 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2024-09-15 20:10:20,075 INFO  L85        PathProgramCache]: Analyzing trace with hash 3523265, now seen corresponding path program 1 times
[2024-09-15 20:10:20,075 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-09-15 20:10:20,075 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1247259754]
[2024-09-15 20:10:20,075 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-09-15 20:10:20,075 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-09-15 20:10:20,091 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,159 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8
[2024-09-15 20:10:20,160 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,162 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13
[2024-09-15 20:10:20,163 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,166 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20
[2024-09-15 20:10:20,167 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,169 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25
[2024-09-15 20:10:20,170 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,171 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33
[2024-09-15 20:10:20,173 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,174 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38
[2024-09-15 20:10:20,175 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,176 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44
[2024-09-15 20:10:20,176 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,178 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49
[2024-09-15 20:10:20,179 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,181 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56
[2024-09-15 20:10:20,182 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,185 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61
[2024-09-15 20:10:20,186 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,188 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68
[2024-09-15 20:10:20,189 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,192 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73
[2024-09-15 20:10:20,193 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,194 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80
[2024-09-15 20:10:20,196 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,198 INFO  L134       CoverageAnalysis]: Checked inductivity of 312 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 312 trivial. 0 not checked.
[2024-09-15 20:10:20,200 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-09-15 20:10:20,200 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1247259754]
[2024-09-15 20:10:20,200 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1247259754] provided 1 perfect and 0 imperfect interpolant sequences
[2024-09-15 20:10:20,201 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences.
[2024-09-15 20:10:20,201 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3
[2024-09-15 20:10:20,201 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1377747616]
[2024-09-15 20:10:20,201 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-09-15 20:10:20,201 INFO  L551      AbstractCegarLoop]: INTERPOLANT automaton has 4 states
[2024-09-15 20:10:20,201 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-09-15 20:10:20,202 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants.
[2024-09-15 20:10:20,202 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12
[2024-09-15 20:10:20,202 INFO  L87              Difference]: Start difference. First operand 53 states and 75 transitions. Second operand  has 4 states, 3 states have (on average 8.0) internal successors, (24), 4 states have internal predecessors, (24), 3 states have call successors, (13), 1 states have call predecessors, (13), 1 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13)
[2024-09-15 20:10:20,245 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-09-15 20:10:20,246 INFO  L93              Difference]: Finished difference Result 52 states and 74 transitions.
[2024-09-15 20:10:20,246 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. 
[2024-09-15 20:10:20,246 INFO  L78                 Accepts]: Start accepts. Automaton has  has 4 states, 3 states have (on average 8.0) internal successors, (24), 4 states have internal predecessors, (24), 3 states have call successors, (13), 1 states have call predecessors, (13), 1 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13) Word has length 86
[2024-09-15 20:10:20,247 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-09-15 20:10:20,247 INFO  L225             Difference]: With dead ends: 52
[2024-09-15 20:10:20,247 INFO  L226             Difference]: Without dead ends: 52
[2024-09-15 20:10:20,248 INFO  L433           NwaCegarLoop]: 0 DeclaredPredicates, 29 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12
[2024-09-15 20:10:20,248 INFO  L434           NwaCegarLoop]: 65 mSDtfsCounter, 7 mSDsluCounter, 102 mSDsCounter, 0 mSdLazyCounter, 32 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 167 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 32 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time
[2024-09-15 20:10:20,248 INFO  L435           NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 167 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 32 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time]
[2024-09-15 20:10:20,249 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 52 states.
[2024-09-15 20:10:20,251 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 52.
[2024-09-15 20:10:20,255 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 52 states, 30 states have (on average 1.1333333333333333) internal successors, (34), 33 states have internal predecessors, (34), 20 states have call successors, (20), 1 states have call predecessors, (20), 1 states have return successors, (20), 20 states have call predecessors, (20), 20 states have call successors, (20)
[2024-09-15 20:10:20,256 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 74 transitions.
[2024-09-15 20:10:20,256 INFO  L78                 Accepts]: Start accepts. Automaton has 52 states and 74 transitions. Word has length 86
[2024-09-15 20:10:20,256 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-09-15 20:10:20,256 INFO  L474      AbstractCegarLoop]: Abstraction has 52 states and 74 transitions.
[2024-09-15 20:10:20,256 INFO  L475      AbstractCegarLoop]: INTERPOLANT automaton has  has 4 states, 3 states have (on average 8.0) internal successors, (24), 4 states have internal predecessors, (24), 3 states have call successors, (13), 1 states have call predecessors, (13), 1 states have return successors, (13), 3 states have call predecessors, (13), 3 states have call successors, (13)
[2024-09-15 20:10:20,256 INFO  L276                IsEmpty]: Start isEmpty. Operand 52 states and 74 transitions.
