./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/nla-digbench-scaling/hard2_valuebound2.c --full-output --witness-type correctness_witness --validate ../results/automizer-verification-files/SV-COMP24_unreach-call/hard2_valuebound2.yml/witness-2.1.yml --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 04d6fb36 Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReachWitnessValidation.xml -i ../sv-benchmarks/c/nla-digbench-scaling/hard2_valuebound2.c ../results/automizer-verification-files/SV-COMP24_unreach-call/hard2_valuebound2.yml/witness-2.1.yml -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --traceabstraction.positions.where.we.compute.the.hoare.annotation None --- Real Ultimate output --- This is Ultimate 0.2.4-tmp.dk.referee-eval-04d6fb3-m [2024-09-15 20:17:57,512 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-15 20:17:57,587 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-15 20:17:57,593 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-15 20:17:57,594 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-15 20:17:57,627 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-15 20:17:57,628 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-15 20:17:57,629 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-15 20:17:57,629 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-15 20:17:57,630 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-15 20:17:57,630 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-15 20:17:57,630 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-15 20:17:57,631 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-15 20:17:57,631 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-15 20:17:57,632 INFO L153 SettingsManager]: * Use SBE=true [2024-09-15 20:17:57,632 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-15 20:17:57,633 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-15 20:17:57,633 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-15 20:17:57,633 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-15 20:17:57,634 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-15 20:17:57,634 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-15 20:17:57,635 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-15 20:17:57,635 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-15 20:17:57,635 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-15 20:17:57,636 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-15 20:17:57,636 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-15 20:17:57,636 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-15 20:17:57,637 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-15 20:17:57,637 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-15 20:17:57,637 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-15 20:17:57,638 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-15 20:17:57,638 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-15 20:17:57,639 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-15 20:17:57,639 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-15 20:17:57,639 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-15 20:17:57,640 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-15 20:17:57,640 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-15 20:17:57,640 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-15 20:17:57,641 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-15 20:17:57,641 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-15 20:17:57,641 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-15 20:17:57,642 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-15 20:17:57,645 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> None [2024-09-15 20:17:57,957 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-15 20:17:57,976 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-15 20:17:57,979 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-15 20:17:57,980 INFO L270 PluginConnector]: Initializing Witness Parser... [2024-09-15 20:17:57,981 INFO L274 PluginConnector]: Witness Parser initialized [2024-09-15 20:17:57,982 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../results/automizer-verification-files/SV-COMP24_unreach-call/hard2_valuebound2.yml/witness-2.1.yml [2024-09-15 20:17:58,048 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-15 20:17:58,048 INFO L274 PluginConnector]: CDTParser initialized [2024-09-15 20:17:58,048 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/nla-digbench-scaling/hard2_valuebound2.c [2024-09-15 20:17:59,497 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-15 20:17:59,683 INFO L384 CDTParser]: Found 1 translation units. [2024-09-15 20:17:59,683 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/nla-digbench-scaling/hard2_valuebound2.c [2024-09-15 20:17:59,691 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/545324af8/e2ad43a159154750b9cfe9af2b0705d1/FLAG6f1cbd5d3 [2024-09-15 20:17:59,709 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/545324af8/e2ad43a159154750b9cfe9af2b0705d1 [2024-09-15 20:17:59,710 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-15 20:17:59,712 INFO L133 ToolchainWalker]: Walking toolchain with 5 elements. [2024-09-15 20:17:59,713 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-15 20:17:59,713 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-15 20:17:59,720 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-15 20:17:59,721 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 15.09 08:17:58" (1/2) ... [2024-09-15 20:17:59,723 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@17aae613 and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:17:59, skipping insertion in model container [2024-09-15 20:17:59,723 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 15.09 08:17:58" (1/2) ... [2024-09-15 20:17:59,727 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@9e2b26f and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator CORRECTNESS_WITNESS 15.09 08:17:59, skipping insertion in model container [2024-09-15 20:17:59,727 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.09 08:17:59" (2/2) ... [2024-09-15 20:17:59,727 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@17aae613 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:17:59, skipping insertion in model container [2024-09-15 20:17:59,727 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.09 08:17:59" (2/2) ... [2024-09-15 20:17:59,738 INFO L93 nessWitnessExtractor]: Found the following entries in the witness: [2024-09-15 20:17:59,740 INFO L1541 ArrayList]: Loop invariant at [L44-L56] (((((((((((r == 0) && (A == 2)) && (q == 2)) && (d == 1)) && (B == 1)) && (p == 1)) || (((((A == r) && (p == 2)) && (d == 2)) && (q == 0)) && (B == 1))) || ((((((r == 0) && (A == 2)) && (q == 2)) && (p == 2)) && (d == 2)) && (B == 1))) || (((((A == ((long long) r + 1)) && (d == 1)) && (B == 1)) && (q == 1)) && (p == 1))) || (((((A == r) && (d == 1)) && (q == 0)) && (B == 1)) && (p == 1))) || ((((((A == 2) && (r == 2)) && (d == 4)) && (q == 0)) && (B == 1)) && (p == 4))) [2024-09-15 20:17:59,740 INFO L1541 ArrayList]: Loop invariant at [L34-L42] (((((((((A == r) && (p == 2)) && (1 <= r)) && (d == 2)) && (r <= 2)) && (q == 0)) && (B == 1)) || (((((((0 <= A) && (A == r)) && (d == 1)) && (r <= 2)) && (q == 0)) && (B == 1)) && (p == 1))) || ((((((A == 2) && (r == 2)) && (d == 4)) && (q == 0)) && (B == 1)) && (p == 4))) [2024-09-15 20:17:59,740 INFO L1541 ArrayList]: Function contract at [L14]: requires (\old(cond) != 0), ensures (\old(cond) != 0) [2024-09-15 20:17:59,741 INFO L1541 ArrayList]: Function contract at [L11]: requires null, ensures (\old(cond) != 0) [2024-09-15 20:17:59,760 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-15 20:17:59,919 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/nla-digbench-scaling/hard2_valuebound2.c[526,539] [2024-09-15 20:17:59,943 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-15 20:17:59,954 INFO L200 MainTranslator]: Completed pre-run Start Parsing Global Start Parsing Global Start Parsing Global [2024-09-15 20:18:00,011 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/nla-digbench-scaling/hard2_valuebound2.c[526,539] Start Parsing Local Start Parsing Local [2024-09-15 20:18:00,036 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-15 20:18:00,055 INFO L204 MainTranslator]: Completed translation [2024-09-15 20:18:00,056 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00 WrapperNode [2024-09-15 20:18:00,056 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-15 20:18:00,057 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-15 20:18:00,057 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-15 20:18:00,057 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-15 20:18:00,063 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00" (1/1) ... [2024-09-15 20:18:00,073 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00" (1/1) ... [2024-09-15 20:18:00,104 INFO L138 Inliner]: procedures = 14, calls = 23, calls flagged for inlining = 3, calls inlined = 3, statements flattened = 64 [2024-09-15 20:18:00,107 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-15 20:18:00,108 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-15 20:18:00,108 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-15 20:18:00,108 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-15 20:18:00,119 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00" (1/1) ... [2024-09-15 20:18:00,120 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00" (1/1) ... [2024-09-15 20:18:00,121 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00" (1/1) ... [2024-09-15 20:18:00,135 WARN L109 MemorySlicer]: Omit memory slicing because it failed with the following exception: Unsupported: Procedure __VERIFIER_assert is not part of the Ultimate memory model but has specification other that is not a ModifiesSpecification [2024-09-15 20:18:00,135 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00" (1/1) ... [2024-09-15 20:18:00,135 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00" (1/1) ... [2024-09-15 20:18:00,138 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00" (1/1) ... [2024-09-15 20:18:00,144 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00" (1/1) ... [2024-09-15 20:18:00,148 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00" (1/1) ... [2024-09-15 20:18:00,149 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00" (1/1) ... [2024-09-15 20:18:00,150 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-15 20:18:00,151 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-15 20:18:00,155 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-15 20:18:00,155 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-15 20:18:00,156 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00" (1/1) ... [2024-09-15 20:18:00,162 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-15 20:18:00,168 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 20:18:00,186 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-15 20:18:00,192 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-15 20:18:00,232 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-15 20:18:00,233 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2024-09-15 20:18:00,233 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-15 20:18:00,233 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-15 20:18:00,233 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-15 20:18:00,234 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-15 20:18:00,293 INFO L242 CfgBuilder]: Building ICFG [2024-09-15 20:18:00,295 INFO L268 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-15 20:18:00,486 WARN L783 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2024-09-15 20:18:00,535 INFO L? ?]: Removed 43 outVars from TransFormulas that were not future-live. [2024-09-15 20:18:00,536 INFO L291 CfgBuilder]: Performing block encoding [2024-09-15 20:18:00,566 INFO L313 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-15 20:18:00,567 INFO L318 CfgBuilder]: Removed 2 assume(true) statements. [2024-09-15 20:18:00,568 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.09 08:18:00 BoogieIcfgContainer [2024-09-15 20:18:00,568 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-15 20:18:00,570 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-15 20:18:00,572 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-15 20:18:00,576 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-15 20:18:00,576 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "witness-2.1.yml de.uni_freiburg.informatik.ultimate.witnessparser CORRECTNESS_WITNESS 15.09 08:17:58" (1/4) ... [2024-09-15 20:18:00,577 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1d5d4770 and model type witness-2.1.yml de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CORRECTNESS_WITNESS 15.09 08:18:00, skipping insertion in model container [2024-09-15 20:18:00,577 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 15.09 08:17:59" (2/4) ... [2024-09-15 20:18:00,577 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1d5d4770 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.09 08:18:00, skipping insertion in model container [2024-09-15 20:18:00,577 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 08:18:00" (3/4) ... [2024-09-15 20:18:00,578 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1d5d4770 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.09 08:18:00, skipping insertion in model container [2024-09-15 20:18:00,578 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.09 08:18:00" (4/4) ... [2024-09-15 20:18:00,579 INFO L112 eAbstractionObserver]: Analyzing ICFG hard2_valuebound2.c [2024-09-15 20:18:00,600 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:None NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-15 20:18:00,600 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 12 error locations. [2024-09-15 20:18:00,646 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-15 20:18:00,651 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=None, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@6130e19, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-15 20:18:00,652 INFO L337 AbstractCegarLoop]: Starting to check reachability of 12 error locations. [2024-09-15 20:18:00,654 INFO L276 IsEmpty]: Start isEmpty. Operand has 36 states, 22 states have (on average 1.6363636363636365) internal successors, (36), 27 states have internal predecessors, (36), 7 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-15 20:18:00,659 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2024-09-15 20:18:00,659 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:00,659 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1] [2024-09-15 20:18:00,660 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:00,665 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:00,667 INFO L85 PathProgramCache]: Analyzing trace with hash 126055, now seen corresponding path program 1 times [2024-09-15 20:18:00,678 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:00,678 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [251636464] [2024-09-15 20:18:00,679 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:00,679 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:00,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:00,822 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-15 20:18:00,822 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:00,823 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [251636464] [2024-09-15 20:18:00,823 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [251636464] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-15 20:18:00,823 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-15 20:18:00,824 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-09-15 20:18:00,825 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [301547703] [2024-09-15 20:18:00,828 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 20:18:00,831 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-09-15 20:18:00,832 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:00,861 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-09-15 20:18:00,862 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-15 20:18:00,863 INFO L87 Difference]: Start difference. First operand has 36 states, 22 states have (on average 1.6363636363636365) internal successors, (36), 27 states have internal predecessors, (36), 7 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) Second operand has 2 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-15 20:18:00,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:00,901 INFO L93 Difference]: Finished difference Result 36 states and 44 transitions. [2024-09-15 20:18:00,903 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-09-15 20:18:00,904 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2024-09-15 20:18:00,904 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:00,911 INFO L225 Difference]: With dead ends: 36 [2024-09-15 20:18:00,911 INFO L226 Difference]: Without dead ends: 34 [2024-09-15 20:18:00,913 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-15 20:18:00,918 INFO L434 NwaCegarLoop]: 41 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:00,918 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 41 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-15 20:18:00,934 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2024-09-15 20:18:00,951 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 34. [2024-09-15 20:18:00,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 21 states have (on average 1.380952380952381) internal successors, (29), 26 states have internal predecessors, (29), 7 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-15 20:18:00,955 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 42 transitions. [2024-09-15 20:18:00,957 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 42 transitions. Word has length 3 [2024-09-15 20:18:00,957 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:00,957 INFO L474 AbstractCegarLoop]: Abstraction has 34 states and 42 transitions. [2024-09-15 20:18:00,958 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 1.5) internal successors, (3), 2 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-15 20:18:00,958 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 42 transitions. [2024-09-15 20:18:00,958 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 4 [2024-09-15 20:18:00,959 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:00,959 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1] [2024-09-15 20:18:00,960 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-15 20:18:00,960 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:00,961 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:00,963 INFO L85 PathProgramCache]: Analyzing trace with hash 126117, now seen corresponding path program 1 times [2024-09-15 20:18:00,963 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:00,964 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [848025375] [2024-09-15 20:18:00,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:00,964 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:00,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:01,091 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-15 20:18:01,092 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:01,092 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [848025375] [2024-09-15 20:18:01,092 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [848025375] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-15 20:18:01,092 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-15 20:18:01,092 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-09-15 20:18:01,093 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1659674797] [2024-09-15 20:18:01,093 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 20:18:01,094 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-09-15 20:18:01,094 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:01,094 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-09-15 20:18:01,095 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-09-15 20:18:01,095 INFO L87 Difference]: Start difference. First operand 34 states and 42 transitions. Second operand has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-15 20:18:01,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:01,130 INFO L93 Difference]: Finished difference Result 33 states and 41 transitions. [2024-09-15 20:18:01,130 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-09-15 20:18:01,130 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 3 [2024-09-15 20:18:01,131 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:01,132 INFO L225 Difference]: With dead ends: 33 [2024-09-15 20:18:01,132 INFO L226 Difference]: Without dead ends: 33 [2024-09-15 20:18:01,133 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-09-15 20:18:01,134 INFO L434 NwaCegarLoop]: 37 mSDtfsCounter, 0 mSDsluCounter, 74 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 111 SdHoareTripleChecker+Invalid, 10 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:01,135 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 111 Invalid, 10 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-15 20:18:01,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33 states. [2024-09-15 20:18:01,141 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33 to 33. [2024-09-15 20:18:01,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33 states, 21 states have (on average 1.3333333333333333) internal successors, (28), 25 states have internal predecessors, (28), 7 states have call successors, (7), 1 states have call predecessors, (7), 1 states have return successors, (6), 6 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-15 20:18:01,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33 states to 33 states and 41 transitions. [2024-09-15 20:18:01,146 INFO L78 Accepts]: Start accepts. Automaton has 33 states and 41 transitions. Word has length 3 [2024-09-15 20:18:01,146 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:01,146 INFO L474 AbstractCegarLoop]: Abstraction has 33 states and 41 transitions. [2024-09-15 20:18:01,146 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 3 states have (on average 1.0) internal successors, (3), 3 states have internal predecessors, (3), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-15 20:18:01,146 INFO L276 IsEmpty]: Start isEmpty. Operand 33 states and 41 transitions. [2024-09-15 20:18:01,147 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 5 [2024-09-15 20:18:01,147 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:01,147 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1] [2024-09-15 20:18:01,147 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-09-15 20:18:01,148 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:01,149 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:01,149 INFO L85 PathProgramCache]: Analyzing trace with hash 3909670, now seen corresponding path program 1 times [2024-09-15 20:18:01,149 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:01,150 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [529878341] [2024-09-15 20:18:01,150 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:01,151 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:01,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:01,424 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-15 20:18:01,425 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:01,425 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [529878341] [2024-09-15 20:18:01,425 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [529878341] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-15 20:18:01,425 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-15 20:18:01,426 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-09-15 20:18:01,426 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [840487503] [2024-09-15 20:18:01,426 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 20:18:01,426 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-15 20:18:01,427 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:01,427 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-15 20:18:01,428 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2024-09-15 20:18:01,428 INFO L87 Difference]: Start difference. First operand 33 states and 41 transitions. Second operand has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-15 20:18:01,558 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:01,558 INFO L93 Difference]: Finished difference Result 44 states and 58 transitions. [2024-09-15 20:18:01,560 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-15 20:18:01,560 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 4 [2024-09-15 20:18:01,560 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:01,569 INFO L225 Difference]: With dead ends: 44 [2024-09-15 20:18:01,569 INFO L226 Difference]: Without dead ends: 44 [2024-09-15 20:18:01,569 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 0 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=10, Invalid=10, Unknown=0, NotChecked=0, Total=20 [2024-09-15 20:18:01,570 INFO L434 NwaCegarLoop]: 27 mSDtfsCounter, 42 mSDsluCounter, 14 mSDsCounter, 0 mSdLazyCounter, 41 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 59 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 41 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:01,571 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [53 Valid, 41 Invalid, 59 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 41 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-15 20:18:01,571 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44 states. [2024-09-15 20:18:01,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44 to 44. [2024-09-15 20:18:01,582 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 44 states, 27 states have (on average 1.2962962962962963) internal successors, (35), 31 states have internal predecessors, (35), 12 states have call successors, (12), 1 states have call predecessors, (12), 1 states have return successors, (11), 11 states have call predecessors, (11), 11 states have call successors, (11) [2024-09-15 20:18:01,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 44 states to 44 states and 58 transitions. [2024-09-15 20:18:01,586 INFO L78 Accepts]: Start accepts. Automaton has 44 states and 58 transitions. Word has length 4 [2024-09-15 20:18:01,586 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:01,587 INFO L474 AbstractCegarLoop]: Abstraction has 44 states and 58 transitions. [2024-09-15 20:18:01,587 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 1.0) internal successors, (4), 4 states have internal predecessors, (4), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-15 20:18:01,587 INFO L276 IsEmpty]: Start isEmpty. Operand 44 states and 58 transitions. [2024-09-15 20:18:01,588 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2024-09-15 20:18:01,588 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:01,588 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 20:18:01,588 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2024-09-15 20:18:01,589 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr1ENSURES_VIOLATIONPOST_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:01,589 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:01,590 INFO L85 PathProgramCache]: Analyzing trace with hash -559254942, now seen corresponding path program 1 times [2024-09-15 20:18:01,590 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:01,590 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [264158038] [2024-09-15 20:18:01,590 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:01,590 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:01,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:01,644 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-15 20:18:01,644 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:01,645 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [264158038] [2024-09-15 20:18:01,645 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [264158038] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-15 20:18:01,645 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-15 20:18:01,645 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-09-15 20:18:01,645 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [588649141] [2024-09-15 