[2024-09-15 20:10:20,258 INFO  L282                IsEmpty]: Finished isEmpty. Found accepting run of length 103
[2024-09-15 20:10:20,262 INFO  L208           NwaCegarLoop]: Found error trace
[2024-09-15 20:10:20,262 INFO  L216           NwaCegarLoop]: trace histogram [16, 16, 16, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-09-15 20:10:20,262 WARN  L456      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10
[2024-09-15 20:10:20,263 INFO  L399      AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr13ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 19 more)] ===
[2024-09-15 20:10:20,263 INFO  L160       PredicateUnifier]: Initialized classic predicate unifier
[2024-09-15 20:10:20,263 INFO  L85        PathProgramCache]: Analyzing trace with hash -1371400769, now seen corresponding path program 1 times
[2024-09-15 20:10:20,263 INFO  L118   FreeRefinementEngine]: Executing refinement strategy CAMEL
[2024-09-15 20:10:20,263 INFO  L334   FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1995444293]
[2024-09-15 20:10:20,264 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-09-15 20:10:20,264 INFO  L127          SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms
[2024-09-15 20:10:20,279 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,503 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8
[2024-09-15 20:10:20,504 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,506 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13
[2024-09-15 20:10:20,506 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,507 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20
[2024-09-15 20:10:20,508 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,509 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25
[2024-09-15 20:10:20,509 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,510 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33
[2024-09-15 20:10:20,511 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,513 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38
[2024-09-15 20:10:20,514 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,516 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 44
[2024-09-15 20:10:20,517 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,518 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49
[2024-09-15 20:10:20,519 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,521 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56
[2024-09-15 20:10:20,522 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,524 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61
[2024-09-15 20:10:20,525 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,528 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 68
[2024-09-15 20:10:20,529 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,532 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73
[2024-09-15 20:10:20,534 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,537 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80
[2024-09-15 20:10:20,543 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,548 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 85
[2024-09-15 20:10:20,550 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,554 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90
[2024-09-15 20:10:20,556 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,559 INFO  L381   atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95
[2024-09-15 20:10:20,561 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,564 INFO  L134       CoverageAnalysis]: Checked inductivity of 481 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 480 trivial. 0 not checked.
[2024-09-15 20:10:20,565 INFO  L136   FreeRefinementEngine]: Strategy CAMEL found an infeasible trace
[2024-09-15 20:10:20,565 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1995444293]
[2024-09-15 20:10:20,565 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1995444293] provided 0 perfect and 1 imperfect interpolant sequences
[2024-09-15 20:10:20,565 INFO  L334   FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [740011634]
[2024-09-15 20:10:20,565 INFO  L95    rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY
[2024-09-15 20:10:20,566 INFO  L173          SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true
[2024-09-15 20:10:20,566 INFO  L189       MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3
[2024-09-15 20:10:20,568 INFO  L229       MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null)
[2024-09-15 20:10:20,570 INFO  L327       MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process
[2024-09-15 20:10:20,639 INFO  L136    AnnotateAndAsserter]: Conjunction of SSA is unsat
[2024-09-15 20:10:20,642 INFO  L262         TraceCheckSpWp]: Trace formula consists of 228 conjuncts, 10 conjuncts are in the unsatisfiable core
[2024-09-15 20:10:20,649 INFO  L285         TraceCheckSpWp]: Computing forward predicates...
[2024-09-15 20:10:20,850 INFO  L134       CoverageAnalysis]: Checked inductivity of 481 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 480 trivial. 0 not checked.
[2024-09-15 20:10:20,850 INFO  L327         TraceCheckSpWp]: Computing backward predicates...
[2024-09-15 20:10:21,111 INFO  L134       CoverageAnalysis]: Checked inductivity of 481 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 480 trivial. 0 not checked.
[2024-09-15 20:10:21,112 INFO  L158   FreeRefinementEngine]: IpTcStrategyModuleZ3 [740011634] provided 1 perfect and 1 imperfect interpolant sequences
[2024-09-15 20:10:21,112 INFO  L185   FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences.
[2024-09-15 20:10:21,112 INFO  L198   FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [8, 8] total 12
[2024-09-15 20:10:21,112 INFO  L121   tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1176741221]
[2024-09-15 20:10:21,112 INFO  L85    oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton
[2024-09-15 20:10:21,113 INFO  L551      AbstractCegarLoop]: INTERPOLANT automaton has 6 states
[2024-09-15 20:10:21,113 INFO  L100   FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL
[2024-09-15 20:10:21,113 INFO  L143   InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants.