20:18:01,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 20:18:01,645 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-09-15 20:18:01,646 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:01,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-09-15 20:18:01,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-15 20:18:01,646 INFO L87 Difference]: Start difference. First operand 44 states and 58 transitions. Second operand has 3 states, 2 states have (on average 4.0) internal successors, (8), 3 states have internal predecessors, (8), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-15 20:18:01,691 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:01,692 INFO L93 Difference]: Finished difference Result 43 states and 57 transitions. [2024-09-15 20:18:01,692 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-09-15 20:18:01,692 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 4.0) internal successors, (8), 3 states have internal predecessors, (8), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2024-09-15 20:18:01,693 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:01,693 INFO L225 Difference]: With dead ends: 43 [2024-09-15 20:18:01,693 INFO L226 Difference]: Without dead ends: 43 [2024-09-15 20:18:01,695 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-15 20:18:01,695 INFO L434 NwaCegarLoop]: 31 mSDtfsCounter, 3 mSDsluCounter, 21 mSDsCounter, 0 mSdLazyCounter, 23 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 52 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 23 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:01,696 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 52 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-15 20:18:01,700 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2024-09-15 20:18:01,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2024-09-15 20:18:01,706 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 27 states have (on average 1.2592592592592593) internal successors, (34), 30 states have internal predecessors, (34), 12 states have call successors, (12), 1 states have call predecessors, (12), 1 states have return successors, (11), 11 states have call predecessors, (11), 11 states have call successors, (11) [2024-09-15 20:18:01,707 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 57 transitions. [2024-09-15 20:18:01,709 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 57 transitions. Word has length 9 [2024-09-15 20:18:01,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:01,709 INFO L474 AbstractCegarLoop]: Abstraction has 43 states and 57 transitions. [2024-09-15 20:18:01,710 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 4.0) internal successors, (8), 3 states have internal predecessors, (8), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-15 20:18:01,710 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 57 transitions. [2024-09-15 20:18:01,710 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2024-09-15 20:18:01,711 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:01,711 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 20:18:01,711 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-09-15 20:18:01,712 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:01,712 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:01,712 INFO L85 PathProgramCache]: Analyzing trace with hash -559255103, now seen corresponding path program 1 times [2024-09-15 20:18:01,712 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:01,713 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [579417717] [2024-09-15 20:18:01,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:01,716 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:01,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:01,769 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-15 20:18:01,769 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:01,770 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [579417717] [2024-09-15 20:18:01,770 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [579417717] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-15 20:18:01,770 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-15 20:18:01,770 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-09-15 20:18:01,770 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [707590563] [2024-09-15 20:18:01,770 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 20:18:01,770 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-09-15 20:18:01,770 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:01,771 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-09-15 20:18:01,771 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-15 20:18:01,771 INFO L87 Difference]: Start difference. First operand 43 states and 57 transitions. Second operand has 3 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-15 20:18:01,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:01,786 INFO L93 Difference]: Finished difference Result 41 states and 55 transitions. [2024-09-15 20:18:01,787 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-09-15 20:18:01,787 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2024-09-15 20:18:01,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:01,788 INFO L225 Difference]: With dead ends: 41 [2024-09-15 20:18:01,788 INFO L226 Difference]: Without dead ends: 41 [2024-09-15 20:18:01,789 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-15 20:18:01,790 INFO L434 NwaCegarLoop]: 35 mSDtfsCounter, 0 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 5 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 70 SdHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 5 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:01,791 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 70 Invalid, 5 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 5 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-15 20:18:01,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41 states. [2024-09-15 20:18:01,799 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41 to 41. [2024-09-15 20:18:01,799 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 26 states have (on average 1.2307692307692308) internal successors, (32), 28 states have internal predecessors, (32), 11 states have call successors, (11), 1 states have call predecessors, (11), 1 states have return successors, (11), 11 states have call predecessors, (11), 11 states have call successors, (11) [2024-09-15 20:18:01,800 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 54 transitions. [2024-09-15 20:18:01,800 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 54 transitions. Word has length 9 [2024-09-15 20:18:01,800 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:01,800 INFO L474 AbstractCegarLoop]: Abstraction has 41 states and 54 transitions. [2024-09-15 20:18:01,802 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-15 20:18:01,802 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 54 transitions. [2024-09-15 20:18:01,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2024-09-15 20:18:01,803 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:01,803 INFO L216 NwaCegarLoop]: trace histogram [3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 20:18:01,803 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2024-09-15 20:18:01,803 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:01,804 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:01,804 INFO L85 PathProgramCache]: Analyzing trace with hash 1484025061, now seen corresponding path program 1 times [2024-09-15 20:18:01,804 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:01,804 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2009338606] [2024-09-15 20:18:01,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:01,804 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:01,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:02,109 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-15 20:18:02,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:02,123 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-15 20:18:02,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:02,142 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2024-09-15 20:18:02,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:02,160 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-15 20:18:02,161 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:02,162 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2009338606] [2024-09-15 20:18:02,162 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2009338606] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 20:18:02,162 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [439697784] [2024-09-15 20:18:02,163 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:02,163 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 20:18:02,163 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 20:18:02,165 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 20:18:02,167 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-15 20:18:02,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:02,227 INFO L262 TraceCheckSpWp]: Trace formula consists of 95 conjuncts, 17 conjuncts are in the unsatisfiable core [2024-09-15 20:18:02,236 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 20:18:02,443 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-15 20:18:02,443 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 20:18:02,799 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-15 20:18:02,799 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [439697784] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 20:18:02,799 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 20:18:02,799 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 4] total 7 [2024-09-15 20:18:02,799 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [947139909] [2024-09-15 20:18:02,800 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 20:18:02,801 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-09-15 20:18:02,801 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:02,802 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-09-15 20:18:02,802 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2024-09-15 20:18:02,802 INFO L87 Difference]: Start difference. First operand 41 states and 54 transitions. Second operand has 8 states, 7 states have (on average 2.4285714285714284) internal successors, (17), 8 states have internal predecessors, (17), 3 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2024-09-15 20:18:03,033 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:03,033 INFO L93 Difference]: Finished difference Result 70 states and 106 transitions. [2024-09-15 20:18:03,034 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-15 20:18:03,034 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 2.4285714285714284) internal successors, (17), 8 states have internal predecessors, (17), 3 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 22 [2024-09-15 20:18:03,034 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:03,035 INFO L225 Difference]: With dead ends: 70 [2024-09-15 20:18:03,035 INFO L226 Difference]: Without dead ends: 70 [2024-09-15 20:18:03,035 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 53 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 10 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2024-09-15 20:18:03,036 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 27 mSDsluCounter, 53 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 35 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 37 SdHoareTripleChecker+Valid, 83 SdHoareTripleChecker+Invalid, 158 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 35 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:03,036 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [37 Valid, 83 Invalid, 158 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [35 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-15 20:18:03,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70 states. [2024-09-15 20:18:03,044 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70 to 53. [2024-09-15 20:18:03,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 53 states, 33 states have (on average 1.2424242424242424) internal successors, (41), 35 states have internal predecessors, (41), 16 states have call successors, (16), 1 states have call predecessors, (16), 1 states have return successors, (16), 16 states have call predecessors, (16), 16 states have call successors, (16) [2024-09-15 20:18:03,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 73 transitions. [2024-09-15 20:18:03,050 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 73 transitions. Word has length 22 [2024-09-15 20:18:03,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:03,050 INFO L474 AbstractCegarLoop]: Abstraction has 53 states and 73 transitions. [2024-09-15 20:18:03,050 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 2.4285714285714284) internal successors, (17), 8 states have internal predecessors, (17), 3 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2024-09-15 20:18:03,050 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 73 transitions. [2024-09-15 20:18:03,054 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2024-09-15 20:18:03,054 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:03,054 INFO L216 NwaCegarLoop]: trace histogram [5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 20:18:03,075 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-09-15 20:18:03,258 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2024-09-15 20:18:03,259 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONPRE_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:03,259 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:03,259 INFO L85 PathProgramCache]: Analyzing trace with hash -1805205026, now seen corresponding path program 1 times [2024-09-15 20:18:03,260 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:03,260 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1744943333] [2024-09-15 20:18:03,260 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:03,260 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:03,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-15 20:18:03,280 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [1726220931] [2024-09-15 20:18:03,280 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:03,280 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 20:18:03,280 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 20:18:03,282 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 20:18:03,284 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-15 20:18:03,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:03,338 INFO L262 TraceCheckSpWp]: Trace formula consists of 114 conjuncts, 9 conjuncts are in the unsatisfiable core [2024-09-15 20:18:03,340 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 20:18:03,521 INFO L134 CoverageAnalysis]: Checked inductivity of 40 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-15 20:18:03,521 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-15 20:18:03,522 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:03,522 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1744943333] [2024-09-15 20:18:03,522 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-15 20:18:03,523 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1726220931] [2024-09-15 20:18:03,523 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1726220931] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-15 20:18:03,523 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-15 20:18:03,523 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-09-15 20:18:03,523 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [137618725] [2024-09-15 20:18:03,523 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 20:18:03,524 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-15 20:18:03,524 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:03,525 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-15 20:18:03,525 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2024-09-15 20:18:03,525 INFO L87 Difference]: Start difference. First operand 53 states and 73 transitions. Second operand has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 2 states have call successors, (5), 1 states have call predecessors, (5), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-09-15 20:18:03,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:03,635 INFO L93 Difference]: Finished difference Result 60 states and 83 transitions. [2024-09-15 20:18:03,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-15 20:18:03,636 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 2 states have call successors, (5), 1 states have call predecessors, (5), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) Word has length 35 [2024-09-15 20:18:03,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:03,637 INFO L225 Difference]: With dead ends: 60 [2024-09-15 20:18:03,638 INFO L226 Difference]: Without dead ends: 60 [2024-09-15 20:18:03,638 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 31 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=18, Invalid=24, Unknown=0, NotChecked=0, Total=42 [2024-09-15 20:18:03,638 INFO L434 NwaCegarLoop]: 29 mSDtfsCounter, 5 mSDsluCounter, 35 mSDsCounter, 0 mSdLazyCounter, 51 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 64 SdHoareTripleChecker+Invalid, 57 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 51 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:03,639 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 64 Invalid, 57 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 51 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-15 20:18:03,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60 states. [2024-09-15 20:18:03,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60 to 59. [2024-09-15 20:18:03,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 36 states have (on average 1.2222222222222223) internal successors, (44), 39 states have internal predecessors, (44), 19 states have call successors, (19), 1 states have call predecessors, (19), 1 states have return successors, (19), 18 states have call predecessors, (19), 19 states have call successors, (19) [2024-09-15 20:18:03,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 82 transitions. [2024-09-15 20:18:03,650 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 82 transitions. Word has length 35 [2024-09-15 20:18:03,650 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:03,650 INFO L474 AbstractCegarLoop]: Abstraction has 59 states and 82 transitions. [2024-09-15 20:18:03,650 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 2 states have call successors, (5), 1 states have call predecessors, (5), 1 states have return successors, (5), 2 states have call predecessors, (5), 2 states have call successors, (5) [2024-09-15 20:18:03,651 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 82 transitions. [2024-09-15 20:18:03,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-09-15 20:18:03,654 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:03,654 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 6, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1] [2024-09-15 20:18:03,671 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-09-15 20:18:03,857 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2024-09-15 20:18:03,858 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:03,858 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:03,858 INFO L85 PathProgramCache]: Analyzing trace with hash -140304412, now seen corresponding path program 2 times [2024-09-15 20:18:03,858 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:03,859 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [660411845] [2024-09-15 20:18:03,859 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:03,859 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:03,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:04,229 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-15 20:18:04,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:04,248 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-15 20:18:04,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:04,266 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2024-09-15 20:18:04,269 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:04,282 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2024-09-15 20:18:04,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:04,296 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2024-09-15 20:18:04,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:04,307 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2024-09-15 20:18:04,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:04,318 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2024-09-15 20:18:04,319 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:04,319 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [660411845] [2024-09-15 20:18:04,319 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [660411845] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 20:18:04,319 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1960079211] [2024-09-15 20:18:04,319 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-15 20:18:04,319 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 20:18:04,319 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 20:18:04,322 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 20:18:04,326 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-15 20:18:04,376 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-15 20:18:04,376 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 20:18:04,377 INFO L262 TraceCheckSpWp]: Trace formula consists of 132 conjuncts, 21 conjuncts are in the unsatisfiable core [2024-09-15 20:18:04,379 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 20:18:04,621 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2024-09-15 20:18:04,621 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 20:18:04,873 INFO L134 CoverageAnalysis]: Checked inductivity of 68 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2024-09-15 20:18:04,874 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1960079211] provided 1 perfect and 1 imperfect interpolant sequences [2024-09-15 20:18:04,874 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-09-15 20:18:04,874 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [5, 5] total 10 [2024-09-15 20:18:04,874 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [514432136] [2024-09-15 20:18:04,874 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 20:18:04,875 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-15 20:18:04,875 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:04,875 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-15 20:18:04,875 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2024-09-15 20:18:04,876 INFO L87 Difference]: Start difference. First operand 59 states and 82 transitions. Second operand has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2024-09-15 20:18:04,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:04,994 INFO L93 Difference]: Finished difference Result 68 states and 101 transitions. [2024-09-15 20:18:04,994 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-15 20:18:04,994 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 40 [2024-09-15 20:18:04,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:04,996 INFO L225 Difference]: With dead ends: 68 [2024-09-15 20:18:04,996 INFO L226 Difference]: Without dead ends: 68 [2024-09-15 20:18:04,996 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 95 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2024-09-15 20:18:04,997 INFO L434 NwaCegarLoop]: 46 mSDtfsCounter, 7 mSDsluCounter, 73 mSDsCounter, 0 mSdLazyCounter, 85 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 98 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 85 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:04,999 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 119 Invalid, 98 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 85 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-15 20:18:05,001 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2024-09-15 20:18:05,008 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 60. [2024-09-15 20:18:05,009 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60 states, 36 states have (on average 1.1666666666666667) internal successors, (42), 38 states have internal predecessors, (42), 21 states have call successors, (21), 1 states have call predecessors, (21), 1 states have return successors, (21), 20 states have call predecessors, (21), 21 states have call successors, (21) [2024-09-15 20:18:05,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 84 transitions. [2024-09-15 20:18:05,009 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 84 transitions. Word has length 40 [2024-09-15 20:18:05,010 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:05,010 INFO L474 AbstractCegarLoop]: Abstraction has 60 states and 84 transitions. [2024-09-15 20:18:05,010 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 3.25) internal successors, (13), 5 states have internal predecessors, (13), 2 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2024-09-15 20:18:05,010 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 84 transitions. [2024-09-15 20:18:05,011 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2024-09-15 20:18:05,011 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:05,011 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 6, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 20:18:05,031 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2024-09-15 20:18:05,217 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2024-09-15 20:18:05,218 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONPRE_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:05,218 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:05,218 INFO L85 PathProgramCache]: Analyzing trace with hash 1181912687, now seen corresponding path program 1 times [2024-09-15 20:18:05,218 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:05,219 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [376437247] [2024-09-15 20:18:05,219 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:05,219 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:05,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,272 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-15 20:18:05,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,275 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-15 20:18:05,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,278 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2024-09-15 20:18:05,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,281 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2024-09-15 20:18:05,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,283 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2024-09-15 20:18:05,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,286 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2024-09-15 20:18:05,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,289 INFO L134 CoverageAnalysis]: Checked inductivity of 60 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2024-09-15 20:18:05,289 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:05,289 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [376437247] [2024-09-15 20:18:05,289 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [376437247] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-15 20:18:05,290 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-15 20:18:05,290 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-09-15 20:18:05,290 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1246459453] [2024-09-15 20:18:05,290 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 20:18:05,290 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-09-15 20:18:05,291 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:05,291 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-09-15 20:18:05,291 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-15 20:18:05,291 INFO L87 Difference]: Start difference. First operand 60 states and 84 transitions. Second operand has 3 states, 2 states have (on average 6.5) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2024-09-15 20:18:05,316 