[2024-09-15 20:10:21,113 INFO  L145   InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=105, Unknown=0, NotChecked=0, Total=156
[2024-09-15 20:10:21,113 INFO  L87              Difference]: Start difference. First operand 52 states and 74 transitions. Second operand  has 6 states, 5 states have (on average 5.0) internal successors, (25), 6 states have internal predecessors, (25), 3 states have call successors, (16), 1 states have call predecessors, (16), 1 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16)
[2024-09-15 20:10:21,211 INFO  L144             Difference]: Subtrahend was deterministic. Have not used determinization.
[2024-09-15 20:10:21,211 INFO  L93              Difference]: Finished difference Result 57 states and 83 transitions.
[2024-09-15 20:10:21,212 INFO  L141   InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. 
[2024-09-15 20:10:21,212 INFO  L78                 Accepts]: Start accepts. Automaton has  has 6 states, 5 states have (on average 5.0) internal successors, (25), 6 states have internal predecessors, (25), 3 states have call successors, (16), 1 states have call predecessors, (16), 1 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16) Word has length 102
[2024-09-15 20:10:21,212 INFO  L84                 Accepts]: Finished accepts. some prefix is accepted.
[2024-09-15 20:10:21,212 INFO  L225             Difference]: With dead ends: 57
[2024-09-15 20:10:21,213 INFO  L226             Difference]: Without dead ends: 0
[2024-09-15 20:10:21,213 INFO  L433           NwaCegarLoop]: 0 DeclaredPredicates, 243 GetRequests, 230 SyntacticMatches, 1 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 38 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=123, Unknown=0, NotChecked=0, Total=182
[2024-09-15 20:10:21,213 INFO  L434           NwaCegarLoop]: 72 mSDtfsCounter, 7 mSDsluCounter, 142 mSDsCounter, 0 mSdLazyCounter, 64 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 214 SdHoareTripleChecker+Invalid, 75 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 64 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time
[2024-09-15 20:10:21,214 INFO  L435           NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 214 Invalid, 75 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 64 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time]
[2024-09-15 20:10:21,215 INFO  L82        GeneralOperation]: Start minimizeSevpa. Operand 0 states.
[2024-09-15 20:10:21,215 INFO  L88        GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0.
[2024-09-15 20:10:21,215 INFO  L82        GeneralOperation]: Start removeUnreachable. Operand  has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)
[2024-09-15 20:10:21,215 INFO  L88        GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions.
[2024-09-15 20:10:21,215 INFO  L78                 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 102
[2024-09-15 20:10:21,215 INFO  L84                 Accepts]: Finished accepts. word is rejected.
[2024-09-15 20:10:21,215 INFO  L474      AbstractCegarLoop]: Abstraction has 0 states and 0 transitions.
[2024-09-15 20:10:21,216 INFO  L475      AbstractCegarLoop]: INTERPOLANT automaton has  has 6 states, 5 states have (on average 5.0) internal successors, (25), 6 states have internal predecessors, (25), 3 states have call successors, (16), 1 states have call predecessors, (16), 1 states have return successors, (16), 3 states have call predecessors, (16), 3 states have call successors, (16)
[2024-09-15 20:10:21,216 INFO  L276                IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions.
[2024-09-15 20:10:21,216 INFO  L282                IsEmpty]: Finished isEmpty. No accepting run.
[2024-09-15 20:10:21,218 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0REQUIRES_VIOLATIONPRE_CONDITION (21 of 22 remaining)
[2024-09-15 20:10:21,219 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1REQUIRES_VIOLATIONPRE_CONDITION (20 of 22 remaining)
[2024-09-15 20:10:21,219 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (19 of 22 remaining)
[2024-09-15 20:10:21,220 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr3REQUIRES_VIOLATIONPRE_CONDITION (18 of 22 remaining)
[2024-09-15 20:10:21,220 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr4ASSERT_VIOLATIONWITNESS_INVARIANT (17 of 22 remaining)
[2024-09-15 20:10:21,220 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr5REQUIRES_VIOLATIONPRE_CONDITION (16 of 22 remaining)
[2024-09-15 20:10:21,220 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr6REQUIRES_VIOLATIONPRE_CONDITION (15 of 22 remaining)
[2024-09-15 20:10:21,220 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr7REQUIRES_VIOLATIONPRE_CONDITION (14 of 22 remaining)
[2024-09-15 20:10:21,221 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr8REQUIRES_VIOLATIONPRE_CONDITION (13 of 22 remaining)
[2024-09-15 20:10:21,221 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr9REQUIRES_VIOLATIONPRE_CONDITION (12 of 22 remaining)
[2024-09-15 20:10:21,221 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr10REQUIRES_VIOLATIONPRE_CONDITION (11 of 22 remaining)
[2024-09-15 20:10:21,221 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr11REQUIRES_VIOLATIONPRE_CONDITION (10 of 22 remaining)
[2024-09-15 20:10:21,221 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr12REQUIRES_VIOLATIONPRE_CONDITION (9 of 22 remaining)
[2024-09-15 20:10:21,221 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr13ASSERT_VIOLATIONWITNESS_INVARIANT (8 of 22 remaining)
[2024-09-15 20:10:21,221 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr14REQUIRES_VIOLATIONPRE_CONDITION (7 of 22 remaining)
[2024-09-15 20:10:21,222 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr15REQUIRES_VIOLATIONPRE_CONDITION (6 of 22 remaining)
[2024-09-15 20:10:21,222 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr16REQUIRES_VIOLATIONPRE_CONDITION (5 of 22 remaining)
[2024-09-15 20:10:21,222 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr17REQUIRES_VIOLATIONPRE_CONDITION (4 of 22 remaining)
[2024-09-15 20:10:21,222 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr18REQUIRES_VIOLATIONPRE_CONDITION (3 of 22 remaining)
[2024-09-15 20:10:21,222 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr19REQUIRES_VIOLATIONPRE_CONDITION (2 of 22 remaining)
[2024-09-15 20:10:21,222 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 22 remaining)
[2024-09-15 20:10:21,223 INFO  L785   garLoopResultBuilder]: Registering result SAFE for location __VERIFIER_assertErr1ENSURES_VIOLATIONPOST_CONDITION (0 of 22 remaining)
[2024-09-15 20:10:21,240 INFO  L540       MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0
[2024-09-15 20:10:21,426 WARN  L456      AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11
[2024-09-15 20:10:21,429 INFO  L408         BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1]
[2024-09-15 20:10:21,431 INFO  L165   ceAbstractionStarter]: Computing trace abstraction results
[2024-09-15 20:10:21,433 INFO  L469   ceAbstractionStarter]: Automizer considered 2 witness invariants
[2024-09-15 20:10:21,433 INFO  L470   ceAbstractionStarter]: WitnessConsidered=2
[2024-09-15 20:10:21,434 INFO  L201        PluginConnector]: Adding new model witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 15.09 08:10:21 BoogieIcfgContainer
[2024-09-15 20:10:21,434 INFO  L131        PluginConnector]: ------------------------ END TraceAbstraction----------------------------
[2024-09-15 20:10:21,434 INFO  L158              Benchmark]: Toolchain (without parser) took 4928.16ms. Allocated memory was 90.2MB in the beginning and 134.2MB in the end (delta: 44.0MB). Free memory was 60.3MB in the beginning and 64.1MB in the end (delta: -3.9MB). Peak memory consumption was 42.8MB. Max. memory is 16.1GB.
[2024-09-15 20:10:21,435 INFO  L158              Benchmark]: CDTParser took 0.18ms. Allocated memory is still 62.9MB. Free memory was 35.0MB in the beginning and 34.9MB in the end (delta: 73.4kB). There was no memory consumed. Max. memory is 16.1GB.
[2024-09-15 20:10:21,438 INFO  L158              Benchmark]: Witness Parser took 0.20ms. Allocated memory is still 90.2MB. Free memory is still 62.3MB. There was no memory consumed. Max. memory is 16.1GB.
[2024-09-15 20:10:21,438 INFO  L158              Benchmark]: CACSL2BoogieTranslator took 347.19ms. Allocated memory is still 90.2MB. Free memory was 60.1MB in the beginning and 69.5MB in the end (delta: -9.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB.
[2024-09-15 20:10:21,439 INFO  L158              Benchmark]: Boogie Procedure Inliner took 44.69ms. Allocated memory is still 90.2MB. Free memory was 69.5MB in the beginning and 67.6MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB.
[2024-09-15 20:10:21,439 INFO  L158              Benchmark]: Boogie Preprocessor took 39.86ms. Allocated memory is still 90.2MB. Free memory was 67.6MB in the beginning and 65.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB.