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:05,317 INFO L93 Difference]: Finished difference Result 61 states and 84 transitions. [2024-09-15 20:18:05,317 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-09-15 20:18:05,317 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 6.5) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) Word has length 40 [2024-09-15 20:18:05,318 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:05,318 INFO L225 Difference]: With dead ends: 61 [2024-09-15 20:18:05,318 INFO L226 Difference]: Without dead ends: 54 [2024-09-15 20:18:05,319 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-15 20:18:05,319 INFO L434 NwaCegarLoop]: 27 mSDtfsCounter, 0 mSDsluCounter, 18 mSDsCounter, 0 mSdLazyCounter, 20 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 45 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 20 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:05,320 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 45 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 20 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-15 20:18:05,320 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 54 states. [2024-09-15 20:18:05,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 54 to 54. [2024-09-15 20:18:05,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 33 states have (on average 1.1515151515151516) internal successors, (38), 34 states have internal predecessors, (38), 18 states have call successors, (18), 1 states have call predecessors, (18), 1 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18) [2024-09-15 20:18:05,323 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 74 transitions. [2024-09-15 20:18:05,324 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 74 transitions. Word has length 40 [2024-09-15 20:18:05,324 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:05,324 INFO L474 AbstractCegarLoop]: Abstraction has 54 states and 74 transitions. [2024-09-15 20:18:05,324 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 6.5) internal successors, (13), 3 states have internal predecessors, (13), 1 states have call successors, (6), 1 states have call predecessors, (6), 1 states have return successors, (6), 1 states have call predecessors, (6), 1 states have call successors, (6) [2024-09-15 20:18:05,324 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 74 transitions. [2024-09-15 20:18:05,325 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2024-09-15 20:18:05,325 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:05,326 INFO L216 NwaCegarLoop]: trace histogram [8, 8, 8, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 20:18:05,326 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2024-09-15 20:18:05,326 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting ULTIMATE.startErr5ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:05,326 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:05,326 INFO L85 PathProgramCache]: Analyzing trace with hash -2138076849, now seen corresponding path program 1 times [2024-09-15 20:18:05,327 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:05,327 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [730977224] [2024-09-15 20:18:05,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:05,327 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:05,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,867 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-15 20:18:05,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,874 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-15 20:18:05,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,879 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2024-09-15 20:18:05,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,886 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2024-09-15 20:18:05,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,894 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2024-09-15 20:18:05,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,901 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2024-09-15 20:18:05,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,909 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2024-09-15 20:18:05,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,915 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2024-09-15 20:18:05,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,921 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-09-15 20:18:05,921 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:05,921 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [730977224] [2024-09-15 20:18:05,922 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [730977224] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 20:18:05,922 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [92996761] [2024-09-15 20:18:05,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:05,922 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 20:18:05,922 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 20:18:05,924 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 20:18:05,928 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-15 20:18:05,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:05,982 INFO L262 TraceCheckSpWp]: Trace formula consists of 163 conjuncts, 23 conjuncts are in the unsatisfiable core [2024-09-15 20:18:05,996 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 20:18:06,225 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-09-15 20:18:06,225 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 20:18:06,617 INFO L134 CoverageAnalysis]: Checked inductivity of 119 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 112 trivial. 0 not checked. [2024-09-15 20:18:06,617 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [92996761] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 20:18:06,618 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 20:18:06,618 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 4, 4] total 7 [2024-09-15 20:18:06,618 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1636145593] [2024-09-15 20:18:06,618 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 20:18:06,619 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-09-15 20:18:06,620 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:06,620 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-09-15 20:18:06,620 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2024-09-15 20:18:06,621 INFO L87 Difference]: Start difference. First operand 54 states and 74 transitions. Second operand has 8 states, 7 states have (on average 4.0) internal successors, (28), 8 states have internal predecessors, (28), 4 states have call successors, (16), 1 states have call predecessors, (16), 1 states have return successors, (16), 4 states have call predecessors, (16), 4 states have call successors, (16) [2024-09-15 20:18:06,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:06,790 INFO L93 Difference]: Finished difference Result 59 states and 81 transitions. [2024-09-15 20:18:06,790 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-15 20:18:06,791 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 7 states have (on average 4.0) internal successors, (28), 8 states have internal predecessors, (28), 4 states have call successors, (16), 1 states have call predecessors, (16), 1 states have return successors, (16), 4 states have call predecessors, (16), 4 states have call successors, (16) Word has length 54 [2024-09-15 20:18:06,791 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:06,791 INFO L225 Difference]: With dead ends: 59 [2024-09-15 20:18:06,791 INFO L226 Difference]: Without dead ends: 59 [2024-09-15 20:18:06,792 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 123 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2024-09-15 20:18:06,792 INFO L434 NwaCegarLoop]: 40 mSDtfsCounter, 13 mSDsluCounter, 121 mSDsCounter, 0 mSdLazyCounter, 170 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 161 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 170 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:06,792 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 161 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 170 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-15 20:18:06,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59 states. [2024-09-15 20:18:06,798 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59 to 54. [2024-09-15 20:18:06,799 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 54 states, 33 states have (on average 1.1515151515151516) internal successors, (38), 34 states have internal predecessors, (38), 18 states have call successors, (18), 1 states have call predecessors, (18), 1 states have return successors, (18), 18 states have call predecessors, (18), 18 states have call successors, (18) [2024-09-15 20:18:06,802 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54 states to 54 states and 74 transitions. [2024-09-15 20:18:06,803 INFO L78 Accepts]: Start accepts. Automaton has 54 states and 74 transitions. Word has length 54 [2024-09-15 20:18:06,803 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:06,803 INFO L474 AbstractCegarLoop]: Abstraction has 54 states and 74 transitions. [2024-09-15 20:18:06,803 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 7 states have (on average 4.0) internal successors, (28), 8 states have internal predecessors, (28), 4 states have call successors, (16), 1 states have call predecessors, (16), 1 states have return successors, (16), 4 states have call predecessors, (16), 4 states have call successors, (16) [2024-09-15 20:18:06,803 INFO L276 IsEmpty]: Start isEmpty. Operand 54 states and 74 transitions. [2024-09-15 20:18:06,805 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2024-09-15 20:18:06,805 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:06,805 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 10, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 20:18:06,822 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2024-09-15 20:18:07,005 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 20:18:07,006 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting ULTIMATE.startErr8REQUIRES_VIOLATIONPRE_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:07,006 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:07,006 INFO L85 PathProgramCache]: Analyzing trace with hash -17133746, now seen corresponding path program 1 times [2024-09-15 20:18:07,006 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:07,006 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2019002503] [2024-09-15 20:18:07,007 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:07,007 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:07,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unknown [2024-09-15 20:18:07,040 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleZ3 [371850749] [2024-09-15 20:18:07,040 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:07,041 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 20:18:07,041 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 20:18:07,043 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 20:18:07,044 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-15 20:18:07,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:07,106 INFO L262 TraceCheckSpWp]: Trace formula consists of 183 conjuncts, 11 conjuncts are in the unsatisfiable core [2024-09-15 20:18:07,108 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 20:18:07,214 INFO L134 CoverageAnalysis]: Checked inductivity of 191 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 186 trivial. 0 not checked. [2024-09-15 20:18:07,215 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 20:18:07,369 INFO L134 CoverageAnalysis]: Checked inductivity of 191 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 186 trivial. 0 not checked. [2024-09-15 20:18:07,369 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:07,369 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2019002503] [2024-09-15 20:18:07,369 WARN L311 FreeRefinementEngine]: Interpolation failed due to KNOWN_IGNORE: SMT_SOLVER_CANNOT_INTERPOLATE_INPUT [2024-09-15 20:18:07,369 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [371850749] [2024-09-15 20:18:07,370 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [371850749] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 20:18:07,370 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-15 20:18:07,370 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4] total 6 [2024-09-15 20:18:07,370 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [920046535] [2024-09-15 20:18:07,370 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-15 20:18:07,370 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-09-15 20:18:07,371 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:07,371 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-09-15 20:18:07,371 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2024-09-15 20:18:07,371 INFO L87 Difference]: Start difference. First operand 54 states and 74 transitions. Second operand has 7 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 7 states have internal predecessors, (23), 3 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2024-09-15 20:18:07,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:07,455 INFO L93 Difference]: Finished difference Result 75 states and 109 transitions. [2024-09-15 20:18:07,455 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-09-15 20:18:07,455 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 7 states have internal predecessors, (23), 3 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 67 [2024-09-15 20:18:07,456 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:07,456 INFO L225 Difference]: With dead ends: 75 [2024-09-15 20:18:07,456 INFO L226 Difference]: Without dead ends: 75 [2024-09-15 20:18:07,457 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 132 GetRequests, 126 SyntacticMatches, 1 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2024-09-15 20:18:07,457 INFO L434 NwaCegarLoop]: 29 mSDtfsCounter, 4 mSDsluCounter, 55 mSDsCounter, 0 mSdLazyCounter, 96 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 84 SdHoareTripleChecker+Invalid, 99 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 96 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:07,457 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 84 Invalid, 99 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 96 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-15 20:18:07,458 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 75 states. [2024-09-15 20:18:07,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 75 to 59. [2024-09-15 20:18:07,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 59 states, 37 states have (on average 1.2162162162162162) internal successors, (45), 37 states have internal predecessors, (45), 20 states have call successors, (20), 1 states have call predecessors, (20), 1 states have return successors, (20), 20 states have call predecessors, (20), 20 states have call successors, (20) [2024-09-15 20:18:07,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59 states to 59 states and 85 transitions. [2024-09-15 20:18:07,462 INFO L78 Accepts]: Start accepts. Automaton has 59 states and 85 transitions. Word has length 67 [2024-09-15 20:18:07,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:07,462 INFO L474 AbstractCegarLoop]: Abstraction has 59 states and 85 transitions. [2024-09-15 20:18:07,463 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 3.8333333333333335) internal successors, (23), 7 states have internal predecessors, (23), 3 states have call successors, (9), 1 states have call predecessors, (9), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2024-09-15 20:18:07,463 INFO L276 IsEmpty]: Start isEmpty. Operand 59 states and 85 transitions. [2024-09-15 20:18:07,464 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2024-09-15 20:18:07,464 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:07,464 INFO L216 NwaCegarLoop]: trace histogram [11, 11, 11, 3, 3, 3, 3, 3, 3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 20:18:07,482 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-09-15 20:18:07,667 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2024-09-15 20:18:07,668 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting ULTIMATE.startErr5ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:07,668 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:07,668 INFO L85 PathProgramCache]: Analyzing trace with hash 1113227342, now seen corresponding path program 2 times [2024-09-15 20:18:07,669 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:07,669 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [578327570] [2024-09-15 20:18:07,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:07,669 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:07,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:08,248 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-15 20:18:08,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:08,254 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-15 20:18:08,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:08,259 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2024-09-15 20:18:08,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:08,265 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2024-09-15 20:18:08,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:08,270 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2024-09-15 20:18:08,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:08,276 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2024-09-15 20:18:08,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:08,282 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2024-09-15 20:18:08,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:08,290 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2024-09-15 20:18:08,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:08,297 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2024-09-15 20:18:08,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:08,305 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2024-09-15 20:18:08,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:08,314 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2024-09-15 20:18:08,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:08,326 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 0 proven. 19 refuted. 0 times theorem prover too weak. 220 trivial. 0 not checked. [2024-09-15 20:18:08,327 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:08,327 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [578327570] [2024-09-15 20:18:08,327 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [578327570] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 20:18:08,327 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1568756945] [2024-09-15 20:18:08,327 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-15 20:18:08,328 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 20:18:08,328 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 20:18:08,329 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 20:18:08,331 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-15 20:18:08,377 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2024-09-15 20:18:08,377 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 20:18:08,378 INFO L262 TraceCheckSpWp]: Trace formula consists of 83 conjuncts, 19 conjuncts are in the unsatisfiable core [2024-09-15 20:18:08,384 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 20:18:09,086 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 10 proven. 1 refuted. 0 times theorem prover too weak. 228 trivial. 0 not checked. [2024-09-15 20:18:09,086 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 20:18:10,196 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 228 trivial. 0 not checked. [2024-09-15 20:18:10,197 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1568756945] provided 1 perfect and 1 imperfect interpolant sequences [2024-09-15 20:18:10,197 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-09-15 20:18:10,197 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [7, 5] total 14 [2024-09-15 20:18:10,197 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2011805412] [2024-09-15 20:18:10,197 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 20:18:10,198 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-15 20:18:10,198 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:10,198 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-15 20:18:10,198 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=49, Invalid=161, Unknown=0, NotChecked=0, Total=210 [2024-09-15 20:18:10,199 INFO L87 Difference]: Start difference. First operand 59 states and 85 transitions. Second operand has 5 states, 4 states have (on average 4.25) internal successors, (17), 5 states have internal predecessors, (17), 2 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2024-09-15 20:18:10,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:10,399 INFO L93 Difference]: Finished difference Result 71 states and 104 transitions. [2024-09-15 20:18:10,399 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-15 20:18:10,400 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 4.25) internal successors, (17), 5 states have internal predecessors, (17), 2 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 72 [2024-09-15 20:18:10,400 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:10,400 INFO L225 Difference]: With dead ends: 71 [2024-09-15 20:18:10,400 INFO L226 Difference]: Without dead ends: 71 [2024-09-15 20:18:10,401 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 159 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=57, Invalid=183, Unknown=0, NotChecked=0, Total=240 [2024-09-15 20:18:10,401 INFO L434 NwaCegarLoop]: 24 mSDtfsCounter, 10 mSDsluCounter, 27 mSDsCounter, 0 mSdLazyCounter, 57 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 51 SdHoareTripleChecker+Invalid, 70 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 57 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:10,402 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 51 Invalid, 70 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 57 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-15 20:18:10,402 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2024-09-15 20:18:10,406 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 63. [2024-09-15 20:18:10,406 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63 states, 39 states have (on average 1.205128205128205) internal successors, (47), 40 states have internal predecessors, (47), 22 states have call successors, (22), 1 states have call predecessors, (22), 1 states have return successors, (22), 21 states have call predecessors, (22), 22 states have call successors, (22) [2024-09-15 20:18:10,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63 states to 63 states and 91 transitions. [2024-09-15 20:18:10,407 INFO L78 Accepts]: Start accepts. Automaton has 63 states and 91 transitions. Word has length 72 [2024-09-15 20:18:10,407 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:10,407 INFO L474 AbstractCegarLoop]: Abstraction has 63 states and 91 transitions. [2024-09-15 20:18:10,407 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 4.25) internal successors, (17), 5 states have internal predecessors, (17), 2 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2024-09-15 20:18:10,408 INFO L276 IsEmpty]: Start isEmpty. Operand 63 states and 91 transitions. [2024-09-15 20:18:10,409 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2024-09-15 20:18:10,409 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:10,409 INFO L216 NwaCegarLoop]: trace histogram [11, 11, 11, 3, 3, 3, 3, 3, 3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 20:18:10,426 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2024-09-15 20:18:10,613 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2024-09-15 20:18:10,614 INFO L399 AbstractCegarLoop]: === Iteration 13 === Targeting ULTIMATE.startErr5ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:10,614 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:10,614 INFO L85 PathProgramCache]: Analyzing trace with hash 1113227404, now seen corresponding path program 1 times [2024-09-15 20:18:10,614 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:10,614 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1216313318] [2024-09-15 20:18:10,614 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:10,615 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:10,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:10,752 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-15 20:18:10,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:10,756 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-15 20:18:10,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:10,759 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2024-09-15 20:18:10,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:10,762 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2024-09-15 20:18:10,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:10,764 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2024-09-15 20:18:10,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:10,767 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2024-09-15 20:18:10,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:10,770 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2024-09-15 20:18:10,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:10,773 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2024-09-15 20:18:10,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:10,776 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2024-09-15 20:18:10,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:10,780 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2024-09-15 20:18:10,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:10,786 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2024-09-15 20:18:10,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:10,790 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 7 proven. 12 refuted. 0 times theorem prover too weak. 220 trivial. 0 not checked. [2024-09-15 20:18:10,790 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:10,790 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1216313318] [2024-09-15 20:18:10,790 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1216313318] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 20:18:10,790 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [313114114] [2024-09-15 20:18:10,790 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:10,791 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 20:18:10,791 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 20:18:10,792 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 20:18:10,794 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-15 20:18:10,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:10,852 INFO L262 TraceCheckSpWp]: Trace formula consists of 196 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-09-15 20:18:10,853 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 20:18:11,001 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 220 trivial. 