[2024-09-15 20:10:21,439 INFO  L158              Benchmark]: RCFGBuilder took 483.88ms. Allocated memory is still 90.2MB. Free memory was 65.9MB in the beginning and 47.9MB in the end (delta: 18.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
[2024-09-15 20:10:21,439 INFO  L158              Benchmark]: TraceAbstraction took 4006.34ms. Allocated memory was 90.2MB in the beginning and 134.2MB in the end (delta: 44.0MB). Free memory was 47.4MB in the beginning and 64.1MB in the end (delta: -16.8MB). Peak memory consumption was 26.6MB. Max. memory is 16.1GB.
[2024-09-15 20:10:21,441 INFO  L338   ainManager$Toolchain]: #######################  End [Toolchain 1] #######################
 --- Results ---
 * Results from de.uni_freiburg.informatik.ultimate.core:
  - StatisticsResult: Toolchain Benchmarks
    Benchmark results are:
 * CDTParser took 0.18ms. Allocated memory is still 62.9MB. Free memory was 35.0MB in the beginning and 34.9MB in the end (delta: 73.4kB). There was no memory consumed. Max. memory is 16.1GB.
 * Witness Parser took 0.20ms. Allocated memory is still 90.2MB. Free memory is still 62.3MB. There was no memory consumed. Max. memory is 16.1GB.
 * CACSL2BoogieTranslator took 347.19ms. Allocated memory is still 90.2MB. Free memory was 60.1MB in the beginning and 69.5MB in the end (delta: -9.4MB). Peak memory consumption was 18.9MB. Max. memory is 16.1GB.
 * Boogie Procedure Inliner took 44.69ms. Allocated memory is still 90.2MB. Free memory was 69.5MB in the beginning and 67.6MB in the end (delta: 1.9MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB.
 * Boogie Preprocessor took 39.86ms. Allocated memory is still 90.2MB. Free memory was 67.6MB in the beginning and 65.9MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB.
 * RCFGBuilder took 483.88ms. Allocated memory is still 90.2MB. Free memory was 65.9MB in the beginning and 47.9MB in the end (delta: 18.0MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB.
 * TraceAbstraction took 4006.34ms. Allocated memory was 90.2MB in the beginning and 134.2MB in the end (delta: 44.0MB). Free memory was 47.4MB in the beginning and 64.1MB in the end (delta: -16.8MB). Peak memory consumption was 26.6MB. Max. memory is 16.1GB.
 * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction:
  - StatisticsResult: ErrorAutomatonStatistics
    NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 47]: invariant of correctness witness holds
    For all program executions holds that invariant of correctness witness holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 65]: invariant of correctness witness holds
    For all program executions holds that invariant of correctness witness holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 17]: procedure precondition always holds
    For all program executions holds that procedure precondition always holds at this location
  - PositiveResult [Line: 19]: a call to reach_error is unreachable
    For all program executions holds that a call to reach_error is unreachable at this location
  - PositiveResult [Line: 17]: procedure postcondition always holds
    For all program executions holds that procedure postcondition always holds at this location
  - StatisticsResult: Ultimate Automizer benchmark data
    CFG has 2 procedures, 70 locations, 22 error locations. Started 1 CEGAR loops. OverallTime: 3.9s, OverallIterations: 12, TraceHistogramMax: 16, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 1.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 233 SdHoareTripleChecker+Valid, 0.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 157 mSDsluCounter, 1657 SdHoareTripleChecker+Invalid, 0.7s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 880 mSDsCounter, 119 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 482 IncrementalHoareTripleChecker+Invalid, 601 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 119 mSolverCounterUnsat, 777 mSDtfsCounter, 482 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 396 GetRequests, 359 SyntacticMatches, 1 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 38 ImplicationChecksByTransitivity, 0.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=70occurred in iteration=0, InterpolantAutomatonStates: 53, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 12 MinimizatonAttempts, 36 StatesRemovedByMinimization, 5 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 650 NumberOfCodeBlocks, 650 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 738 ConstructedInterpolants, 0 QuantifiedInterpolants, 1487 SizeOfPredicates, 1 NumberOfNonLiveVariables, 228 ConjunctsInSsa, 10 ConjunctsInUnsatCore, 14 InterpolantComputations, 12 PerfectInterpolantSequences, 2402/2404 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available
  - AllSpecificationsHoldResult: All specifications hold
    22 specifications checked. All of them hold
RESULT: Ultimate proved your program to be correct!
[2024-09-15 20:10:21,476 INFO  L552       MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0
Received shutdown request...
--- End real Ultimate output ---

Execution finished normally
Writing output log to file Ultimate.log
Result:
TRUE