0 not checked. [2024-09-15 20:18:11,002 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-15 20:18:11,002 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [313114114] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-15 20:18:11,002 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-15 20:18:11,002 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 9 [2024-09-15 20:18:11,002 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [627068778] [2024-09-15 20:18:11,003 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 20:18:11,003 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-09-15 20:18:11,003 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:11,004 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-09-15 20:18:11,004 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=49, Unknown=0, NotChecked=0, Total=72 [2024-09-15 20:18:11,004 INFO L87 Difference]: Start difference. First operand 63 states and 91 transitions. Second operand has 6 states, 6 states have (on average 3.3333333333333335) internal successors, (20), 6 states have internal predecessors, (20), 3 states have call successors, (11), 1 states have call predecessors, (11), 1 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2024-09-15 20:18:11,168 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:11,168 INFO L93 Difference]: Finished difference Result 68 states and 96 transitions. [2024-09-15 20:18:11,168 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-15 20:18:11,168 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 3.3333333333333335) internal successors, (20), 6 states have internal predecessors, (20), 3 states have call successors, (11), 1 states have call predecessors, (11), 1 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) Word has length 72 [2024-09-15 20:18:11,169 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:11,169 INFO L225 Difference]: With dead ends: 68 [2024-09-15 20:18:11,169 INFO L226 Difference]: Without dead ends: 68 [2024-09-15 20:18:11,169 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 100 GetRequests, 92 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2024-09-15 20:18:11,170 INFO L434 NwaCegarLoop]: 42 mSDtfsCounter, 11 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 111 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 17 SdHoareTripleChecker+Valid, 130 SdHoareTripleChecker+Invalid, 114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:11,170 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [17 Valid, 130 Invalid, 114 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-15 20:18:11,170 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2024-09-15 20:18:11,174 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 58. [2024-09-15 20:18:11,174 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58 states, 35 states have (on average 1.1428571428571428) internal successors, (40), 37 states have internal predecessors, (40), 20 states have call successors, (20), 1 states have call predecessors, (20), 1 states have return successors, (20), 19 states have call predecessors, (20), 20 states have call successors, (20) [2024-09-15 20:18:11,175 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58 states to 58 states and 80 transitions. [2024-09-15 20:18:11,175 INFO L78 Accepts]: Start accepts. Automaton has 58 states and 80 transitions. Word has length 72 [2024-09-15 20:18:11,175 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:11,175 INFO L474 AbstractCegarLoop]: Abstraction has 58 states and 80 transitions. [2024-09-15 20:18:11,175 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 3.3333333333333335) internal successors, (20), 6 states have internal predecessors, (20), 3 states have call successors, (11), 1 states have call predecessors, (11), 1 states have return successors, (11), 3 states have call predecessors, (11), 3 states have call successors, (11) [2024-09-15 20:18:11,176 INFO L276 IsEmpty]: Start isEmpty. Operand 58 states and 80 transitions. [2024-09-15 20:18:11,177 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2024-09-15 20:18:11,177 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:11,177 INFO L216 NwaCegarLoop]: trace histogram [11, 11, 11, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 20:18:11,192 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2024-09-15 20:18:11,381 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 20:18:11,381 INFO L399 AbstractCegarLoop]: === Iteration 14 === Targeting ULTIMATE.startErr9REQUIRES_VIOLATIONPRE_CONDITION === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:11,381 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:11,382 INFO L85 PathProgramCache]: Analyzing trace with hash 274048767, now seen corresponding path program 1 times [2024-09-15 20:18:11,382 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:11,382 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [181930846] [2024-09-15 20:18:11,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:11,382 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:11,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:11,581 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-15 20:18:11,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:11,585 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-15 20:18:11,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:11,587 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2024-09-15 20:18:11,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:11,590 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2024-09-15 20:18:11,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:11,593 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2024-09-15 20:18:11,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:11,596 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2024-09-15 20:18:11,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:11,599 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2024-09-15 20:18:11,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:11,601 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2024-09-15 20:18:11,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:11,604 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2024-09-15 20:18:11,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:11,622 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2024-09-15 20:18:11,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:11,631 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 66 [2024-09-15 20:18:11,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:11,635 INFO L134 CoverageAnalysis]: Checked inductivity of 231 backedges. 0 proven. 5 refuted. 0 times theorem prover too weak. 226 trivial. 0 not checked. [2024-09-15 20:18:11,635 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:11,635 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [181930846] [2024-09-15 20:18:11,636 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [181930846] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 20:18:11,636 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1783193082] [2024-09-15 20:18:11,636 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:11,636 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 20:18:11,636 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 20:18:11,638 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 20:18:11,639 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-15 20:18:11,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:11,696 INFO L262 TraceCheckSpWp]: Trace formula consists of 193 conjuncts, 5 conjuncts are in the unsatisfiable core [2024-09-15 20:18:11,698 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 20:18:11,830 INFO L134 CoverageAnalysis]: Checked inductivity of 231 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 227 trivial. 0 not checked. [2024-09-15 20:18:11,830 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-15 20:18:11,830 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1783193082] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-15 20:18:11,830 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-15 20:18:11,831 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [6] total 8 [2024-09-15 20:18:11,831 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [371770511] [2024-09-15 20:18:11,831 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 20:18:11,831 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-15 20:18:11,831 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:11,832 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-15 20:18:11,832 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=50, Unknown=0, NotChecked=0, Total=72 [2024-09-15 20:18:11,832 INFO L87 Difference]: Start difference. First operand 58 states and 80 transitions. Second operand has 5 states, 4 states have (on average 4.5) internal successors, (18), 5 states have internal predecessors, (18), 3 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2024-09-15 20:18:11,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:11,897 INFO L93 Difference]: Finished difference Result 56 states and 78 transitions. [2024-09-15 20:18:11,897 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-15 20:18:11,897 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 4.5) internal successors, (18), 5 states have internal predecessors, (18), 3 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) Word has length 72 [2024-09-15 20:18:11,898 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:11,898 INFO L225 Difference]: With dead ends: 56 [2024-09-15 20:18:11,898 INFO L226 Difference]: Without dead ends: 43 [2024-09-15 20:18:11,898 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 100 GetRequests, 92 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=61, Unknown=0, NotChecked=0, Total=90 [2024-09-15 20:18:11,899 INFO L434 NwaCegarLoop]: 18 mSDtfsCounter, 10 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 35 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 38 SdHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 35 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:11,899 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [13 Valid, 38 Invalid, 47 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 35 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-15 20:18:11,900 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2024-09-15 20:18:11,904 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 42. [2024-09-15 20:18:11,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 42 states, 26 states have (on average 1.0769230769230769) internal successors, (28), 27 states have internal predecessors, (28), 14 states have call successors, (14), 1 states have call predecessors, (14), 1 states have return successors, (14), 13 states have call predecessors, (14), 14 states have call successors, (14) [2024-09-15 20:18:11,905 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 42 states to 42 states and 56 transitions. [2024-09-15 20:18:11,906 INFO L78 Accepts]: Start accepts. Automaton has 42 states and 56 transitions. Word has length 72 [2024-09-15 20:18:11,907 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:11,907 INFO L474 AbstractCegarLoop]: Abstraction has 42 states and 56 transitions. [2024-09-15 20:18:11,907 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 4.5) internal successors, (18), 5 states have internal predecessors, (18), 3 states have call successors, (8), 1 states have call predecessors, (8), 1 states have return successors, (8), 3 states have call predecessors, (8), 3 states have call successors, (8) [2024-09-15 20:18:11,907 INFO L276 IsEmpty]: Start isEmpty. Operand 42 states and 56 transitions. [2024-09-15 20:18:11,908 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 87 [2024-09-15 20:18:11,908 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 20:18:11,908 INFO L216 NwaCegarLoop]: trace histogram [13, 13, 13, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 20:18:11,928 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2024-09-15 20:18:12,109 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 20:18:12,110 INFO L399 AbstractCegarLoop]: === Iteration 15 === Targeting ULTIMATE.startErr5ASSERT_VIOLATIONWITNESS_INVARIANT === [ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION, ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT, ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (and 9 more)] === [2024-09-15 20:18:12,110 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 20:18:12,110 INFO L85 PathProgramCache]: Analyzing trace with hash 306884125, now seen corresponding path program 1 times [2024-09-15 20:18:12,110 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 20:18:12,110 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2003206084] [2024-09-15 20:18:12,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:12,110 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 20:18:12,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:12,943 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2024-09-15 20:18:12,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:12,947 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-15 20:18:12,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:12,951 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 15 [2024-09-15 20:18:12,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:12,961 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2024-09-15 20:18:12,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:12,965 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2024-09-15 20:18:12,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:12,969 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2024-09-15 20:18:12,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:12,973 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2024-09-15 20:18:12,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:12,977 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 46 [2024-09-15 20:18:12,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:12,980 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2024-09-15 20:18:12,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:12,985 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2024-09-15 20:18:12,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:12,988 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 64 [2024-09-15 20:18:12,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:12,992 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 73 [2024-09-15 20:18:12,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:13,000 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2024-09-15 20:18:13,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:13,008 INFO L134 CoverageAnalysis]: Checked inductivity of 338 backedges. 0 proven. 26 refuted. 0 times theorem prover too weak. 312 trivial. 0 not checked. [2024-09-15 20:18:13,009 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 20:18:13,009 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2003206084] [2024-09-15 20:18:13,009 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2003206084] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 20:18:13,009 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [352457174] [2024-09-15 20:18:13,009 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 20:18:13,009 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 20:18:13,009 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 20:18:13,011 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 20:18:13,020 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-15 20:18:13,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 20:18:13,100 INFO L262 TraceCheckSpWp]: Trace formula consists of 228 conjuncts, 34 conjuncts are in the unsatisfiable core [2024-09-15 20:18:13,102 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 20:18:13,623 INFO L134 CoverageAnalysis]: Checked inductivity of 338 backedges. 0 proven. 26 refuted. 0 times theorem prover too weak. 312 trivial. 0 not checked. [2024-09-15 20:18:13,623 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 20:18:14,761 INFO L134 CoverageAnalysis]: Checked inductivity of 338 backedges. 4 proven. 22 refuted. 0 times theorem prover too weak. 312 trivial. 0 not checked. [2024-09-15 20:18:14,761 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [352457174] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 20:18:14,762 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 20:18:14,762 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 9] total 24 [2024-09-15 20:18:14,762 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [394855929] [2024-09-15 20:18:14,762 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 20:18:14,763 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 25 states [2024-09-15 20:18:14,763 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 20:18:14,764 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 25 interpolants. [2024-09-15 20:18:14,764 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=160, Invalid=440, Unknown=0, NotChecked=0, Total=600 [2024-09-15 20:18:14,764 INFO L87 Difference]: Start difference. First operand 42 states and 56 transitions. Second operand has 25 states, 24 states have (on average 2.4583333333333335) internal successors, (59), 25 states have internal predecessors, (59), 13 states have call successors, (39), 1 states have call predecessors, (39), 1 states have return successors, (39), 13 states have call predecessors, (39), 13 states have call successors, (39) [2024-09-15 20:18:14,965 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 20:18:14,965 INFO L93 Difference]: Finished difference Result 42 states and 55 transitions. [2024-09-15 20:18:14,965 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-09-15 20:18:14,966 INFO L78 Accepts]: Start accepts. Automaton has has 25 states, 24 states have (on average 2.4583333333333335) internal successors, (59), 25 states have internal predecessors, (59), 13 states have call successors, (39), 1 states have call predecessors, (39), 1 states have return successors, (39), 13 states have call predecessors, (39), 13 states have call successors, (39) Word has length 86 [2024-09-15 20:18:14,966 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 20:18:14,966 INFO L225 Difference]: With dead ends: 42 [2024-09-15 20:18:14,966 INFO L226 Difference]: Without dead ends: 0 [2024-09-15 20:18:14,966 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 207 GetRequests, 183 SyntacticMatches, 0 SemanticMatches, 24 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 170 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=171, Invalid=479, Unknown=0, NotChecked=0, Total=650 [2024-09-15 20:18:14,967 INFO L434 NwaCegarLoop]: 40 mSDtfsCounter, 8 mSDsluCounter, 236 mSDsCounter, 0 mSdLazyCounter, 305 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 276 SdHoareTripleChecker+Invalid, 320 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 305 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-15 20:18:14,967 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 276 Invalid, 320 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 305 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-15 20:18:14,967 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2024-09-15 20:18:14,968 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2024-09-15 20:18:14,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-09-15 20:18:14,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2024-09-15 20:18:14,968 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 86 [2024-09-15 20:18:14,968 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 20:18:14,968 INFO L474 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2024-09-15 20:18:14,968 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 25 states, 24 states have (on average 2.4583333333333335) internal successors, (59), 25 states have internal predecessors, (59), 13 states have call successors, (39), 1 states have call predecessors, (39), 1 states have return successors, (39), 13 states have call predecessors, (39), 13 states have call successors, (39) [2024-09-15 20:18:14,968 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2024-09-15 20:18:14,968 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2024-09-15 20:18:14,971 INFO L785 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr0ASSERT_VIOLATIONPOST_CONDITION (11 of 12 remaining) [2024-09-15 20:18:14,971 INFO L785 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr1ASSERT_VIOLATIONWITNESS_INVARIANT (10 of 12 remaining) [2024-09-15 20:18:14,971 INFO L785 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr2REQUIRES_VIOLATIONPRE_CONDITION (9 of 12 remaining) [2024-09-15 20:18:14,972 INFO L785 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr3REQUIRES_VIOLATIONPRE_CONDITION (8 of 12 remaining) [2024-09-15 20:18:14,972 INFO L785 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr4REQUIRES_VIOLATIONPRE_CONDITION (7 of 12 remaining) [2024-09-15 20:18:14,972 INFO L785 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr5ASSERT_VIOLATIONWITNESS_INVARIANT (6 of 12 remaining) [2024-09-15 20:18:14,972 INFO L785 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr6REQUIRES_VIOLATIONPRE_CONDITION (5 of 12 remaining) [2024-09-15 20:18:14,972 INFO L785 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr7REQUIRES_VIOLATIONPRE_CONDITION (4 of 12 remaining) [2024-09-15 20:18:14,972 INFO L785 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr8REQUIRES_VIOLATIONPRE_CONDITION (3 of 12 remaining) [2024-09-15 20:18:14,972 INFO L785 garLoopResultBuilder]: Registering result SAFE for location ULTIMATE.startErr9REQUIRES_VIOLATIONPRE_CONDITION (2 of 12 remaining) [2024-09-15 20:18:14,972 INFO L785 garLoopResultBuilder]: Registering result SAFE for location __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION (1 of 12 remaining) [2024-09-15 20:18:14,972 INFO L785 garLoopResultBuilder]: Registering result SAFE for location __VERIFIER_assertErr1ENSURES_VIOLATIONPOST_CONDITION (0 of 12 remaining) [2024-09-15 20:18:14,991 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2024-09-15 20:18:15,173 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2024-09-15 20:18:15,176 INFO L408 BasicCegarLoop]: Path program histogram: [2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 20:18:15,178 INFO L165 ceAbstractionStarter]: Computing trace abstraction results [2024-09-15 20:18:15,180 INFO L469 ceAbstractionStarter]: Automizer considered 2 witness invariants [2024-09-15 20:18:15,180 INFO L470 ceAbstractionStarter]: WitnessConsidered=2 [2024-09-15 20:18:15,181 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 15.09 08:18:15 BoogieIcfgContainer [2024-09-15 20:18:15,181 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2024-09-15 20:18:15,182 INFO L158 Benchmark]: Toolchain (without parser) took 15469.68ms. Allocated memory was 69.2MB in the beginning and 281.0MB in the end (delta: 211.8MB). Free memory was 37.9MB in the beginning and 198.4MB in the end (delta: -160.4MB). Peak memory consumption was 52.1MB. Max. memory is 16.1GB. [2024-09-15 20:18:15,182 INFO L158 Benchmark]: Witness Parser took 0.17ms. Allocated memory is still 52.4MB. Free memory is still 25.6MB. There was no memory consumed. Max. memory is 16.1GB. [2024-09-15 20:18:15,182 INFO L158 Benchmark]: CDTParser took 0.17ms. Allocated memory is still 52.4MB. Free memory is still 35.2MB. There was no memory consumed. Max. memory is 16.1GB. [2024-09-15 20:18:15,182 INFO L158 Benchmark]: CACSL2BoogieTranslator took 343.00ms. Allocated memory is still 69.2MB. Free memory was 37.7MB in the beginning and 45.7MB in the end (delta: -8.0MB). Peak memory consumption was 13.3MB. Max. memory is 16.1GB. [2024-09-15 20:18:15,182 INFO L158 Benchmark]: Boogie Procedure Inliner took 50.42ms. Allocated memory is still 69.2MB. Free memory was 45.7MB in the beginning and 44.0MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2024-09-15 20:18:15,183 INFO L158 Benchmark]: Boogie Preprocessor took 42.54ms. Allocated memory is still 69.2MB. Free memory was 44.0MB in the beginning and 42.2MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2024-09-15 20:18:15,183 INFO L158 Benchmark]: RCFGBuilder took 417.01ms. Allocated memory is still 69.2MB. Free memory was 42.2MB in the beginning and 45.2MB in the end (delta: -3.0MB). Peak memory consumption was 16.9MB. Max. memory is 16.1GB. [2024-09-15 20:18:15,183 INFO L158 Benchmark]: TraceAbstraction took 14611.43ms. Allocated memory was 69.2MB in the beginning and 281.0MB in the end (delta: 211.8MB). Free memory was 44.5MB in the beginning and 198.4MB in the end (delta: -153.9MB). Peak memory consumption was 57.6MB. Max. memory is 16.1GB. [2024-09-15 20:18:15,184 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * Witness Parser took 0.17ms. Allocated memory is still 52.4MB. Free memory is still 25.6MB. There was no memory consumed. Max. memory is 16.1GB. * CDTParser took 0.17ms. Allocated memory is still 52.4MB. Free memory is still 35.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 343.00ms. Allocated memory is still 69.2MB. Free memory was 37.7MB in the beginning and 45.7MB in the end (delta: -8.0MB). Peak memory consumption was 13.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 50.42ms. Allocated memory is still 69.2MB. Free memory was 45.7MB in the beginning and 44.0MB in the end (delta: 1.7MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 42.54ms. Allocated memory is still 69.2MB. Free memory was 44.0MB in the beginning and 42.2MB in the end (delta: 1.8MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * RCFGBuilder took 417.01ms. Allocated memory is still 69.2MB. Free memory was 42.2MB in the beginning and 45.2MB in the end (delta: -3.0MB). Peak memory consumption was 16.9MB. Max. memory is 16.1GB. * TraceAbstraction took 14611.43ms. Allocated memory was 69.2MB in the beginning and 281.0MB in the end (delta: 211.8MB). Free memory was 44.5MB in the beginning and 198.4MB in the end (delta: -153.9MB). Peak memory consumption was 57.6MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 11]: procedure postcondition always holds For all program executions holds that procedure postcondition always holds at this location - PositiveResult [Line: 34]: invariant of correctness witness holds For all program executions holds that invariant of correctness witness holds at this location - PositiveResult [Line: 14]: procedure precondition always holds For all program executions holds that procedure precondition always holds at this location - PositiveResult [Line: 14]: procedure precondition always holds For all program executions holds that procedure precondition always holds at this location - PositiveResult [Line: 14]: procedure precondition always holds For all program executions holds that procedure precondition always holds at this location - PositiveResult [Line: 44]: invariant of correctness witness holds For all program executions holds that invariant of correctness witness holds at this location - PositiveResult [Line: 14]: procedure precondition always holds For all program executions holds that procedure precondition always holds at this location - PositiveResult [Line: 14]: procedure precondition always holds For all program executions holds that procedure precondition always holds at this location - PositiveResult [Line: 14]: procedure precondition always holds For all program executions holds that procedure precondition always holds at this location - PositiveResult [Line: 14]: procedure precondition always holds For all program executions holds that procedure precondition always holds at this location - PositiveResult [Line: 17]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - PositiveResult [Line: 14]: procedure postcondition always holds For all program executions holds that procedure postcondition always holds at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 2 procedures, 36 locations, 12 error locations. Started 1 CEGAR loops. OverallTime: 14.5s, OverallIterations: 15, TraceHistogramMax: 13, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 1.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 190 SdHoareTripleChecker+Valid, 1.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 140 mSDsluCounter, 1366 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 870 mSDsCounter, 129 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1135 IncrementalHoareTripleChecker+Invalid, 1264 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 129 mSolverCounterUnsat, 496 mSDtfsCounter, 1135 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 1052 GetRequests, 956 SyntacticMatches, 1 SemanticMatches, 95 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 243 ImplicationChecksByTransitivity, 1.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=63occurred in iteration=12, InterpolantAutomatonStates: 78, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 15 MinimizatonAttempts, 66 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 9.7s InterpolantComputationTime, 1108 NumberOfCodeBlocks, 1049 NumberOfCodeBlocksAsserted, 25 NumberOfCheckSat, 1319 ConstructedInterpolants, 0 QuantifiedInterpolants, 8810 SizeOfPredicates, 10 NumberOfNonLiveVariables, 1387 ConjunctsInSsa, 147 ConjunctsInUnsatCore, 28 InterpolantComputations, 11 PerfectInterpolantSequences, 3592/3753 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 12 specifications checked. All of them hold RESULT: Ultimate proved your program to be correct! [2024-09-15 20:18:15,209 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE