./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/loops/vogal-1.i --full-output --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 04d6fb36 Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/loops/vogal-1.i -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0004a4c1c8347096eaba7e87038be30bb20b14d3b5abd082e79b4b4e835a243e --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --- Real Ultimate output --- This is Ultimate 0.2.4-tmp.dk.referee-eval-04d6fb3-m [2024-09-15 18:37:36,870 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-15 18:37:36,934 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-15 18:37:36,939 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-15 18:37:36,941 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-15 18:37:36,965 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-15 18:37:36,968 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-15 18:37:36,968 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-15 18:37:36,969 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-15 18:37:36,969 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-15 18:37:36,970 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-15 18:37:36,970 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-15 18:37:36,970 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-15 18:37:36,973 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-15 18:37:36,973 INFO L153 SettingsManager]: * Use SBE=true [2024-09-15 18:37:36,974 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-15 18:37:36,974 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-15 18:37:36,974 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-15 18:37:36,974 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-15 18:37:36,974 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-15 18:37:36,975 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-15 18:37:36,975 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-15 18:37:36,975 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-15 18:37:36,975 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-15 18:37:36,976 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-15 18:37:36,976 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-15 18:37:36,976 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-15 18:37:36,976 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-15 18:37:36,976 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-15 18:37:36,977 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-15 18:37:36,977 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-15 18:37:36,977 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-15 18:37:36,979 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-15 18:37:36,980 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-15 18:37:36,980 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-15 18:37:36,980 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-15 18:37:36,980 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-15 18:37:36,980 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-15 18:37:36,980 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-15 18:37:36,980 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-15 18:37:36,981 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-15 18:37:36,981 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-15 18:37:36,981 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0004a4c1c8347096eaba7e87038be30bb20b14d3b5abd082e79b4b4e835a243e Applying setting for plugin de.uni_freiburg.informatik.ultimate.boogie.procedureinliner: Inline calls to implemented procedures -> NEVER Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 [2024-09-15 18:37:37,272 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-15 18:37:37,302 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-15 18:37:37,305 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-15 18:37:37,306 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-15 18:37:37,306 INFO L274 PluginConnector]: CDTParser initialized [2024-09-15 18:37:37,307 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/loops/vogal-1.i [2024-09-15 18:37:38,798 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-15 18:37:38,979 INFO L384 CDTParser]: Found 1 translation units. [2024-09-15 18:37:38,980 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/vogal-1.i [2024-09-15 18:37:38,988 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/9cf35c7f0/b72ae4a24d9c4419afb0eb8a6ee014de/FLAG14ddd3b3f [2024-09-15 18:37:39,377 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/9cf35c7f0/b72ae4a24d9c4419afb0eb8a6ee014de [2024-09-15 18:37:39,379 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-15 18:37:39,380 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-15 18:37:39,382 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-15 18:37:39,383 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-15 18:37:39,386 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-15 18:37:39,388 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,388 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@505e3e0a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39, skipping insertion in model container [2024-09-15 18:37:39,388 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,405 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-15 18:37:39,556 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/vogal-1.i[895,908] [2024-09-15 18:37:39,584 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-15 18:37:39,592 INFO L200 MainTranslator]: Completed pre-run [2024-09-15 18:37:39,601 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/vogal-1.i[895,908] [2024-09-15 18:37:39,618 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-15 18:37:39,631 INFO L204 MainTranslator]: Completed translation [2024-09-15 18:37:39,632 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39 WrapperNode [2024-09-15 18:37:39,632 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-15 18:37:39,633 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-15 18:37:39,633 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-15 18:37:39,633 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-15 18:37:39,639 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,645 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,651 INFO L138 Inliner]: procedures = 17, calls = 34, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2024-09-15 18:37:39,651 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-15 18:37:39,652 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-15 18:37:39,652 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-15 18:37:39,652 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-15 18:37:39,661 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,661 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,667 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,684 INFO L175 MemorySlicer]: Split 21 memory accesses to 3 slices as follows [2, 13, 6]. 62 percent of accesses are in the largest equivalence class. The 13 initializations are split as follows [2, 11, 0]. The 1 writes are split as follows [0, 0, 1]. [2024-09-15 18:37:39,685 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,685 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,693 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,700 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,704 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,705 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,709 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-15 18:37:39,710 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-15 18:37:39,711 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-15 18:37:39,711 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-15 18:37:39,712 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39" (1/1) ... [2024-09-15 18:37:39,718 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-15 18:37:39,727 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:37:39,744 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-15 18:37:39,750 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-15 18:37:39,785 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-15 18:37:39,785 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-09-15 18:37:39,785 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-09-15 18:37:39,785 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-15 18:37:39,785 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-15 18:37:39,785 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-09-15 18:37:39,785 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-09-15 18:37:39,786 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-09-15 18:37:39,787 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-09-15 18:37:39,787 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-09-15 18:37:39,787 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-09-15 18:37:39,787 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-09-15 18:37:39,787 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-15 18:37:39,787 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-15 18:37:39,787 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-09-15 18:37:39,788 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-09-15 18:37:39,788 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-09-15 18:37:39,788 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-15 18:37:39,788 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-15 18:37:39,789 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-09-15 18:37:39,866 INFO L242 CfgBuilder]: Building ICFG [2024-09-15 18:37:39,868 INFO L268 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-15 18:37:40,065 INFO L? ?]: Removed 12 outVars from TransFormulas that were not future-live. [2024-09-15 18:37:40,065 INFO L291 CfgBuilder]: Performing block encoding [2024-09-15 18:37:40,082 INFO L313 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-15 18:37:40,082 INFO L318 CfgBuilder]: Removed 6 assume(true) statements. [2024-09-15 18:37:40,083 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.09 06:37:40 BoogieIcfgContainer [2024-09-15 18:37:40,083 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-15 18:37:40,090 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-15 18:37:40,091 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-15 18:37:40,093 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-15 18:37:40,094 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 15.09 06:37:39" (1/3) ... [2024-09-15 18:37:40,094 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@508b26d7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.09 06:37:40, skipping insertion in model container [2024-09-15 18:37:40,094 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.09 06:37:39" (2/3) ... [2024-09-15 18:37:40,095 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@508b26d7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.09 06:37:40, skipping insertion in model container [2024-09-15 18:37:40,095 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.09 06:37:40" (3/3) ... [2024-09-15 18:37:40,096 INFO L112 eAbstractionObserver]: Analyzing ICFG vogal-1.i [2024-09-15 18:37:40,109 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-15 18:37:40,110 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-15 18:37:40,167 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-15 18:37:40,175 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@24b7283b, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-15 18:37:40,176 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-15 18:37:40,183 INFO L276 IsEmpty]: Start isEmpty. Operand has 35 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 28 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-15 18:37:40,192 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-09-15 18:37:40,192 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:37:40,193 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:37:40,194 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:37:40,199 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:40,201 INFO L85 PathProgramCache]: Analyzing trace with hash -1308321975, now seen corresponding path program 1 times [2024-09-15 18:37:40,210 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:37:40,211 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [737152040] [2024-09-15 18:37:40,211 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:40,212 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:37:40,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:40,408 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:37:40,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:40,415 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-15 18:37:40,415 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:37:40,415 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [737152040] [2024-09-15 18:37:40,416 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [737152040] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-15 18:37:40,416 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-15 18:37:40,416 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-09-15 18:37:40,418 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1465980441] [2024-09-15 18:37:40,418 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 18:37:40,421 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-09-15 18:37:40,421 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:37:40,452 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-09-15 18:37:40,453 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-15 18:37:40,455 INFO L87 Difference]: Start difference. First operand has 35 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 28 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:40,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:37:40,484 INFO L93 Difference]: Finished difference Result 64 states and 93 transitions. [2024-09-15 18:37:40,486 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-09-15 18:37:40,487 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2024-09-15 18:37:40,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:37:40,494 INFO L225 Difference]: With dead ends: 64 [2024-09-15 18:37:40,494 INFO L226 Difference]: Without dead ends: 28 [2024-09-15 18:37:40,497 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-15 18:37:40,500 INFO L434 NwaCegarLoop]: 41 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 2 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-15 18:37:40,501 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 41 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 2 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-15 18:37:40,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28 states. [2024-09-15 18:37:40,531 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28 to 28. [2024-09-15 18:37:40,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 23 states have (on average 1.3478260869565217) internal successors, (31), 23 states have internal predecessors, (31), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:40,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 35 transitions. [2024-09-15 18:37:40,535 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 35 transitions. Word has length 17 [2024-09-15 18:37:40,535 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:37:40,535 INFO L474 AbstractCegarLoop]: Abstraction has 28 states and 35 transitions. [2024-09-15 18:37:40,536 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:40,536 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:40,537 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 35 transitions. [2024-09-15 18:37:40,537 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2024-09-15 18:37:40,537 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:37:40,538 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:37:40,538 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-15 18:37:40,538 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:37:40,539 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:40,539 INFO L85 PathProgramCache]: Analyzing trace with hash 516425503, now seen corresponding path program 1 times [2024-09-15 18:37:40,539 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:37:40,540 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1476340802] [2024-09-15 18:37:40,540 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:40,540 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:37:40,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:40,727 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:37:40,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:40,732 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-15 18:37:40,733 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:37:40,733 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1476340802] [2024-09-15 18:37:40,734 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1476340802] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-15 18:37:40,734 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-15 18:37:40,734 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-09-15 18:37:40,734 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1830097966] [2024-09-15 18:37:40,737 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 18:37:40,738 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-09-15 18:37:40,738 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:37:40,739 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-09-15 18:37:40,739 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-15 18:37:40,739 INFO L87 Difference]: Start difference. First operand 28 states and 35 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:40,787 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:37:40,788 INFO L93 Difference]: Finished difference Result 63 states and 83 transitions. [2024-09-15 18:37:40,788 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-09-15 18:37:40,789 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 19 [2024-09-15 18:37:40,789 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:37:40,791 INFO L225 Difference]: With dead ends: 63 [2024-09-15 18:37:40,791 INFO L226 Difference]: Without dead ends: 41 [2024-09-15 18:37:40,792 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-15 18:37:40,793 INFO L434 NwaCegarLoop]: 26 mSDtfsCounter, 14 mSDsluCounter, 22 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-15 18:37:40,793 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 48 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-15 18:37:40,794 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41 states. [2024-09-15 18:37:40,799 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41 to 29. [2024-09-15 18:37:40,800 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 24 states have (on average 1.3333333333333333) internal successors, (32), 24 states have internal predecessors, (32), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:40,801 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 36 transitions. [2024-09-15 18:37:40,801 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 36 transitions. Word has length 19 [2024-09-15 18:37:40,801 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:37:40,802 INFO L474 AbstractCegarLoop]: Abstraction has 29 states and 36 transitions. [2024-09-15 18:37:40,802 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:40,802 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:40,803 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 36 transitions. [2024-09-15 18:37:40,803 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2024-09-15 18:37:40,803 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:37:40,804 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:37:40,804 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-09-15 18:37:40,804 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:37:40,804 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:40,805 INFO L85 PathProgramCache]: Analyzing trace with hash 22246406, now seen corresponding path program 1 times [2024-09-15 18:37:40,805 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:37:40,805 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [485605196] [2024-09-15 18:37:40,805 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:40,806 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:37:40,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:40,920 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:37:40,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:40,923 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-15 18:37:40,923 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:37:40,924 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [485605196] [2024-09-15 18:37:40,924 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [485605196] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:37:40,924 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [995621970] [2024-09-15 18:37:40,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:40,924 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:40,924 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:37:40,926 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:37:40,927 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-15 18:37:40,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:40,980 INFO L262 TraceCheckSpWp]: Trace formula consists of 118 conjuncts, 12 conjuncts are in the unsatisfiable core [2024-09-15 18:37:40,983 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:37:41,035 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-15 18:37:41,036 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-15 18:37:41,037 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [995621970] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-15 18:37:41,037 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-15 18:37:41,037 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [4] total 8 [2024-09-15 18:37:41,037 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [493636349] [2024-09-15 18:37:41,037 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 18:37:41,038 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-09-15 18:37:41,038 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:37:41,038 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-09-15 18:37:41,039 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-09-15 18:37:41,039 INFO L87 Difference]: Start difference. First operand 29 states and 36 transitions. Second operand has 6 states, 6 states have (on average 2.6666666666666665) internal successors, (16), 5 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:41,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:37:41,086 INFO L93 Difference]: Finished difference Result 53 states and 68 transitions. [2024-09-15 18:37:41,086 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-15 18:37:41,087 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 2.6666666666666665) internal successors, (16), 5 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2024-09-15 18:37:41,087 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:37:41,087 INFO L225 Difference]: With dead ends: 53 [2024-09-15 18:37:41,089 INFO L226 Difference]: Without dead ends: 48 [2024-09-15 18:37:41,089 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2024-09-15 18:37:41,090 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 28 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-15 18:37:41,091 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 138 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-15 18:37:41,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2024-09-15 18:37:41,096 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 41. [2024-09-15 18:37:41,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 36 states have (on average 1.3611111111111112) internal successors, (49), 36 states have internal predecessors, (49), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:41,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 53 transitions. [2024-09-15 18:37:41,097 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 53 transitions. Word has length 20 [2024-09-15 18:37:41,097 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:37:41,097 INFO L474 AbstractCegarLoop]: Abstraction has 41 states and 53 transitions. [2024-09-15 18:37:41,097 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 2.6666666666666665) internal successors, (16), 5 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:41,098 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:41,098 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 53 transitions. [2024-09-15 18:37:41,098 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2024-09-15 18:37:41,098 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:37:41,098 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:37:41,112 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-09-15 18:37:41,302 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:41,303 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:37:41,304 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:41,304 INFO L85 PathProgramCache]: Analyzing trace with hash 260967679, now seen corresponding path program 1 times [2024-09-15 18:37:41,304 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:37:41,304 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [479406112] [2024-09-15 18:37:41,304 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:41,304 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:37:41,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:41,411 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:37:41,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:41,416 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-15 18:37:41,416 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:37:41,418 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [479406112] [2024-09-15 18:37:41,418 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [479406112] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:37:41,418 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1816771703] [2024-09-15 18:37:41,418 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:41,419 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:41,419 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:37:41,423 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:37:41,424 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-15 18:37:41,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:41,492 INFO L262 TraceCheckSpWp]: Trace formula consists of 137 conjuncts, 7 conjuncts are in the unsatisfiable core [2024-09-15 18:37:41,493 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:37:41,515 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-15 18:37:41,516 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-15 18:37:41,517 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1816771703] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-15 18:37:41,517 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-15 18:37:41,517 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 6 [2024-09-15 18:37:41,517 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1542105271] [2024-09-15 18:37:41,517 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 18:37:41,517 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-09-15 18:37:41,518 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:37:41,518 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-09-15 18:37:41,518 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2024-09-15 18:37:41,518 INFO L87 Difference]: Start difference. First operand 41 states and 53 transitions. Second operand has 4 states, 4 states have (on average 5.5) internal successors, (22), 4 states have internal predecessors, (22), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:41,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:37:41,551 INFO L93 Difference]: Finished difference Result 74 states and 98 transitions. [2024-09-15 18:37:41,553 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-09-15 18:37:41,553 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.5) internal successors, (22), 4 states have internal predecessors, (22), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2024-09-15 18:37:41,553 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:37:41,554 INFO L225 Difference]: With dead ends: 74 [2024-09-15 18:37:41,554 INFO L226 Difference]: Without dead ends: 45 [2024-09-15 18:37:41,554 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2024-09-15 18:37:41,555 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 0 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 76 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-15 18:37:41,555 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 76 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-15 18:37:41,556 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2024-09-15 18:37:41,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2024-09-15 18:37:41,563 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 40 states have (on average 1.35) internal successors, (54), 40 states have internal predecessors, (54), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:41,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 58 transitions. [2024-09-15 18:37:41,566 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 58 transitions. Word has length 26 [2024-09-15 18:37:41,566 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:37:41,566 INFO L474 AbstractCegarLoop]: Abstraction has 45 states and 58 transitions. [2024-09-15 18:37:41,566 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.5) internal successors, (22), 4 states have internal predecessors, (22), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:41,566 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:41,567 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 58 transitions. [2024-09-15 18:37:41,568 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2024-09-15 18:37:41,568 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:37:41,568 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:37:41,583 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-09-15 18:37:41,774 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:41,774 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:37:41,775 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:41,775 INFO L85 PathProgramCache]: Analyzing trace with hash 1671267723, now seen corresponding path program 1 times [2024-09-15 18:37:41,775 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:37:41,776 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1136251067] [2024-09-15 18:37:41,776 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:41,776 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:37:41,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:41,923 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:37:41,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:41,926 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-09-15 18:37:41,928 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:37:41,929 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1136251067] [2024-09-15 18:37:41,929 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1136251067] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:37:41,929 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1123687060] [2024-09-15 18:37:41,929 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:41,929 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:41,929 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:37:41,934 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:37:41,949 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-15 18:37:42,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:42,020 INFO L262 TraceCheckSpWp]: Trace formula consists of 139 conjuncts, 18 conjuncts are in the unsatisfiable core [2024-09-15 18:37:42,022 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:37:42,175 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-15 18:37:42,177 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:37:42,315 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-15 18:37:42,316 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 46 treesize of output 30 [2024-09-15 18:37:42,342 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-15 18:37:42,342 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1123687060] provided 1 perfect and 1 imperfect interpolant sequences [2024-09-15 18:37:42,343 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-09-15 18:37:42,343 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [4, 9] total 15 [2024-09-15 18:37:42,343 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1784684899] [2024-09-15 18:37:42,343 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 18:37:42,343 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-09-15 18:37:42,344 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:37:42,344 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-09-15 18:37:42,346 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2024-09-15 18:37:42,347 INFO L87 Difference]: Start difference. First operand 45 states and 58 transitions. Second operand has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:42,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:37:42,480 INFO L93 Difference]: Finished difference Result 65 states and 82 transitions. [2024-09-15 18:37:42,481 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-09-15 18:37:42,481 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 27 [2024-09-15 18:37:42,481 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:37:42,481 INFO L225 Difference]: With dead ends: 65 [2024-09-15 18:37:42,483 INFO L226 Difference]: Without dead ends: 43 [2024-09-15 18:37:42,483 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=79, Invalid=301, Unknown=0, NotChecked=0, Total=380 [2024-09-15 18:37:42,484 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 8 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-15 18:37:42,484 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 123 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-15 18:37:42,484 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2024-09-15 18:37:42,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2024-09-15 18:37:42,490 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 38 states have (on average 1.3421052631578947) internal successors, (51), 38 states have internal predecessors, (51), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:42,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 55 transitions. [2024-09-15 18:37:42,492 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 55 transitions. Word has length 27 [2024-09-15 18:37:42,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:37:42,493 INFO L474 AbstractCegarLoop]: Abstraction has 43 states and 55 transitions. [2024-09-15 18:37:42,493 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:42,493 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:42,494 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 55 transitions. [2024-09-15 18:37:42,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2024-09-15 18:37:42,494 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:37:42,494 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:37:42,507 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2024-09-15 18:37:42,695 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:42,696 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:37:42,696 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:42,696 INFO L85 PathProgramCache]: Analyzing trace with hash -400223430, now seen corresponding path program 1 times [2024-09-15 18:37:42,697 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:37:42,697 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1699099016] [2024-09-15 18:37:42,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:42,697 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:37:42,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:42,797 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:37:42,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:42,801 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-15 18:37:42,802 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:37:42,802 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1699099016] [2024-09-15 18:37:42,802 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1699099016] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:37:42,802 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1793945519] [2024-09-15 18:37:42,804 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:42,804 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:42,805 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:37:42,806 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:37:42,807 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-15 18:37:42,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:42,862 INFO L262 TraceCheckSpWp]: Trace formula consists of 144 conjuncts, 20 conjuncts are in the unsatisfiable core [2024-09-15 18:37:42,864 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:37:42,996 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-15 18:37:43,003 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-15 18:37:43,005 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:37:43,119 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-15 18:37:43,120 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 47 treesize of output 31 [2024-09-15 18:37:43,144 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-09-15 18:37:43,144 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1793945519] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:37:43,144 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:37:43,144 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 9, 7] total 15 [2024-09-15 18:37:43,145 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2069301785] [2024-09-15 18:37:43,145 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:37:43,145 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-09-15 18:37:43,145 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:37:43,146 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-09-15 18:37:43,146 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2024-09-15 18:37:43,146 INFO L87 Difference]: Start difference. First operand 43 states and 55 transitions. Second operand has 15 states, 15 states have (on average 4.133333333333334) internal successors, (62), 15 states have internal predecessors, (62), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:43,297 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:37:43,297 INFO L93 Difference]: Finished difference Result 124 states and 169 transitions. [2024-09-15 18:37:43,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-09-15 18:37:43,298 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 4.133333333333334) internal successors, (62), 15 states have internal predecessors, (62), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2024-09-15 18:37:43,298 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:37:43,299 INFO L225 Difference]: With dead ends: 124 [2024-09-15 18:37:43,299 INFO L226 Difference]: Without dead ends: 88 [2024-09-15 18:37:43,299 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=83, Invalid=259, Unknown=0, NotChecked=0, Total=342 [2024-09-15 18:37:43,299 INFO L434 NwaCegarLoop]: 23 mSDtfsCounter, 95 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-15 18:37:43,300 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [95 Valid, 205 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-15 18:37:43,300 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2024-09-15 18:37:43,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 46. [2024-09-15 18:37:43,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 41 states have (on average 1.3170731707317074) internal successors, (54), 41 states have internal predecessors, (54), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:43,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 58 transitions. [2024-09-15 18:37:43,309 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 58 transitions. Word has length 28 [2024-09-15 18:37:43,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:37:43,309 INFO L474 AbstractCegarLoop]: Abstraction has 46 states and 58 transitions. [2024-09-15 18:37:43,309 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 4.133333333333334) internal successors, (62), 15 states have internal predecessors, (62), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:43,310 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:43,310 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 58 transitions. [2024-09-15 18:37:43,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2024-09-15 18:37:43,310 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:37:43,310 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:37:43,323 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2024-09-15 18:37:43,511 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:43,511 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:37:43,512 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:43,512 INFO L85 PathProgramCache]: Analyzing trace with hash -461832489, now seen corresponding path program 1 times [2024-09-15 18:37:43,512 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:37:43,512 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1921320789] [2024-09-15 18:37:43,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:43,512 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:37:43,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:43,619 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:37:43,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:43,622 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-15 18:37:43,622 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:37:43,626 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1921320789] [2024-09-15 18:37:43,626 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1921320789] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:37:43,626 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [22072552] [2024-09-15 18:37:43,627 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:43,627 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:43,627 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:37:43,629 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:37:43,635 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-15 18:37:43,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:43,755 INFO L262 TraceCheckSpWp]: Trace formula consists of 155 conjuncts, 22 conjuncts are in the unsatisfiable core [2024-09-15 18:37:43,756 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:37:43,840 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:37:43,841 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 42 treesize of output 34 [2024-09-15 18:37:43,906 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-15 18:37:43,906 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:37:44,009 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-15 18:37:44,010 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 47 treesize of output 31 [2024-09-15 18:37:44,034 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 1 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-15 18:37:44,034 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [22072552] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:37:44,034 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:37:44,034 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 10, 9] total 18 [2024-09-15 18:37:44,035 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [170436198] [2024-09-15 18:37:44,035 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:37:44,035 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2024-09-15 18:37:44,035 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:37:44,036 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2024-09-15 18:37:44,036 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=252, Unknown=0, NotChecked=0, Total=306 [2024-09-15 18:37:44,037 INFO L87 Difference]: Start difference. First operand 46 states and 58 transitions. Second operand has 18 states, 18 states have (on average 2.6666666666666665) internal successors, (48), 18 states have internal predecessors, (48), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:44,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:37:44,407 INFO L93 Difference]: Finished difference Result 152 states and 208 transitions. [2024-09-15 18:37:44,407 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2024-09-15 18:37:44,407 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 2.6666666666666665) internal successors, (48), 18 states have internal predecessors, (48), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2024-09-15 18:37:44,407 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:37:44,408 INFO L225 Difference]: With dead ends: 152 [2024-09-15 18:37:44,409 INFO L226 Difference]: Without dead ends: 114 [2024-09-15 18:37:44,409 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 49 SyntacticMatches, 1 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 205 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=217, Invalid=775, Unknown=0, NotChecked=0, Total=992 [2024-09-15 18:37:44,410 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 323 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 182 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 323 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 182 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-15 18:37:44,410 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [323 Valid, 210 Invalid, 196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 182 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-15 18:37:44,411 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2024-09-15 18:37:44,441 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 48. [2024-09-15 18:37:44,442 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 43 states have (on average 1.302325581395349) internal successors, (56), 43 states have internal predecessors, (56), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:44,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 60 transitions. [2024-09-15 18:37:44,443 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 60 transitions. Word has length 30 [2024-09-15 18:37:44,443 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:37:44,443 INFO L474 AbstractCegarLoop]: Abstraction has 48 states and 60 transitions. [2024-09-15 18:37:44,443 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 2.6666666666666665) internal successors, (48), 18 states have internal predecessors, (48), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:44,443 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:44,444 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 60 transitions. [2024-09-15 18:37:44,444 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2024-09-15 18:37:44,444 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:37:44,444 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:37:44,463 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2024-09-15 18:37:44,648 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2024-09-15 18:37:44,649 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:37:44,650 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:44,650 INFO L85 PathProgramCache]: Analyzing trace with hash 450517516, now seen corresponding path program 1 times [2024-09-15 18:37:44,650 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:37:44,650 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1562900673] [2024-09-15 18:37:44,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:44,651 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:37:44,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:44,758 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:37:44,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:44,760 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-09-15 18:37:44,761 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:37:44,761 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1562900673] [2024-09-15 18:37:44,761 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1562900673] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:37:44,761 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [18555370] [2024-09-15 18:37:44,761 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:44,761 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:44,762 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:37:44,763 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:37:44,764 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-15 18:37:44,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:44,834 INFO L262 TraceCheckSpWp]: Trace formula consists of 170 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-09-15 18:37:44,836 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:37:44,851 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-09-15 18:37:44,851 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:37:44,864 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-15 18:37:44,865 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [18555370] provided 1 perfect and 1 imperfect interpolant sequences [2024-09-15 18:37:44,865 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-09-15 18:37:44,865 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6, 3] total 8 [2024-09-15 18:37:44,865 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1840094824] [2024-09-15 18:37:44,866 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-15 18:37:44,866 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-09-15 18:37:44,866 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:37:44,867 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-09-15 18:37:44,867 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2024-09-15 18:37:44,867 INFO L87 Difference]: Start difference. First operand 48 states and 60 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:44,902 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:37:44,902 INFO L93 Difference]: Finished difference Result 83 states and 109 transitions. [2024-09-15 18:37:44,903 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-09-15 18:37:44,903 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2024-09-15 18:37:44,903 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:37:44,904 INFO L225 Difference]: With dead ends: 83 [2024-09-15 18:37:44,904 INFO L226 Difference]: Without dead ends: 52 [2024-09-15 18:37:44,905 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 69 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2024-09-15 18:37:44,905 INFO L434 NwaCegarLoop]: 29 mSDtfsCounter, 6 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-15 18:37:44,905 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 49 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-15 18:37:44,906 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2024-09-15 18:37:44,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 52. [2024-09-15 18:37:44,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 47 states have (on average 1.2765957446808511) internal successors, (60), 47 states have internal predecessors, (60), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:44,919 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 64 transitions. [2024-09-15 18:37:44,919 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 64 transitions. Word has length 34 [2024-09-15 18:37:44,919 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:37:44,920 INFO L474 AbstractCegarLoop]: Abstraction has 52 states and 64 transitions. [2024-09-15 18:37:44,920 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:44,920 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:44,920 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 64 transitions. [2024-09-15 18:37:44,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2024-09-15 18:37:44,921 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:37:44,921 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:37:44,940 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2024-09-15 18:37:45,125 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:45,126 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:37:45,127 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:45,127 INFO L85 PathProgramCache]: Analyzing trace with hash 1134559415, now seen corresponding path program 1 times [2024-09-15 18:37:45,127 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:37:45,127 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [301278326] [2024-09-15 18:37:45,127 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:45,128 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:37:45,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:45,254 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:37:45,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:45,257 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2024-09-15 18:37:45,257 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:37:45,257 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [301278326] [2024-09-15 18:37:45,257 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [301278326] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:37:45,257 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [352095078] [2024-09-15 18:37:45,257 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:45,258 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:45,258 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:37:45,259 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:37:45,261 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-15 18:37:45,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:45,330 INFO L262 TraceCheckSpWp]: Trace formula consists of 183 conjuncts, 10 conjuncts are in the unsatisfiable core [2024-09-15 18:37:45,331 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:37:45,348 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 1 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-09-15 18:37:45,348 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:37:45,377 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-09-15 18:37:45,377 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [352095078] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:37:45,377 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:37:45,377 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 4] total 10 [2024-09-15 18:37:45,378 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [102643302] [2024-09-15 18:37:45,378 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:37:45,378 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2024-09-15 18:37:45,378 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:37:45,379 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2024-09-15 18:37:45,379 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2024-09-15 18:37:45,379 INFO L87 Difference]: Start difference. First operand 52 states and 64 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 10 states have internal predecessors, (51), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:45,785 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:37:45,785 INFO L93 Difference]: Finished difference Result 297 states and 421 transitions. [2024-09-15 18:37:45,786 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2024-09-15 18:37:45,786 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 10 states have internal predecessors, (51), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 37 [2024-09-15 18:37:45,786 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:37:45,788 INFO L225 Difference]: With dead ends: 297 [2024-09-15 18:37:45,788 INFO L226 Difference]: Without dead ends: 254 [2024-09-15 18:37:45,789 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 93 GetRequests, 73 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=115, Invalid=347, Unknown=0, NotChecked=0, Total=462 [2024-09-15 18:37:45,790 INFO L434 NwaCegarLoop]: 52 mSDtfsCounter, 288 mSDsluCounter, 181 mSDsCounter, 0 mSdLazyCounter, 234 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 284 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 234 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-15 18:37:45,790 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [288 Valid, 233 Invalid, 284 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 234 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-15 18:37:45,791 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2024-09-15 18:37:45,820 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 65. [2024-09-15 18:37:45,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 60 states have (on average 1.2833333333333334) internal successors, (77), 60 states have internal predecessors, (77), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:45,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 81 transitions. [2024-09-15 18:37:45,822 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 81 transitions. Word has length 37 [2024-09-15 18:37:45,822 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:37:45,822 INFO L474 AbstractCegarLoop]: Abstraction has 65 states and 81 transitions. [2024-09-15 18:37:45,822 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 10 states have internal predecessors, (51), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:45,823 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:45,823 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 81 transitions. [2024-09-15 18:37:45,824 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2024-09-15 18:37:45,824 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:37:45,824 INFO L216 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:37:45,846 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2024-09-15 18:37:46,024 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:46,025 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:37:46,026 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:46,026 INFO L85 PathProgramCache]: Analyzing trace with hash 1612339571, now seen corresponding path program 2 times [2024-09-15 18:37:46,026 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:37:46,026 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1366928726] [2024-09-15 18:37:46,027 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:46,027 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:37:46,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:46,232 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:37:46,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:46,234 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-15 18:37:46,234 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:37:46,234 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1366928726] [2024-09-15 18:37:46,234 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1366928726] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:37:46,235 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1034017049] [2024-09-15 18:37:46,235 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-15 18:37:46,235 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:46,235 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:37:46,236 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:37:46,244 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-15 18:37:46,332 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-15 18:37:46,332 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:37:46,333 INFO L262 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 11 conjuncts are in the unsatisfiable core [2024-09-15 18:37:46,334 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:37:46,350 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-15 18:37:46,350 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:37:46,420 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-15 18:37:46,420 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1034017049] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:37:46,420 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:37:46,420 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 13 [2024-09-15 18:37:46,421 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1884083846] [2024-09-15 18:37:46,421 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:37:46,421 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2024-09-15 18:37:46,421 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:37:46,422 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2024-09-15 18:37:46,422 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=112, Unknown=0, NotChecked=0, Total=156 [2024-09-15 18:37:46,422 INFO L87 Difference]: Start difference. First operand 65 states and 81 transitions. Second operand has 13 states, 13 states have (on average 3.076923076923077) internal successors, (40), 13 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:46,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:37:46,731 INFO L93 Difference]: Finished difference Result 309 states and 412 transitions. [2024-09-15 18:37:46,732 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-09-15 18:37:46,732 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.076923076923077) internal successors, (40), 13 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 44 [2024-09-15 18:37:46,732 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:37:46,734 INFO L225 Difference]: With dead ends: 309 [2024-09-15 18:37:46,734 INFO L226 Difference]: Without dead ends: 254 [2024-09-15 18:37:46,735 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=112, Unknown=0, NotChecked=0, Total=156 [2024-09-15 18:37:46,735 INFO L434 NwaCegarLoop]: 68 mSDtfsCounter, 149 mSDsluCounter, 351 mSDsCounter, 0 mSdLazyCounter, 275 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 149 SdHoareTripleChecker+Valid, 419 SdHoareTripleChecker+Invalid, 297 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 275 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-15 18:37:46,736 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [149 Valid, 419 Invalid, 297 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 275 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-15 18:37:46,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2024-09-15 18:37:46,764 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 66. [2024-09-15 18:37:46,765 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 61 states have (on average 1.278688524590164) internal successors, (78), 61 states have internal predecessors, (78), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:46,766 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 82 transitions. [2024-09-15 18:37:46,767 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 82 transitions. Word has length 44 [2024-09-15 18:37:46,767 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:37:46,768 INFO L474 AbstractCegarLoop]: Abstraction has 66 states and 82 transitions. [2024-09-15 18:37:46,768 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 3.076923076923077) internal successors, (40), 13 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:46,768 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:46,768 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 82 transitions. [2024-09-15 18:37:46,769 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-15 18:37:46,770 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:37:46,770 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:37:46,791 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2024-09-15 18:37:46,970 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:46,971 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:37:46,972 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:46,972 INFO L85 PathProgramCache]: Analyzing trace with hash 974810732, now seen corresponding path program 3 times [2024-09-15 18:37:46,972 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:37:46,972 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [231705488] [2024-09-15 18:37:46,972 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:46,973 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:37:47,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:47,457 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:37:47,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:47,461 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-15 18:37:47,461 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:37:47,461 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [231705488] [2024-09-15 18:37:47,461 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [231705488] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:37:47,461 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1728245473] [2024-09-15 18:37:47,461 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-15 18:37:47,462 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:47,462 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:37:47,465 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:37:47,474 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-15 18:37:47,725 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-15 18:37:47,726 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:37:47,728 INFO L262 TraceCheckSpWp]: Trace formula consists of 227 conjuncts, 23 conjuncts are in the unsatisfiable core [2024-09-15 18:37:47,731 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:37:47,836 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-15 18:37:47,837 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:37:48,021 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-15 18:37:48,021 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1728245473] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:37:48,022 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:37:48,022 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 20 [2024-09-15 18:37:48,022 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [99780919] [2024-09-15 18:37:48,022 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:37:48,022 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2024-09-15 18:37:48,022 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:37:48,023 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2024-09-15 18:37:48,023 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=55, Invalid=325, Unknown=0, NotChecked=0, Total=380 [2024-09-15 18:37:48,023 INFO L87 Difference]: Start difference. First operand 66 states and 82 transitions. Second operand has 20 states, 20 states have (on average 3.55) internal successors, (71), 18 states have internal predecessors, (71), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:48,275 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:37:48,276 INFO L93 Difference]: Finished difference Result 182 states and 237 transitions. [2024-09-15 18:37:48,276 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-09-15 18:37:48,276 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 3.55) internal successors, (71), 18 states have internal predecessors, (71), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-15 18:37:48,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:37:48,278 INFO L225 Difference]: With dead ends: 182 [2024-09-15 18:37:48,278 INFO L226 Difference]: Without dead ends: 176 [2024-09-15 18:37:48,279 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 105 GetRequests, 81 SyntacticMatches, 2 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 93 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=79, Invalid=473, Unknown=0, NotChecked=0, Total=552 [2024-09-15 18:37:48,279 INFO L434 NwaCegarLoop]: 98 mSDtfsCounter, 149 mSDsluCounter, 813 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 149 SdHoareTripleChecker+Valid, 911 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-15 18:37:48,280 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [149 Valid, 911 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-15 18:37:48,280 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 176 states. [2024-09-15 18:37:48,348 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 176 to 110. [2024-09-15 18:37:48,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 105 states have (on average 1.3142857142857143) internal successors, (138), 105 states have internal predecessors, (138), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:48,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 142 transitions. [2024-09-15 18:37:48,350 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 142 transitions. Word has length 45 [2024-09-15 18:37:48,350 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:37:48,351 INFO L474 AbstractCegarLoop]: Abstraction has 110 states and 142 transitions. [2024-09-15 18:37:48,351 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 3.55) internal successors, (71), 18 states have internal predecessors, (71), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:48,351 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:48,351 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 142 transitions. [2024-09-15 18:37:48,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-15 18:37:48,352 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:37:48,353 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:37:48,371 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2024-09-15 18:37:48,556 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2024-09-15 18:37:48,557 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:37:48,557 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:48,558 INFO L85 PathProgramCache]: Analyzing trace with hash 581783722, now seen corresponding path program 1 times [2024-09-15 18:37:48,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:37:48,558 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1173171044] [2024-09-15 18:37:48,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:48,558 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:37:48,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:50,151 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:37:50,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:50,154 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-15 18:37:50,154 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:37:50,154 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1173171044] [2024-09-15 18:37:50,154 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1173171044] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:37:50,154 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [417367432] [2024-09-15 18:37:50,154 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:50,155 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:50,155 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:37:50,158 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:37:50,159 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-09-15 18:37:50,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:50,249 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 42 conjuncts are in the unsatisfiable core [2024-09-15 18:37:50,251 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:37:50,660 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-15 18:37:50,663 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-15 18:37:50,679 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 13 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-15 18:37:50,679 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:37:51,013 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:37:51,013 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 68 treesize of output 57 [2024-09-15 18:37:51,022 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:37:51,022 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 47 treesize of output 35 [2024-09-15 18:37:51,199 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 8 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-15 18:37:51,200 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [417367432] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:37:51,200 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:37:51,200 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 14, 13] total 36 [2024-09-15 18:37:51,200 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [944704687] [2024-09-15 18:37:51,200 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:37:51,201 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2024-09-15 18:37:51,201 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:37:51,201 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2024-09-15 18:37:51,201 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=211, Invalid=1049, Unknown=0, NotChecked=0, Total=1260 [2024-09-15 18:37:51,202 INFO L87 Difference]: Start difference. First operand 110 states and 142 transitions. Second operand has 36 states, 36 states have (on average 2.3333333333333335) internal successors, (84), 36 states have internal predecessors, (84), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:54,255 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:37:54,256 INFO L93 Difference]: Finished difference Result 571 states and 790 transitions. [2024-09-15 18:37:54,256 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2024-09-15 18:37:54,256 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 2.3333333333333335) internal successors, (84), 36 states have internal predecessors, (84), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-15 18:37:54,256 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:37:54,259 INFO L225 Difference]: With dead ends: 571 [2024-09-15 18:37:54,259 INFO L226 Difference]: Without dead ends: 480 [2024-09-15 18:37:54,261 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 80 SyntacticMatches, 0 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2127 ImplicationChecksByTransitivity, 3.0s TimeCoverageRelationStatistics Valid=1453, Invalid=5857, Unknown=0, NotChecked=0, Total=7310 [2024-09-15 18:37:54,262 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 393 mSDsluCounter, 357 mSDsCounter, 0 mSdLazyCounter, 654 mSolverCounterSat, 93 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 393 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 747 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 93 IncrementalHoareTripleChecker+Valid, 654 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-15 18:37:54,262 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [393 Valid, 385 Invalid, 747 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [93 Valid, 654 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-15 18:37:54,263 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 480 states. [2024-09-15 18:37:54,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 480 to 303. [2024-09-15 18:37:54,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 298 states have (on average 1.3557046979865772) internal successors, (404), 298 states have internal predecessors, (404), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:54,374 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 408 transitions. [2024-09-15 18:37:54,374 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 408 transitions. Word has length 45 [2024-09-15 18:37:54,375 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:37:54,375 INFO L474 AbstractCegarLoop]: Abstraction has 303 states and 408 transitions. [2024-09-15 18:37:54,375 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 2.3333333333333335) internal successors, (84), 36 states have internal predecessors, (84), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:37:54,375 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:54,375 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 408 transitions. [2024-09-15 18:37:54,376 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-15 18:37:54,376 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:37:54,376 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:37:54,391 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Ended with exit code 0 [2024-09-15 18:37:54,577 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2024-09-15 18:37:54,577 INFO L399 AbstractCegarLoop]: === Iteration 13 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:37:54,578 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:37:54,578 INFO L85 PathProgramCache]: Analyzing trace with hash 388004718, now seen corresponding path program 2 times [2024-09-15 18:37:54,578 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:37:54,578 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [644870057] [2024-09-15 18:37:54,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:37:54,578 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:37:54,623 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:55,446 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:37:55,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:37:55,448 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 7 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-15 18:37:55,448 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:37:55,448 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [644870057] [2024-09-15 18:37:55,448 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [644870057] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:37:55,449 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [983218067] [2024-09-15 18:37:55,449 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-15 18:37:55,449 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:37:55,449 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:37:55,450 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:37:55,452 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-09-15 18:37:55,524 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-15 18:37:55,524 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:37:55,526 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 41 conjuncts are in the unsatisfiable core [2024-09-15 18:37:55,527 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:37:56,333 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:37:56,334 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 152 treesize of output 146 [2024-09-15 18:37:56,344 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:37:56,344 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 80 treesize of output 52 [2024-09-15 18:37:56,454 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-15 18:37:56,454 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:37:57,224 INFO L349 Elim1Store]: treesize reduction 58, result has 1.7 percent of original size [2024-09-15 18:37:57,225 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 188 treesize of output 1 [2024-09-15 18:37:57,228 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 11 proven. 2 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-15 18:37:57,228 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [983218067] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:37:57,228 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:37:57,228 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 12] total 36 [2024-09-15 18:37:57,228 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [72241005] [2024-09-15 18:37:57,228 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:37:57,229 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2024-09-15 18:37:57,229 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:37:57,229 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2024-09-15 18:37:57,230 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=200, Invalid=1060, Unknown=0, NotChecked=0, Total=1260 [2024-09-15 18:37:57,230 INFO L87 Difference]: Start difference. First operand 303 states and 408 transitions. Second operand has 36 states, 36 states have (on average 2.5) internal successors, (90), 36 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:13,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:38:13,271 INFO L93 Difference]: Finished difference Result 1764 states and 2442 transitions. [2024-09-15 18:38:13,271 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 203 states. [2024-09-15 18:38:13,272 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 2.5) internal successors, (90), 36 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-15 18:38:13,272 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:38:13,278 INFO L225 Difference]: With dead ends: 1764 [2024-09-15 18:38:13,279 INFO L226 Difference]: Without dead ends: 1570 [2024-09-15 18:38:13,292 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 318 GetRequests, 89 SyntacticMatches, 0 SemanticMatches, 229 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21105 ImplicationChecksByTransitivity, 13.9s TimeCoverageRelationStatistics Valid=6078, Invalid=47052, Unknown=0, NotChecked=0, Total=53130 [2024-09-15 18:38:13,293 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 1094 mSDsluCounter, 354 mSDsCounter, 0 mSdLazyCounter, 1305 mSolverCounterSat, 251 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1094 SdHoareTripleChecker+Valid, 384 SdHoareTripleChecker+Invalid, 1556 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 251 IncrementalHoareTripleChecker+Valid, 1305 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.7s IncrementalHoareTripleChecker+Time [2024-09-15 18:38:13,293 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [1094 Valid, 384 Invalid, 1556 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [251 Valid, 1305 Invalid, 0 Unknown, 0 Unchecked, 1.7s Time] [2024-09-15 18:38:13,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1570 states. [2024-09-15 18:38:13,816 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1570 to 860. [2024-09-15 18:38:13,818 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 860 states, 855 states have (on average 1.3719298245614036) internal successors, (1173), 855 states have internal predecessors, (1173), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:13,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 860 states to 860 states and 1177 transitions. [2024-09-15 18:38:13,823 INFO L78 Accepts]: Start accepts. Automaton has 860 states and 1177 transitions. Word has length 45 [2024-09-15 18:38:13,824 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:38:13,824 INFO L474 AbstractCegarLoop]: Abstraction has 860 states and 1177 transitions. [2024-09-15 18:38:13,824 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 2.5) internal successors, (90), 36 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:13,825 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:13,825 INFO L276 IsEmpty]: Start isEmpty. Operand 860 states and 1177 transitions. [2024-09-15 18:38:13,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-15 18:38:13,826 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:38:13,826 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:38:13,845 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Ended with exit code 0 [2024-09-15 18:38:14,030 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,12 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:38:14,031 INFO L399 AbstractCegarLoop]: === Iteration 14 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:38:14,031 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:14,031 INFO L85 PathProgramCache]: Analyzing trace with hash 1193665450, now seen corresponding path program 1 times [2024-09-15 18:38:14,031 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:38:14,031 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [836870942] [2024-09-15 18:38:14,031 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:38:14,031 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:38:14,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:14,924 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:38:14,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:14,928 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 7 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-15 18:38:14,928 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:38:14,929 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [836870942] [2024-09-15 18:38:14,929 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [836870942] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:38:14,929 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1525515579] [2024-09-15 18:38:14,929 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:38:14,929 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:38:14,929 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:38:14,931 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:38:14,932 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-09-15 18:38:15,020 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:15,022 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 48 conjuncts are in the unsatisfiable core [2024-09-15 18:38:15,026 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:38:15,553 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 19 [2024-09-15 18:38:15,556 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:38:15,557 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 11 [2024-09-15 18:38:15,577 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 13 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-15 18:38:15,577 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:38:16,370 INFO L349 Elim1Store]: treesize reduction 25, result has 32.4 percent of original size [2024-09-15 18:38:16,371 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 109 treesize of output 78 [2024-09-15 18:38:16,385 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:38:16,386 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 91 treesize of output 63 [2024-09-15 18:38:16,499 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-15 18:38:16,499 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1525515579] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:38:16,499 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:38:16,499 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 16, 15] total 38 [2024-09-15 18:38:16,500 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1310686711] [2024-09-15 18:38:16,500 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:38:16,500 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-15 18:38:16,500 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:38:16,501 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-15 18:38:16,501 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=289, Invalid=1117, Unknown=0, NotChecked=0, Total=1406 [2024-09-15 18:38:16,501 INFO L87 Difference]: Start difference. First operand 860 states and 1177 transitions. Second operand has 38 states, 38 states have (on average 2.3947368421052633) internal successors, (91), 38 states have internal predecessors, (91), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:19,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:38:19,815 INFO L93 Difference]: Finished difference Result 1736 states and 2337 transitions. [2024-09-15 18:38:19,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2024-09-15 18:38:19,816 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 2.3947368421052633) internal successors, (91), 38 states have internal predecessors, (91), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-15 18:38:19,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:38:19,823 INFO L225 Difference]: With dead ends: 1736 [2024-09-15 18:38:19,823 INFO L226 Difference]: Without dead ends: 1356 [2024-09-15 18:38:19,824 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 72 SyntacticMatches, 0 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1244 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=1257, Invalid=3855, Unknown=0, NotChecked=0, Total=5112 [2024-09-15 18:38:19,825 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 414 mSDsluCounter, 346 mSDsCounter, 0 mSdLazyCounter, 697 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 414 SdHoareTripleChecker+Valid, 374 SdHoareTripleChecker+Invalid, 757 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 697 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-15 18:38:19,825 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [414 Valid, 374 Invalid, 757 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 697 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-15 18:38:19,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1356 states. [2024-09-15 18:38:20,518 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1356 to 897. [2024-09-15 18:38:20,520 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 897 states, 892 states have (on average 1.3475336322869955) internal successors, (1202), 892 states have internal predecessors, (1202), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:20,525 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 897 states to 897 states and 1206 transitions. [2024-09-15 18:38:20,527 INFO L78 Accepts]: Start accepts. Automaton has 897 states and 1206 transitions. Word has length 45 [2024-09-15 18:38:20,527 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:38:20,527 INFO L474 AbstractCegarLoop]: Abstraction has 897 states and 1206 transitions. [2024-09-15 18:38:20,527 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 2.3947368421052633) internal successors, (91), 38 states have internal predecessors, (91), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:20,528 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:20,528 INFO L276 IsEmpty]: Start isEmpty. Operand 897 states and 1206 transitions. [2024-09-15 18:38:20,529 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-15 18:38:20,529 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:38:20,529 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:38:20,548 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2024-09-15 18:38:20,733 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2024-09-15 18:38:20,734 INFO L399 AbstractCegarLoop]: === Iteration 15 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:38:20,735 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:20,735 INFO L85 PathProgramCache]: Analyzing trace with hash 1115359342, now seen corresponding path program 2 times [2024-09-15 18:38:20,735 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:38:20,735 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1600897311] [2024-09-15 18:38:20,735 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:38:20,735 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:38:20,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:21,234 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:38:21,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:21,237 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 2 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-09-15 18:38:21,237 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:38:21,237 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1600897311] [2024-09-15 18:38:21,238 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1600897311] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:38:21,238 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [203533665] [2024-09-15 18:38:21,238 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-15 18:38:21,239 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:38:21,239 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:38:21,241 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:38:21,242 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2024-09-15 18:38:21,331 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-15 18:38:21,331 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:38:21,333 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 41 conjuncts are in the unsatisfiable core [2024-09-15 18:38:21,335 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:38:22,255 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:38:22,255 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 152 treesize of output 146 [2024-09-15 18:38:22,263 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:38:22,264 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 80 treesize of output 52 [2024-09-15 18:38:22,569 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-15 18:38:22,569 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:38:23,495 INFO L349 Elim1Store]: treesize reduction 58, result has 1.7 percent of original size [2024-09-15 18:38:23,495 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 147 treesize of output 1 [2024-09-15 18:38:23,499 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 11 proven. 2 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-15 18:38:23,499 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [203533665] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:38:23,499 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:38:23,499 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 15, 12] total 29 [2024-09-15 18:38:23,500 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1651975326] [2024-09-15 18:38:23,500 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:38:23,500 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2024-09-15 18:38:23,500 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:38:23,501 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2024-09-15 18:38:23,501 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=177, Invalid=635, Unknown=0, NotChecked=0, Total=812 [2024-09-15 18:38:23,501 INFO L87 Difference]: Start difference. First operand 897 states and 1206 transitions. Second operand has 29 states, 29 states have (on average 3.0) internal successors, (87), 29 states have internal predecessors, (87), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:28,492 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:38:28,493 INFO L93 Difference]: Finished difference Result 2244 states and 3053 transitions. [2024-09-15 18:38:28,493 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 60 states. [2024-09-15 18:38:28,493 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 3.0) internal successors, (87), 29 states have internal predecessors, (87), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-15 18:38:28,493 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:38:28,501 INFO L225 Difference]: With dead ends: 2244 [2024-09-15 18:38:28,502 INFO L226 Difference]: Without dead ends: 1805 [2024-09-15 18:38:28,505 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 75 SyntacticMatches, 0 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1743 ImplicationChecksByTransitivity, 3.0s TimeCoverageRelationStatistics Valid=1242, Invalid=5078, Unknown=0, NotChecked=0, Total=6320 [2024-09-15 18:38:28,506 INFO L434 NwaCegarLoop]: 33 mSDtfsCounter, 285 mSDsluCounter, 280 mSDsCounter, 0 mSdLazyCounter, 736 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 285 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 785 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 736 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-09-15 18:38:28,506 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [285 Valid, 313 Invalid, 785 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 736 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-09-15 18:38:28,508 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1805 states. [2024-09-15 18:38:29,239 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1805 to 950. [2024-09-15 18:38:29,241 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 950 states, 945 states have (on average 1.3227513227513228) internal successors, (1250), 945 states have internal predecessors, (1250), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:29,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 950 states to 950 states and 1254 transitions. [2024-09-15 18:38:29,247 INFO L78 Accepts]: Start accepts. Automaton has 950 states and 1254 transitions. Word has length 45 [2024-09-15 18:38:29,247 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:38:29,247 INFO L474 AbstractCegarLoop]: Abstraction has 950 states and 1254 transitions. [2024-09-15 18:38:29,247 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 3.0) internal successors, (87), 29 states have internal predecessors, (87), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:29,248 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:29,248 INFO L276 IsEmpty]: Start isEmpty. Operand 950 states and 1254 transitions. [2024-09-15 18:38:29,251 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-15 18:38:29,251 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:38:29,251 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:38:29,269 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Forceful destruction successful, exit code 0 [2024-09-15 18:38:29,451 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2024-09-15 18:38:29,452 INFO L399 AbstractCegarLoop]: === Iteration 16 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:38:29,452 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:29,452 INFO L85 PathProgramCache]: Analyzing trace with hash 941187050, now seen corresponding path program 1 times [2024-09-15 18:38:29,452 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:38:29,452 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [185216080] [2024-09-15 18:38:29,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:38:29,452 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:38:29,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:30,114 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:38:30,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:30,116 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 5 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-09-15 18:38:30,116 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:38:30,116 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [185216080] [2024-09-15 18:38:30,116 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [185216080] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:38:30,117 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [628246233] [2024-09-15 18:38:30,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:38:30,117 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:38:30,117 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:38:30,119 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:38:30,120 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2024-09-15 18:38:30,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:30,195 INFO L262 TraceCheckSpWp]: Trace formula consists of 212 conjuncts, 37 conjuncts are in the unsatisfiable core [2024-09-15 18:38:30,196 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:38:30,378 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 12 [2024-09-15 18:38:30,380 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-15 18:38:30,391 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 9 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-09-15 18:38:30,391 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:38:30,624 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:38:30,624 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 22 [2024-09-15 18:38:30,632 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:38:30,632 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 53 treesize of output 42 [2024-09-15 18:38:30,699 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 8 proven. 3 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2024-09-15 18:38:30,700 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [628246233] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:38:30,700 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:38:30,700 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 13] total 27 [2024-09-15 18:38:30,700 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1792033224] [2024-09-15 18:38:30,700 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:38:30,701 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2024-09-15 18:38:30,701 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:38:30,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2024-09-15 18:38:30,702 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=552, Unknown=0, NotChecked=0, Total=702 [2024-09-15 18:38:30,702 INFO L87 Difference]: Start difference. First operand 950 states and 1254 transitions. Second operand has 27 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 27 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:32,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:38:32,067 INFO L93 Difference]: Finished difference Result 1709 states and 2245 transitions. [2024-09-15 18:38:32,067 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-15 18:38:32,067 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 27 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-15 18:38:32,067 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:38:32,072 INFO L225 Difference]: With dead ends: 1709 [2024-09-15 18:38:32,072 INFO L226 Difference]: Without dead ends: 1240 [2024-09-15 18:38:32,074 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 381 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=330, Invalid=1076, Unknown=0, NotChecked=0, Total=1406 [2024-09-15 18:38:32,074 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 164 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 362 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 379 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 362 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-15 18:38:32,074 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [164 Valid, 208 Invalid, 379 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 362 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-15 18:38:32,075 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1240 states. [2024-09-15 18:38:32,623 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1240 to 895. [2024-09-15 18:38:32,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 895 states, 890 states have (on average 1.3022471910112359) internal successors, (1159), 890 states have internal predecessors, (1159), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:32,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 895 states to 895 states and 1163 transitions. [2024-09-15 18:38:32,628 INFO L78 Accepts]: Start accepts. Automaton has 895 states and 1163 transitions. Word has length 45 [2024-09-15 18:38:32,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:38:32,628 INFO L474 AbstractCegarLoop]: Abstraction has 895 states and 1163 transitions. [2024-09-15 18:38:32,629 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 27 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:32,629 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:32,629 INFO L276 IsEmpty]: Start isEmpty. Operand 895 states and 1163 transitions. [2024-09-15 18:38:32,630 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2024-09-15 18:38:32,630 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:38:32,631 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:38:32,643 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2024-09-15 18:38:32,834 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2024-09-15 18:38:32,835 INFO L399 AbstractCegarLoop]: === Iteration 17 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:38:32,835 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:32,835 INFO L85 PathProgramCache]: Analyzing trace with hash -128402447, now seen corresponding path program 1 times [2024-09-15 18:38:32,835 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:38:32,835 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1058221100] [2024-09-15 18:38:32,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:38:32,836 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:38:32,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:32,962 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:38:32,963 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:32,964 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 20 proven. 3 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2024-09-15 18:38:32,964 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:38:32,964 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1058221100] [2024-09-15 18:38:32,964 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1058221100] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:38:32,964 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [856623704] [2024-09-15 18:38:32,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:38:32,964 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:38:32,964 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:38:32,966 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:38:32,967 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2024-09-15 18:38:33,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:33,042 INFO L262 TraceCheckSpWp]: Trace formula consists of 244 conjuncts, 51 conjuncts are in the unsatisfiable core [2024-09-15 18:38:33,044 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:38:33,390 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-15 18:38:33,478 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:38:33,478 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 27 treesize of output 11 [2024-09-15 18:38:33,492 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 0 proven. 45 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-15 18:38:33,492 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:38:33,892 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:38:33,892 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 67 treesize of output 57 [2024-09-15 18:38:34,231 INFO L349 Elim1Store]: treesize reduction 10, result has 52.4 percent of original size [2024-09-15 18:38:34,231 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 57 treesize of output 40 [2024-09-15 18:38:34,265 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 5 proven. 26 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-09-15 18:38:34,265 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [856623704] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:38:34,266 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:38:34,266 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 21, 16] total 38 [2024-09-15 18:38:34,266 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2095954631] [2024-09-15 18:38:34,266 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:38:34,266 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-15 18:38:34,266 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:38:34,267 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-15 18:38:34,267 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=194, Invalid=1212, Unknown=0, NotChecked=0, Total=1406 [2024-09-15 18:38:34,267 INFO L87 Difference]: Start difference. First operand 895 states and 1163 transitions. Second operand has 38 states, 38 states have (on average 3.026315789473684) internal successors, (115), 38 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:36,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:38:36,988 INFO L93 Difference]: Finished difference Result 2463 states and 3266 transitions. [2024-09-15 18:38:36,988 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2024-09-15 18:38:36,989 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 3.026315789473684) internal successors, (115), 38 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 54 [2024-09-15 18:38:36,989 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:38:36,996 INFO L225 Difference]: With dead ends: 2463 [2024-09-15 18:38:36,996 INFO L226 Difference]: Without dead ends: 2181 [2024-09-15 18:38:36,997 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 831 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=559, Invalid=3101, Unknown=0, NotChecked=0, Total=3660 [2024-09-15 18:38:36,997 INFO L434 NwaCegarLoop]: 46 mSDtfsCounter, 312 mSDsluCounter, 622 mSDsCounter, 0 mSdLazyCounter, 1046 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 668 SdHoareTripleChecker+Invalid, 1065 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 1046 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-15 18:38:36,998 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [312 Valid, 668 Invalid, 1065 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 1046 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-15 18:38:36,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2181 states. [2024-09-15 18:38:37,740 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2181 to 934. [2024-09-15 18:38:37,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 934 states, 929 states have (on average 1.3110871905274488) internal successors, (1218), 929 states have internal predecessors, (1218), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:37,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 934 states to 934 states and 1222 transitions. [2024-09-15 18:38:37,746 INFO L78 Accepts]: Start accepts. Automaton has 934 states and 1222 transitions. Word has length 54 [2024-09-15 18:38:37,746 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:38:37,746 INFO L474 AbstractCegarLoop]: Abstraction has 934 states and 1222 transitions. [2024-09-15 18:38:37,746 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 3.026315789473684) internal successors, (115), 38 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:37,747 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:37,747 INFO L276 IsEmpty]: Start isEmpty. Operand 934 states and 1222 transitions. [2024-09-15 18:38:37,748 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-09-15 18:38:37,748 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:38:37,748 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:38:37,761 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Ended with exit code 0 [2024-09-15 18:38:37,952 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2024-09-15 18:38:37,953 INFO L399 AbstractCegarLoop]: === Iteration 18 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:38:37,953 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:37,953 INFO L85 PathProgramCache]: Analyzing trace with hash -1628474760, now seen corresponding path program 2 times [2024-09-15 18:38:37,953 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:38:37,953 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1360406835] [2024-09-15 18:38:37,954 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:38:37,954 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:38:37,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:38,386 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:38:38,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:38,389 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 23 proven. 4 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-15 18:38:38,389 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:38:38,389 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1360406835] [2024-09-15 18:38:38,389 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1360406835] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:38:38,389 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1418777613] [2024-09-15 18:38:38,390 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-15 18:38:38,390 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:38:38,390 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:38:38,393 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:38:38,395 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2024-09-15 18:38:38,482 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-15 18:38:38,483 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:38:38,485 INFO L262 TraceCheckSpWp]: Trace formula consists of 246 conjuncts, 72 conjuncts are in the unsatisfiable core [2024-09-15 18:38:38,487 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:38:39,500 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-15 18:38:39,542 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 20 proven. 29 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2024-09-15 18:38:39,543 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:38:40,305 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:38:40,306 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 65 treesize of output 50 [2024-09-15 18:38:40,612 INFO L349 Elim1Store]: treesize reduction 10, result has 52.4 percent of original size [2024-09-15 18:38:40,613 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 57 treesize of output 40 [2024-09-15 18:38:40,656 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 32 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-15 18:38:40,656 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1418777613] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:38:40,657 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:38:40,657 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 25, 26] total 59 [2024-09-15 18:38:40,657 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [916303197] [2024-09-15 18:38:40,657 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:38:40,657 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2024-09-15 18:38:40,657 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:38:40,658 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2024-09-15 18:38:40,658 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=519, Invalid=2903, Unknown=0, NotChecked=0, Total=3422 [2024-09-15 18:38:40,659 INFO L87 Difference]: Start difference. First operand 934 states and 1222 transitions. Second operand has 59 states, 59 states have (on average 1.9491525423728813) internal successors, (115), 59 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:44,812 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:38:44,812 INFO L93 Difference]: Finished difference Result 1706 states and 2261 transitions. [2024-09-15 18:38:44,813 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2024-09-15 18:38:44,813 INFO L78 Accepts]: Start accepts. Automaton has has 59 states, 59 states have (on average 1.9491525423728813) internal successors, (115), 59 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 55 [2024-09-15 18:38:44,813 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:38:44,820 INFO L225 Difference]: With dead ends: 1706 [2024-09-15 18:38:44,821 INFO L226 Difference]: Without dead ends: 1569 [2024-09-15 18:38:44,822 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 68 SyntacticMatches, 0 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3225 ImplicationChecksByTransitivity, 3.0s TimeCoverageRelationStatistics Valid=1851, Invalid=8249, Unknown=0, NotChecked=0, Total=10100 [2024-09-15 18:38:44,823 INFO L434 NwaCegarLoop]: 38 mSDtfsCounter, 845 mSDsluCounter, 607 mSDsCounter, 0 mSdLazyCounter, 1366 mSolverCounterSat, 103 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 845 SdHoareTripleChecker+Valid, 645 SdHoareTripleChecker+Invalid, 1469 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 103 IncrementalHoareTripleChecker+Valid, 1366 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2024-09-15 18:38:44,824 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [845 Valid, 645 Invalid, 1469 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [103 Valid, 1366 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2024-09-15 18:38:44,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1569 states. [2024-09-15 18:38:45,823 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1569 to 906. [2024-09-15 18:38:45,828 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 901 states have (on average 1.3152053274139845) internal successors, (1185), 901 states have internal predecessors, (1185), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:45,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1189 transitions. [2024-09-15 18:38:45,843 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1189 transitions. Word has length 55 [2024-09-15 18:38:45,844 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:38:45,844 INFO L474 AbstractCegarLoop]: Abstraction has 906 states and 1189 transitions. [2024-09-15 18:38:45,844 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 59 states, 59 states have (on average 1.9491525423728813) internal successors, (115), 59 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:45,844 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:45,845 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1189 transitions. [2024-09-15 18:38:45,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2024-09-15 18:38:45,847 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:38:45,847 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:38:45,877 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Forceful destruction successful, exit code 0 [2024-09-15 18:38:46,047 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17,17 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:38:46,048 INFO L399 AbstractCegarLoop]: === Iteration 19 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:38:46,048 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:46,048 INFO L85 PathProgramCache]: Analyzing trace with hash -885254672, now seen corresponding path program 3 times [2024-09-15 18:38:46,048 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:38:46,048 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [231947854] [2024-09-15 18:38:46,049 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:38:46,049 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:38:46,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:47,100 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:38:47,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:47,107 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-15 18:38:47,107 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:38:47,107 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [231947854] [2024-09-15 18:38:47,108 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [231947854] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:38:47,108 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1057470534] [2024-09-15 18:38:47,108 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-15 18:38:47,108 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:38:47,108 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:38:47,110 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:38:47,115 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2024-09-15 18:38:47,212 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2024-09-15 18:38:47,213 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:38:47,214 INFO L262 TraceCheckSpWp]: Trace formula consists of 194 conjuncts, 24 conjuncts are in the unsatisfiable core [2024-09-15 18:38:47,216 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:38:47,395 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-15 18:38:47,397 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 0 proven. 17 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2024-09-15 18:38:47,397 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:38:47,618 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-15 18:38:47,619 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 49 treesize of output 31 [2024-09-15 18:38:47,655 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 1 proven. 7 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-15 18:38:47,655 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1057470534] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:38:47,655 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:38:47,655 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 12, 9] total 21 [2024-09-15 18:38:47,656 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1710607475] [2024-09-15 18:38:47,656 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:38:47,656 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-15 18:38:47,656 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:38:47,657 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-15 18:38:47,657 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=343, Unknown=0, NotChecked=0, Total=420 [2024-09-15 18:38:47,657 INFO L87 Difference]: Start difference. First operand 906 states and 1189 transitions. Second operand has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:49,177 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:38:49,177 INFO L93 Difference]: Finished difference Result 1290 states and 1726 transitions. [2024-09-15 18:38:49,178 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-09-15 18:38:49,178 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 56 [2024-09-15 18:38:49,178 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:38:49,184 INFO L225 Difference]: With dead ends: 1290 [2024-09-15 18:38:49,184 INFO L226 Difference]: Without dead ends: 1285 [2024-09-15 18:38:49,185 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 125 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 126 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=97, Invalid=409, Unknown=0, NotChecked=0, Total=506 [2024-09-15 18:38:49,186 INFO L434 NwaCegarLoop]: 33 mSDtfsCounter, 84 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 290 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 337 SdHoareTripleChecker+Invalid, 295 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 290 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-15 18:38:49,186 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 337 Invalid, 295 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 290 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-15 18:38:49,187 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1285 states. [2024-09-15 18:38:49,972 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1285 to 798. [2024-09-15 18:38:49,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 798 states, 793 states have (on average 1.305170239596469) internal successors, (1035), 793 states have internal predecessors, (1035), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:49,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 798 states to 798 states and 1039 transitions. [2024-09-15 18:38:49,977 INFO L78 Accepts]: Start accepts. Automaton has 798 states and 1039 transitions. Word has length 56 [2024-09-15 18:38:49,978 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:38:49,978 INFO L474 AbstractCegarLoop]: Abstraction has 798 states and 1039 transitions. [2024-09-15 18:38:49,978 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:49,978 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:49,978 INFO L276 IsEmpty]: Start isEmpty. Operand 798 states and 1039 transitions. [2024-09-15 18:38:49,981 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-15 18:38:49,981 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:38:49,981 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:38:50,004 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Ended with exit code 0 [2024-09-15 18:38:50,182 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,18 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:38:50,183 INFO L399 AbstractCegarLoop]: === Iteration 20 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:38:50,183 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:38:50,183 INFO L85 PathProgramCache]: Analyzing trace with hash 1141037310, now seen corresponding path program 4 times [2024-09-15 18:38:50,184 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:38:50,184 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1548027984] [2024-09-15 18:38:50,184 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:38:50,184 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:38:50,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:51,071 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:38:51,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:38:51,076 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 14 proven. 11 refuted. 0 times theorem prover too weak. 61 trivial. 0 not checked. [2024-09-15 18:38:51,076 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:38:51,076 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1548027984] [2024-09-15 18:38:51,076 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1548027984] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:38:51,076 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2118739912] [2024-09-15 18:38:51,077 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-15 18:38:51,077 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:38:51,077 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:38:51,079 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:38:51,080 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2024-09-15 18:38:51,189 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-15 18:38:51,189 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:38:51,192 INFO L262 TraceCheckSpWp]: Trace formula consists of 285 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-15 18:38:51,194 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:38:52,063 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:38:52,065 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 152 treesize of output 146 [2024-09-15 18:38:52,078 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:38:52,078 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 80 treesize of output 52 [2024-09-15 18:38:52,512 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 19 proven. 17 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2024-09-15 18:38:52,512 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:38:53,383 INFO L349 Elim1Store]: treesize reduction 58, result has 1.7 percent of original size [2024-09-15 18:38:53,383 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 188 treesize of output 1 [2024-09-15 18:38:53,387 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 22 proven. 14 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2024-09-15 18:38:53,388 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2118739912] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:38:53,388 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:38:53,388 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 15, 13] total 31 [2024-09-15 18:38:53,388 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [634298759] [2024-09-15 18:38:53,388 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:38:53,389 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2024-09-15 18:38:53,389 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:38:53,389 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2024-09-15 18:38:53,390 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2024-09-15 18:38:53,390 INFO L87 Difference]: Start difference. First operand 798 states and 1039 transitions. Second operand has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:38:58,047 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-15 18:39:00,274 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:39:00,274 INFO L93 Difference]: Finished difference Result 1627 states and 2117 transitions. [2024-09-15 18:39:00,275 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2024-09-15 18:39:00,275 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-15 18:39:00,275 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:39:00,280 INFO L225 Difference]: With dead ends: 1627 [2024-09-15 18:39:00,281 INFO L226 Difference]: Without dead ends: 1001 [2024-09-15 18:39:00,285 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 761 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=700, Invalid=2606, Unknown=0, NotChecked=0, Total=3306 [2024-09-15 18:39:00,285 INFO L434 NwaCegarLoop]: 27 mSDtfsCounter, 350 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 349 mSolverCounterSat, 77 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 231 SdHoareTripleChecker+Invalid, 427 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 349 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.5s IncrementalHoareTripleChecker+Time [2024-09-15 18:39:00,285 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [350 Valid, 231 Invalid, 427 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 349 Invalid, 1 Unknown, 0 Unchecked, 4.5s Time] [2024-09-15 18:39:00,287 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1001 states. [2024-09-15 18:39:00,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1001 to 597. [2024-09-15 18:39:00,905 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 597 states, 592 states have (on average 1.2635135135135136) internal successors, (748), 592 states have internal predecessors, (748), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:00,906 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 597 states to 597 states and 752 transitions. [2024-09-15 18:39:00,908 INFO L78 Accepts]: Start accepts. Automaton has 597 states and 752 transitions. Word has length 66 [2024-09-15 18:39:00,908 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:39:00,908 INFO L474 AbstractCegarLoop]: Abstraction has 597 states and 752 transitions. [2024-09-15 18:39:00,908 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:00,909 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:39:00,909 INFO L276 IsEmpty]: Start isEmpty. Operand 597 states and 752 transitions. [2024-09-15 18:39:00,910 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-15 18:39:00,910 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:39:00,910 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:39:00,927 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Ended with exit code 0 [2024-09-15 18:39:01,111 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,19 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:39:01,111 INFO L399 AbstractCegarLoop]: === Iteration 21 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:39:01,111 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:39:01,111 INFO L85 PathProgramCache]: Analyzing trace with hash 828990910, now seen corresponding path program 5 times [2024-09-15 18:39:01,111 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:39:01,112 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1929780379] [2024-09-15 18:39:01,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:39:01,112 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:39:01,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:39:02,686 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:39:02,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:39:02,689 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 38 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2024-09-15 18:39:02,690 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:39:02,690 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1929780379] [2024-09-15 18:39:02,690 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1929780379] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:39:02,690 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [139482150] [2024-09-15 18:39:02,690 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-15 18:39:02,690 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:39:02,690 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:39:02,692 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:39:02,696 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2024-09-15 18:39:03,164 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 6 check-sat command(s) [2024-09-15 18:39:03,165 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:39:03,174 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 68 conjuncts are in the unsatisfiable core [2024-09-15 18:39:03,177 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:39:03,237 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 48 treesize of output 35 [2024-09-15 18:39:03,242 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 1 [2024-09-15 18:39:03,941 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:39:03,941 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 30 treesize of output 18 [2024-09-15 18:39:03,943 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-15 18:39:03,961 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 52 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-09-15 18:39:03,961 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:39:05,055 INFO L349 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2024-09-15 18:39:05,056 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 134 treesize of output 106 [2024-09-15 18:39:05,276 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 42 proven. 17 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2024-09-15 18:39:05,277 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [139482150] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:39:05,277 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:39:05,277 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 21, 19] total 51 [2024-09-15 18:39:05,277 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1256865793] [2024-09-15 18:39:05,277 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:39:05,278 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2024-09-15 18:39:05,278 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:39:05,278 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2024-09-15 18:39:05,279 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=438, Invalid=2112, Unknown=0, NotChecked=0, Total=2550 [2024-09-15 18:39:05,279 INFO L87 Difference]: Start difference. First operand 597 states and 752 transitions. Second operand has 51 states, 51 states have (on average 2.607843137254902) internal successors, (133), 51 states have internal predecessors, (133), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:17,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:39:17,805 INFO L93 Difference]: Finished difference Result 3262 states and 4292 transitions. [2024-09-15 18:39:17,805 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 129 states. [2024-09-15 18:39:17,806 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 51 states have (on average 2.607843137254902) internal successors, (133), 51 states have internal predecessors, (133), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-15 18:39:17,806 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:39:17,815 INFO L225 Difference]: With dead ends: 3262 [2024-09-15 18:39:17,816 INFO L226 Difference]: Without dead ends: 2834 [2024-09-15 18:39:17,819 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 155 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9362 ImplicationChecksByTransitivity, 9.1s TimeCoverageRelationStatistics Valid=4057, Invalid=20435, Unknown=0, NotChecked=0, Total=24492 [2024-09-15 18:39:17,819 INFO L434 NwaCegarLoop]: 43 mSDtfsCounter, 620 mSDsluCounter, 795 mSDsCounter, 0 mSdLazyCounter, 1615 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 620 SdHoareTripleChecker+Valid, 838 SdHoareTripleChecker+Invalid, 1680 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 1615 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2024-09-15 18:39:17,819 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [620 Valid, 838 Invalid, 1680 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 1615 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2024-09-15 18:39:17,821 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2834 states. [2024-09-15 18:39:19,318 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2834 to 1400. [2024-09-15 18:39:19,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1400 states, 1395 states have (on average 1.2967741935483872) internal successors, (1809), 1395 states have internal predecessors, (1809), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:19,323 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1400 states to 1400 states and 1813 transitions. [2024-09-15 18:39:19,328 INFO L78 Accepts]: Start accepts. Automaton has 1400 states and 1813 transitions. Word has length 66 [2024-09-15 18:39:19,329 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:39:19,329 INFO L474 AbstractCegarLoop]: Abstraction has 1400 states and 1813 transitions. [2024-09-15 18:39:19,329 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 51 states have (on average 2.607843137254902) internal successors, (133), 51 states have internal predecessors, (133), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:19,330 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:39:19,330 INFO L276 IsEmpty]: Start isEmpty. Operand 1400 states and 1813 transitions. [2024-09-15 18:39:19,333 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-15 18:39:19,333 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:39:19,333 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:39:19,353 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2024-09-15 18:39:19,535 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2024-09-15 18:39:19,535 INFO L399 AbstractCegarLoop]: === Iteration 22 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:39:19,536 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:39:19,536 INFO L85 PathProgramCache]: Analyzing trace with hash -289774206, now seen corresponding path program 6 times [2024-09-15 18:39:19,536 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:39:19,536 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2075887785] [2024-09-15 18:39:19,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:39:19,536 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:39:19,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:39:20,957 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:39:20,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:39:20,963 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 48 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2024-09-15 18:39:20,964 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:39:20,964 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2075887785] [2024-09-15 18:39:20,964 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2075887785] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:39:20,964 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [229833285] [2024-09-15 18:39:20,964 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-09-15 18:39:20,964 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:39:20,964 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:39:20,965 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:39:20,967 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2024-09-15 18:39:21,197 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 6 check-sat command(s) [2024-09-15 18:39:21,197 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:39:21,203 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-15 18:39:21,205 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:39:21,852 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 52 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-15 18:39:21,852 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:39:22,233 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:39:22,233 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 70 treesize of output 57 [2024-09-15 18:39:22,479 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 17 proven. 43 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-15 18:39:22,479 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [229833285] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:39:22,480 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:39:22,480 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 16, 15] total 48 [2024-09-15 18:39:22,480 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [273717868] [2024-09-15 18:39:22,480 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:39:22,481 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2024-09-15 18:39:22,481 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:39:22,482 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2024-09-15 18:39:22,482 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=293, Invalid=1963, Unknown=0, NotChecked=0, Total=2256 [2024-09-15 18:39:22,482 INFO L87 Difference]: Start difference. First operand 1400 states and 1813 transitions. Second operand has 48 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 48 states have internal predecessors, (143), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:26,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:39:26,772 INFO L93 Difference]: Finished difference Result 3221 states and 4159 transitions. [2024-09-15 18:39:26,773 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2024-09-15 18:39:26,773 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 48 states have internal predecessors, (143), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-15 18:39:26,773 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:39:26,780 INFO L225 Difference]: With dead ends: 3221 [2024-09-15 18:39:26,781 INFO L226 Difference]: Without dead ends: 1979 [2024-09-15 18:39:26,783 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 196 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1981 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=935, Invalid=6037, Unknown=0, NotChecked=0, Total=6972 [2024-09-15 18:39:26,784 INFO L434 NwaCegarLoop]: 41 mSDtfsCounter, 226 mSDsluCounter, 741 mSDsCounter, 0 mSdLazyCounter, 1615 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 782 SdHoareTripleChecker+Invalid, 1680 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 1615 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.9s IncrementalHoareTripleChecker+Time [2024-09-15 18:39:26,784 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [226 Valid, 782 Invalid, 1680 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 1615 Invalid, 0 Unknown, 0 Unchecked, 0.9s Time] [2024-09-15 18:39:26,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1979 states. [2024-09-15 18:39:28,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1979 to 1482. [2024-09-15 18:39:28,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1482 states, 1477 states have (on average 1.2538930264048747) internal successors, (1852), 1477 states have internal predecessors, (1852), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:28,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1482 states to 1482 states and 1856 transitions. [2024-09-15 18:39:28,217 INFO L78 Accepts]: Start accepts. Automaton has 1482 states and 1856 transitions. Word has length 66 [2024-09-15 18:39:28,217 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:39:28,217 INFO L474 AbstractCegarLoop]: Abstraction has 1482 states and 1856 transitions. [2024-09-15 18:39:28,217 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 48 states have internal predecessors, (143), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:28,217 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:39:28,217 INFO L276 IsEmpty]: Start isEmpty. Operand 1482 states and 1856 transitions. [2024-09-15 18:39:28,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-15 18:39:28,219 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:39:28,220 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:39:28,235 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Ended with exit code 0 [2024-09-15 18:39:28,420 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2024-09-15 18:39:28,421 INFO L399 AbstractCegarLoop]: === Iteration 23 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:39:28,421 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:39:28,421 INFO L85 PathProgramCache]: Analyzing trace with hash 571791422, now seen corresponding path program 7 times [2024-09-15 18:39:28,422 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:39:28,422 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2059391992] [2024-09-15 18:39:28,422 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:39:28,422 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:39:28,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:39:29,456 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:39:29,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:39:29,458 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 38 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2024-09-15 18:39:29,458 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:39:29,458 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2059391992] [2024-09-15 18:39:29,458 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2059391992] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:39:29,458 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [204308701] [2024-09-15 18:39:29,458 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-09-15 18:39:29,459 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:39:29,459 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:39:29,460 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:39:29,461 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2024-09-15 18:39:29,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:39:29,554 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-15 18:39:29,556 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:39:29,855 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 12 [2024-09-15 18:39:29,860 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-15 18:39:29,870 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 45 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-15 18:39:29,871 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:39:30,137 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:39:30,137 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 24 [2024-09-15 18:39:30,145 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:39:30,146 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 55 treesize of output 42 [2024-09-15 18:39:30,295 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 26 proven. 30 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-15 18:39:30,296 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [204308701] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:39:30,296 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:39:30,296 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 15, 14] total 38 [2024-09-15 18:39:30,298 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1127170259] [2024-09-15 18:39:30,298 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:39:30,299 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-15 18:39:30,299 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:39:30,300 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-15 18:39:30,300 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1198, Unknown=0, NotChecked=0, Total=1406 [2024-09-15 18:39:30,300 INFO L87 Difference]: Start difference. First operand 1482 states and 1856 transitions. Second operand has 38 states, 38 states have (on average 3.210526315789474) internal successors, (122), 38 states have internal predecessors, (122), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:33,501 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:39:33,502 INFO L93 Difference]: Finished difference Result 3078 states and 3847 transitions. [2024-09-15 18:39:33,502 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2024-09-15 18:39:33,502 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 3.210526315789474) internal successors, (122), 38 states have internal predecessors, (122), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-15 18:39:33,503 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:39:33,509 INFO L225 Difference]: With dead ends: 3078 [2024-09-15 18:39:33,509 INFO L226 Difference]: Without dead ends: 1806 [2024-09-15 18:39:33,512 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 191 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1436 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=728, Invalid=4384, Unknown=0, NotChecked=0, Total=5112 [2024-09-15 18:39:33,515 INFO L434 NwaCegarLoop]: 38 mSDtfsCounter, 220 mSDsluCounter, 547 mSDsCounter, 0 mSdLazyCounter, 1179 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 220 SdHoareTripleChecker+Valid, 585 SdHoareTripleChecker+Invalid, 1218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 1179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-15 18:39:33,516 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [220 Valid, 585 Invalid, 1218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 1179 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-15 18:39:33,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1806 states. [2024-09-15 18:39:35,069 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1806 to 1573. [2024-09-15 18:39:35,071 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1573 states, 1568 states have (on average 1.219387755102041) internal successors, (1912), 1568 states have internal predecessors, (1912), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:35,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1573 states to 1573 states and 1916 transitions. [2024-09-15 18:39:35,076 INFO L78 Accepts]: Start accepts. Automaton has 1573 states and 1916 transitions. Word has length 66 [2024-09-15 18:39:35,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:39:35,076 INFO L474 AbstractCegarLoop]: Abstraction has 1573 states and 1916 transitions. [2024-09-15 18:39:35,076 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 3.210526315789474) internal successors, (122), 38 states have internal predecessors, (122), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:35,076 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:39:35,077 INFO L276 IsEmpty]: Start isEmpty. Operand 1573 states and 1916 transitions. [2024-09-15 18:39:35,079 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-15 18:39:35,079 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:39:35,079 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:39:35,094 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Ended with exit code 0 [2024-09-15 18:39:35,279 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22,22 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:39:35,280 INFO L399 AbstractCegarLoop]: === Iteration 24 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:39:35,280 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:39:35,280 INFO L85 PathProgramCache]: Analyzing trace with hash 378012418, now seen corresponding path program 8 times [2024-09-15 18:39:35,281 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:39:35,281 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2060321529] [2024-09-15 18:39:35,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:39:35,281 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:39:35,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:39:36,633 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:39:36,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:39:36,636 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 48 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2024-09-15 18:39:36,636 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:39:36,636 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2060321529] [2024-09-15 18:39:36,636 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2060321529] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:39:36,636 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1131109777] [2024-09-15 18:39:36,636 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-15 18:39:36,636 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:39:36,636 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:39:36,638 INFO L229 MonitoredProcess]: Starting monitored process 23 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:39:36,638 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2024-09-15 18:39:36,730 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-15 18:39:36,730 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:39:36,736 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 61 conjuncts are in the unsatisfiable core [2024-09-15 18:39:36,742 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:39:37,227 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 12 [2024-09-15 18:39:37,229 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-15 18:39:37,242 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 62 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-09-15 18:39:37,242 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:39:37,673 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:39:37,674 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 24 [2024-09-15 18:39:38,083 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 21 proven. 44 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-15 18:39:38,083 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1131109777] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:39:38,083 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:39:38,084 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 17] total 47 [2024-09-15 18:39:38,084 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1472450084] [2024-09-15 18:39:38,084 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:39:38,084 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2024-09-15 18:39:38,084 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:39:38,085 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2024-09-15 18:39:38,085 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=289, Invalid=1873, Unknown=0, NotChecked=0, Total=2162 [2024-09-15 18:39:38,085 INFO L87 Difference]: Start difference. First operand 1573 states and 1916 transitions. Second operand has 47 states, 47 states have (on average 2.9361702127659575) internal successors, (138), 47 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:41,548 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:39:41,548 INFO L93 Difference]: Finished difference Result 1935 states and 2345 transitions. [2024-09-15 18:39:41,549 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2024-09-15 18:39:41,550 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 2.9361702127659575) internal successors, (138), 47 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-15 18:39:41,550 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:39:41,556 INFO L225 Difference]: With dead ends: 1935 [2024-09-15 18:39:41,556 INFO L226 Difference]: Without dead ends: 1664 [2024-09-15 18:39:41,557 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1711 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=817, Invalid=5035, Unknown=0, NotChecked=0, Total=5852 [2024-09-15 18:39:41,558 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 293 mSDsluCounter, 568 mSDsCounter, 0 mSdLazyCounter, 1144 mSolverCounterSat, 108 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 293 SdHoareTripleChecker+Valid, 600 SdHoareTripleChecker+Invalid, 1252 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 108 IncrementalHoareTripleChecker+Valid, 1144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-15 18:39:41,558 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [293 Valid, 600 Invalid, 1252 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [108 Valid, 1144 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-15 18:39:41,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1664 states. [2024-09-15 18:39:42,967 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1664 to 1528. [2024-09-15 18:39:42,969 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1528 states, 1523 states have (on average 1.2147078135259357) internal successors, (1850), 1523 states have internal predecessors, (1850), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:42,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1528 states to 1528 states and 1854 transitions. [2024-09-15 18:39:42,978 INFO L78 Accepts]: Start accepts. Automaton has 1528 states and 1854 transitions. Word has length 66 [2024-09-15 18:39:42,978 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:39:42,978 INFO L474 AbstractCegarLoop]: Abstraction has 1528 states and 1854 transitions. [2024-09-15 18:39:42,979 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 2.9361702127659575) internal successors, (138), 47 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:39:42,979 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:39:42,979 INFO L276 IsEmpty]: Start isEmpty. Operand 1528 states and 1854 transitions. [2024-09-15 18:39:42,984 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-15 18:39:42,984 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:39:42,984 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:39:43,001 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Ended with exit code 0 [2024-09-15 18:39:43,185 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2024-09-15 18:39:43,185 INFO L399 AbstractCegarLoop]: === Iteration 25 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:39:43,186 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:39:43,186 INFO L85 PathProgramCache]: Analyzing trace with hash -1621380802, now seen corresponding path program 9 times [2024-09-15 18:39:43,186 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:39:43,187 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [667754507] [2024-09-15 18:39:43,187 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:39:43,188 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:39:43,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:39:44,215 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:39:44,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:39:44,216 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 19 proven. 33 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2024-09-15 18:39:44,216 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:39:44,217 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [667754507] [2024-09-15 18:39:44,217 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [667754507] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:39:44,217 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [968154444] [2024-09-15 18:39:44,217 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-15 18:39:44,217 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:39:44,217 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:39:44,219 INFO L229 MonitoredProcess]: Starting monitored process 24 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:39:44,222 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2024-09-15 18:39:44,416 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2024-09-15 18:39:44,416 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:39:44,419 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 48 conjuncts are in the unsatisfiable core [2024-09-15 18:39:44,421 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:39:44,486 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 48 treesize of output 35 [2024-09-15 18:39:44,490 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 1 [2024-09-15 18:39:44,932 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-15 18:39:44,947 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 24 proven. 31 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2024-09-15 18:39:44,947 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:39:53,569 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 24 proven. 26 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2024-09-15 18:39:53,570 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [968154444] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:39:53,570 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:39:53,570 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 15, 15] total 44 [2024-09-15 18:39:53,570 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [639547369] [2024-09-15 18:39:53,570 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:39:53,571 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2024-09-15 18:39:53,571 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:39:53,571 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2024-09-15 18:39:53,572 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=357, Invalid=1533, Unknown=2, NotChecked=0, Total=1892 [2024-09-15 18:39:53,572 INFO L87 Difference]: Start difference. First operand 1528 states and 1854 transitions. Second operand has 44 states, 44 states have (on average 2.75) internal successors, (121), 44 states have internal predecessors, (121), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:06,926 WARN L293 SmtUtils]: Spent 12.13s on a formula simplification. DAG size of input: 66 DAG size of output: 53 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-15 18:40:19,192 WARN L293 SmtUtils]: Spent 12.15s on a formula simplification. DAG size of input: 62 DAG size of output: 49 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-15 18:40:21,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:40:21,012 INFO L93 Difference]: Finished difference Result 2757 states and 3328 transitions. [2024-09-15 18:40:21,013 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2024-09-15 18:40:21,013 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 2.75) internal successors, (121), 44 states have internal predecessors, (121), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-15 18:40:21,013 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:40:21,020 INFO L225 Difference]: With dead ends: 2757 [2024-09-15 18:40:21,020 INFO L226 Difference]: Without dead ends: 1467 [2024-09-15 18:40:21,027 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1400 ImplicationChecksByTransitivity, 34.0s TimeCoverageRelationStatistics Valid=856, Invalid=3834, Unknown=2, NotChecked=0, Total=4692 [2024-09-15 18:40:21,027 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 232 mSDsluCounter, 461 mSDsCounter, 0 mSdLazyCounter, 780 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 232 SdHoareTripleChecker+Valid, 489 SdHoareTripleChecker+Invalid, 843 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 780 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-15 18:40:21,027 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [232 Valid, 489 Invalid, 843 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 780 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-15 18:40:21,028 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1467 states. [2024-09-15 18:40:22,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1467 to 1111. [2024-09-15 18:40:22,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1111 states, 1106 states have (on average 1.1518987341772151) internal successors, (1274), 1106 states have internal predecessors, (1274), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:22,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1111 states to 1111 states and 1278 transitions. [2024-09-15 18:40:22,114 INFO L78 Accepts]: Start accepts. Automaton has 1111 states and 1278 transitions. Word has length 66 [2024-09-15 18:40:22,114 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:40:22,114 INFO L474 AbstractCegarLoop]: Abstraction has 1111 states and 1278 transitions. [2024-09-15 18:40:22,115 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 2.75) internal successors, (121), 44 states have internal predecessors, (121), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:22,115 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:40:22,115 INFO L276 IsEmpty]: Start isEmpty. Operand 1111 states and 1278 transitions. [2024-09-15 18:40:22,116 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2024-09-15 18:40:22,116 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:40:22,117 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:40:22,130 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Ended with exit code 0 [2024-09-15 18:40:22,318 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2024-09-15 18:40:22,319 INFO L399 AbstractCegarLoop]: === Iteration 26 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:40:22,319 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:40:22,319 INFO L85 PathProgramCache]: Analyzing trace with hash 1849335033, now seen corresponding path program 10 times [2024-09-15 18:40:22,319 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:40:22,319 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1506296243] [2024-09-15 18:40:22,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:40:22,319 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:40:22,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:40:22,572 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:40:22,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:40:22,574 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 0 proven. 33 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2024-09-15 18:40:22,574 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:40:22,574 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1506296243] [2024-09-15 18:40:22,574 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1506296243] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:40:22,574 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [862468069] [2024-09-15 18:40:22,574 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-15 18:40:22,574 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:40:22,574 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:40:22,576 INFO L229 MonitoredProcess]: Starting monitored process 25 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:40:22,579 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2024-09-15 18:40:22,673 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-15 18:40:22,674 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:40:22,675 INFO L262 TraceCheckSpWp]: Trace formula consists of 282 conjuncts, 44 conjuncts are in the unsatisfiable core [2024-09-15 18:40:22,677 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:40:23,101 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-15 18:40:23,103 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-15 18:40:23,120 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 20 proven. 50 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2024-09-15 18:40:23,120 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:40:23,474 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:40:23,475 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 68 treesize of output 55 [2024-09-15 18:40:23,486 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:40:23,487 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 35 [2024-09-15 18:40:23,596 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 21 proven. 30 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2024-09-15 18:40:23,597 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [862468069] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:40:23,597 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:40:23,597 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 14, 11] total 29 [2024-09-15 18:40:23,597 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1495120735] [2024-09-15 18:40:23,597 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:40:23,597 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2024-09-15 18:40:23,597 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:40:23,598 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2024-09-15 18:40:23,598 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=102, Invalid=710, Unknown=0, NotChecked=0, Total=812 [2024-09-15 18:40:23,598 INFO L87 Difference]: Start difference. First operand 1111 states and 1278 transitions. Second operand has 29 states, 29 states have (on average 4.137931034482759) internal successors, (120), 29 states have internal predecessors, (120), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:26,455 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:40:26,456 INFO L93 Difference]: Finished difference Result 1987 states and 2315 transitions. [2024-09-15 18:40:26,456 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2024-09-15 18:40:26,457 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 4.137931034482759) internal successors, (120), 29 states have internal predecessors, (120), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 68 [2024-09-15 18:40:26,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:40:26,464 INFO L225 Difference]: With dead ends: 1987 [2024-09-15 18:40:26,464 INFO L226 Difference]: Without dead ends: 1737 [2024-09-15 18:40:26,465 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 121 SyntacticMatches, 1 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 527 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=374, Invalid=2382, Unknown=0, NotChecked=0, Total=2756 [2024-09-15 18:40:26,465 INFO L434 NwaCegarLoop]: 36 mSDtfsCounter, 370 mSDsluCounter, 587 mSDsCounter, 0 mSdLazyCounter, 1010 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 370 SdHoareTripleChecker+Valid, 623 SdHoareTripleChecker+Invalid, 1021 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 1010 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-15 18:40:26,465 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [370 Valid, 623 Invalid, 1021 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 1010 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-15 18:40:26,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1737 states. [2024-09-15 18:40:27,600 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1737 to 1120. [2024-09-15 18:40:27,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1120 states, 1115 states have (on average 1.1542600896860986) internal successors, (1287), 1115 states have internal predecessors, (1287), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:27,602 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1120 states to 1120 states and 1291 transitions. [2024-09-15 18:40:27,605 INFO L78 Accepts]: Start accepts. Automaton has 1120 states and 1291 transitions. Word has length 68 [2024-09-15 18:40:27,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:40:27,605 INFO L474 AbstractCegarLoop]: Abstraction has 1120 states and 1291 transitions. [2024-09-15 18:40:27,605 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 4.137931034482759) internal successors, (120), 29 states have internal predecessors, (120), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:27,606 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:40:27,606 INFO L276 IsEmpty]: Start isEmpty. Operand 1120 states and 1291 transitions. [2024-09-15 18:40:27,607 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2024-09-15 18:40:27,607 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:40:27,607 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:40:27,621 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Ended with exit code 0 [2024-09-15 18:40:27,811 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2024-09-15 18:40:27,812 INFO L399 AbstractCegarLoop]: === Iteration 27 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:40:27,812 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:40:27,812 INFO L85 PathProgramCache]: Analyzing trace with hash 128915325, now seen corresponding path program 11 times [2024-09-15 18:40:27,812 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:40:27,812 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [428999276] [2024-09-15 18:40:27,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:40:27,812 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:40:27,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:40:28,000 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:40:28,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:40:28,002 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 39 proven. 27 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2024-09-15 18:40:28,002 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:40:28,002 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [428999276] [2024-09-15 18:40:28,003 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [428999276] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:40:28,003 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1613140060] [2024-09-15 18:40:28,003 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-15 18:40:28,003 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:40:28,003 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:40:28,005 INFO L229 MonitoredProcess]: Starting monitored process 26 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:40:28,006 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2024-09-15 18:40:28,982 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 9 check-sat command(s) [2024-09-15 18:40:28,983 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:40:28,985 INFO L262 TraceCheckSpWp]: Trace formula consists of 307 conjuncts, 17 conjuncts are in the unsatisfiable core [2024-09-15 18:40:28,987 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:40:29,084 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 39 proven. 27 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2024-09-15 18:40:29,085 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:40:29,246 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 39 proven. 27 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2024-09-15 18:40:29,247 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1613140060] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:40:29,247 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:40:29,247 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 8] total 18 [2024-09-15 18:40:29,247 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2065254546] [2024-09-15 18:40:29,247 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:40:29,247 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2024-09-15 18:40:29,247 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:40:29,248 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2024-09-15 18:40:29,248 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=72, Invalid=234, Unknown=0, NotChecked=0, Total=306 [2024-09-15 18:40:29,248 INFO L87 Difference]: Start difference. First operand 1120 states and 1291 transitions. Second operand has 18 states, 18 states have (on average 5.0) internal successors, (90), 18 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:30,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:40:30,324 INFO L93 Difference]: Finished difference Result 1478 states and 1679 transitions. [2024-09-15 18:40:30,325 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-15 18:40:30,325 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 5.0) internal successors, (90), 18 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 75 [2024-09-15 18:40:30,325 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:40:30,330 INFO L225 Difference]: With dead ends: 1478 [2024-09-15 18:40:30,331 INFO L226 Difference]: Without dead ends: 928 [2024-09-15 18:40:30,332 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 146 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 74 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=72, Invalid=234, Unknown=0, NotChecked=0, Total=306 [2024-09-15 18:40:30,332 INFO L434 NwaCegarLoop]: 31 mSDtfsCounter, 0 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 181 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 181 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-15 18:40:30,333 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 265 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 181 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-15 18:40:30,333 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 928 states. [2024-09-15 18:40:31,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 928 to 928. [2024-09-15 18:40:31,285 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 928 states, 923 states have (on average 1.14192849404117) internal successors, (1054), 923 states have internal predecessors, (1054), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:31,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 928 states to 928 states and 1058 transitions. [2024-09-15 18:40:31,289 INFO L78 Accepts]: Start accepts. Automaton has 928 states and 1058 transitions. Word has length 75 [2024-09-15 18:40:31,289 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:40:31,289 INFO L474 AbstractCegarLoop]: Abstraction has 928 states and 1058 transitions. [2024-09-15 18:40:31,289 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 5.0) internal successors, (90), 18 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:31,290 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:40:31,290 INFO L276 IsEmpty]: Start isEmpty. Operand 928 states and 1058 transitions. [2024-09-15 18:40:31,291 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2024-09-15 18:40:31,293 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:40:31,293 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:40:31,307 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Ended with exit code 0 [2024-09-15 18:40:31,494 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2024-09-15 18:40:31,494 INFO L399 AbstractCegarLoop]: === Iteration 28 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:40:31,495 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:40:31,495 INFO L85 PathProgramCache]: Analyzing trace with hash 846171212, now seen corresponding path program 12 times [2024-09-15 18:40:31,495 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:40:31,495 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1870249801] [2024-09-15 18:40:31,495 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:40:31,495 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:40:31,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:40:32,353 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:40:32,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:40:32,355 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 62 proven. 31 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-15 18:40:32,355 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:40:32,355 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1870249801] [2024-09-15 18:40:32,355 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1870249801] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:40:32,355 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [839964849] [2024-09-15 18:40:32,356 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-09-15 18:40:32,356 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:40:32,356 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:40:32,357 INFO L229 MonitoredProcess]: Starting monitored process 27 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:40:32,358 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2024-09-15 18:40:32,498 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 5 check-sat command(s) [2024-09-15 18:40:32,498 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:40:32,500 INFO L262 TraceCheckSpWp]: Trace formula consists of 240 conjuncts, 40 conjuncts are in the unsatisfiable core [2024-09-15 18:40:32,501 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:40:33,354 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 44 proven. 59 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-15 18:40:33,354 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:40:34,242 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 44 proven. 50 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2024-09-15 18:40:34,242 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [839964849] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:40:34,243 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:40:34,243 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 19, 16] total 42 [2024-09-15 18:40:34,243 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1772203296] [2024-09-15 18:40:34,243 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:40:34,243 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2024-09-15 18:40:34,243 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:40:34,244 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2024-09-15 18:40:34,244 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=270, Invalid=1452, Unknown=0, NotChecked=0, Total=1722 [2024-09-15 18:40:34,244 INFO L87 Difference]: Start difference. First operand 928 states and 1058 transitions. Second operand has 42 states, 42 states have (on average 3.2857142857142856) internal successors, (138), 42 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:37,719 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:40:37,719 INFO L93 Difference]: Finished difference Result 1306 states and 1480 transitions. [2024-09-15 18:40:37,719 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2024-09-15 18:40:37,720 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 3.2857142857142856) internal successors, (138), 42 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 76 [2024-09-15 18:40:37,720 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:40:37,728 INFO L225 Difference]: With dead ends: 1306 [2024-09-15 18:40:37,728 INFO L226 Difference]: Without dead ends: 1032 [2024-09-15 18:40:37,729 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1606 ImplicationChecksByTransitivity, 2.4s TimeCoverageRelationStatistics Valid=783, Invalid=4619, Unknown=0, NotChecked=0, Total=5402 [2024-09-15 18:40:37,729 INFO L434 NwaCegarLoop]: 31 mSDtfsCounter, 209 mSDsluCounter, 537 mSDsCounter, 0 mSdLazyCounter, 825 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 209 SdHoareTripleChecker+Valid, 568 SdHoareTripleChecker+Invalid, 861 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 825 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-09-15 18:40:37,735 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [209 Valid, 568 Invalid, 861 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 825 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2024-09-15 18:40:37,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1032 states. [2024-09-15 18:40:38,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1032 to 798. [2024-09-15 18:40:38,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 798 states, 793 states have (on average 1.1424968474148802) internal successors, (906), 793 states have internal predecessors, (906), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:38,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 798 states to 798 states and 910 transitions. [2024-09-15 18:40:38,600 INFO L78 Accepts]: Start accepts. Automaton has 798 states and 910 transitions. Word has length 76 [2024-09-15 18:40:38,600 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:40:38,600 INFO L474 AbstractCegarLoop]: Abstraction has 798 states and 910 transitions. [2024-09-15 18:40:38,601 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 42 states have (on average 3.2857142857142856) internal successors, (138), 42 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:38,601 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:40:38,601 INFO L276 IsEmpty]: Start isEmpty. Operand 798 states and 910 transitions. [2024-09-15 18:40:38,605 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2024-09-15 18:40:38,605 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:40:38,605 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:40:38,618 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2024-09-15 18:40:38,805 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable27,27 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:40:38,806 INFO L399 AbstractCegarLoop]: === Iteration 29 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:40:38,806 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:40:38,806 INFO L85 PathProgramCache]: Analyzing trace with hash -984218334, now seen corresponding path program 13 times [2024-09-15 18:40:38,806 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:40:38,806 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1775232442] [2024-09-15 18:40:38,806 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:40:38,806 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:40:38,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:40:39,282 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:40:39,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:40:39,284 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 0 proven. 36 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2024-09-15 18:40:39,284 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:40:39,284 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1775232442] [2024-09-15 18:40:39,284 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1775232442] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:40:39,284 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1065982579] [2024-09-15 18:40:39,285 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-09-15 18:40:39,285 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:40:39,285 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:40:39,286 INFO L229 MonitoredProcess]: Starting monitored process 28 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:40:39,288 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2024-09-15 18:40:39,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:40:39,395 INFO L262 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 44 conjuncts are in the unsatisfiable core [2024-09-15 18:40:39,397 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:40:39,831 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 8 [2024-09-15 18:40:39,833 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 0 proven. 110 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-15 18:40:39,834 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:40:40,480 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-15 18:40:40,480 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 49 treesize of output 31 [2024-09-15 18:40:40,635 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 39 proven. 57 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-15 18:40:40,635 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1065982579] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:40:40,636 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:40:40,636 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 19, 15] total 39 [2024-09-15 18:40:40,637 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1881450848] [2024-09-15 18:40:40,637 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:40:40,638 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2024-09-15 18:40:40,638 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:40:40,638 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2024-09-15 18:40:40,638 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=220, Invalid=1262, Unknown=0, NotChecked=0, Total=1482 [2024-09-15 18:40:40,639 INFO L87 Difference]: Start difference. First operand 798 states and 910 transitions. Second operand has 39 states, 39 states have (on average 3.769230769230769) internal successors, (147), 39 states have internal predecessors, (147), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:43,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:40:43,396 INFO L93 Difference]: Finished difference Result 2303 states and 2696 transitions. [2024-09-15 18:40:43,396 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-15 18:40:43,397 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 39 states have (on average 3.769230769230769) internal successors, (147), 39 states have internal predecessors, (147), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 77 [2024-09-15 18:40:43,397 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:40:43,403 INFO L225 Difference]: With dead ends: 2303 [2024-09-15 18:40:43,403 INFO L226 Difference]: Without dead ends: 1608 [2024-09-15 18:40:43,404 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 130 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 706 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=381, Invalid=2375, Unknown=0, NotChecked=0, Total=2756 [2024-09-15 18:40:43,404 INFO L434 NwaCegarLoop]: 49 mSDtfsCounter, 194 mSDsluCounter, 758 mSDsCounter, 0 mSdLazyCounter, 806 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 194 SdHoareTripleChecker+Valid, 807 SdHoareTripleChecker+Invalid, 825 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 806 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-15 18:40:43,405 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [194 Valid, 807 Invalid, 825 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 806 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-15 18:40:43,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1608 states. [2024-09-15 18:40:44,548 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1608 to 1053. [2024-09-15 18:40:44,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1053 states, 1048 states have (on average 1.133587786259542) internal successors, (1188), 1048 states have internal predecessors, (1188), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:44,550 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1053 states to 1053 states and 1192 transitions. [2024-09-15 18:40:44,553 INFO L78 Accepts]: Start accepts. Automaton has 1053 states and 1192 transitions. Word has length 77 [2024-09-15 18:40:44,554 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:40:44,554 INFO L474 AbstractCegarLoop]: Abstraction has 1053 states and 1192 transitions. [2024-09-15 18:40:44,554 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 39 states have (on average 3.769230769230769) internal successors, (147), 39 states have internal predecessors, (147), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:44,554 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:40:44,554 INFO L276 IsEmpty]: Start isEmpty. Operand 1053 states and 1192 transitions. [2024-09-15 18:40:44,555 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2024-09-15 18:40:44,555 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:40:44,556 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 5, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:40:44,570 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Ended with exit code 0 [2024-09-15 18:40:44,756 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2024-09-15 18:40:44,757 INFO L399 AbstractCegarLoop]: === Iteration 30 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:40:44,757 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:40:44,757 INFO L85 PathProgramCache]: Analyzing trace with hash -1743097550, now seen corresponding path program 14 times [2024-09-15 18:40:44,757 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:40:44,757 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [423208945] [2024-09-15 18:40:44,757 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:40:44,757 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:40:44,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:40:45,282 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:40:45,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:40:45,284 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 0 proven. 132 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-15 18:40:45,284 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:40:45,284 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [423208945] [2024-09-15 18:40:45,285 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [423208945] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:40:45,285 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1285824500] [2024-09-15 18:40:45,285 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-15 18:40:45,285 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:40:45,285 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:40:45,286 INFO L229 MonitoredProcess]: Starting monitored process 29 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:40:45,292 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2024-09-15 18:40:45,405 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-15 18:40:45,406 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:40:45,412 INFO L262 TraceCheckSpWp]: Trace formula consists of 343 conjuncts, 39 conjuncts are in the unsatisfiable core [2024-09-15 18:40:45,414 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:40:45,666 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 0 proven. 144 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2024-09-15 18:40:45,666 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:40:46,050 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 0 proven. 132 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-15 18:40:46,050 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1285824500] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-15 18:40:46,050 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-15 18:40:46,050 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 15, 12] total 28 [2024-09-15 18:40:46,050 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1919224189] [2024-09-15 18:40:46,050 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-15 18:40:46,051 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2024-09-15 18:40:46,051 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-15 18:40:46,051 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2024-09-15 18:40:46,051 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=679, Unknown=0, NotChecked=0, Total=756 [2024-09-15 18:40:46,051 INFO L87 Difference]: Start difference. First operand 1053 states and 1192 transitions. Second operand has 28 states, 28 states have (on average 5.214285714285714) internal successors, (146), 26 states have internal predecessors, (146), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:50,642 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-15 18:40:50,642 INFO L93 Difference]: Finished difference Result 2107 states and 2440 transitions. [2024-09-15 18:40:50,643 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2024-09-15 18:40:50,643 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 5.214285714285714) internal successors, (146), 26 states have internal predecessors, (146), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 87 [2024-09-15 18:40:50,643 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-15 18:40:50,656 INFO L225 Difference]: With dead ends: 2107 [2024-09-15 18:40:50,656 INFO L226 Difference]: Without dead ends: 2102 [2024-09-15 18:40:50,657 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 229 GetRequests, 159 SyntacticMatches, 2 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1188 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=388, Invalid=4442, Unknown=0, NotChecked=0, Total=4830 [2024-09-15 18:40:50,657 INFO L434 NwaCegarLoop]: 175 mSDtfsCounter, 423 mSDsluCounter, 3016 mSDsCounter, 0 mSdLazyCounter, 2519 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 423 SdHoareTripleChecker+Valid, 3191 SdHoareTripleChecker+Invalid, 2548 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 2519 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2024-09-15 18:40:50,658 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [423 Valid, 3191 Invalid, 2548 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 2519 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2024-09-15 18:40:50,659 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2102 states. [2024-09-15 18:40:52,276 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2102 to 1321. [2024-09-15 18:40:52,278 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1321 states, 1316 states have (on average 1.134498480243161) internal successors, (1493), 1316 states have internal predecessors, (1493), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:52,279 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1321 states to 1321 states and 1497 transitions. [2024-09-15 18:40:52,284 INFO L78 Accepts]: Start accepts. Automaton has 1321 states and 1497 transitions. Word has length 87 [2024-09-15 18:40:52,284 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-15 18:40:52,285 INFO L474 AbstractCegarLoop]: Abstraction has 1321 states and 1497 transitions. [2024-09-15 18:40:52,285 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 5.214285714285714) internal successors, (146), 26 states have internal predecessors, (146), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-15 18:40:52,289 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:40:52,290 INFO L276 IsEmpty]: Start isEmpty. Operand 1321 states and 1497 transitions. [2024-09-15 18:40:52,292 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2024-09-15 18:40:52,292 INFO L208 NwaCegarLoop]: Found error trace [2024-09-15 18:40:52,292 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-15 18:40:52,306 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Ended with exit code 0 [2024-09-15 18:40:52,496 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,29 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:40:52,497 INFO L399 AbstractCegarLoop]: === Iteration 31 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-15 18:40:52,497 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-15 18:40:52,497 INFO L85 PathProgramCache]: Analyzing trace with hash 1965063732, now seen corresponding path program 15 times [2024-09-15 18:40:52,497 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-15 18:40:52,498 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1873724173] [2024-09-15 18:40:52,498 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-15 18:40:52,498 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-15 18:40:52,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:40:53,906 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-15 18:40:53,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-15 18:40:53,908 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 35 proven. 110 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2024-09-15 18:40:53,908 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-15 18:40:53,908 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1873724173] [2024-09-15 18:40:53,908 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1873724173] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-15 18:40:53,908 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [415431871] [2024-09-15 18:40:53,908 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-15 18:40:53,908 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-15 18:40:53,908 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-15 18:40:53,911 INFO L229 MonitoredProcess]: Starting monitored process 30 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-15 18:40:53,912 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2024-09-15 18:40:54,229 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2024-09-15 18:40:54,230 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-15 18:40:54,236 INFO L262 TraceCheckSpWp]: Trace formula consists of 319 conjuncts, 145 conjuncts are in the unsatisfiable core [2024-09-15 18:40:54,239 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-15 18:40:54,467 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 56 treesize of output 43 [2024-09-15 18:40:54,482 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 1 [2024-09-15 18:40:58,788 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-15 18:40:58,790 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-15 18:40:58,792 INFO L173 IndexEqualityManager]: detected equality via solver [2024-09-15 18:40:58,795 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-15 18:40:58,796 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 45 treesize of output 22 [2024-09-15 18:40:58,851 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 68 proven. 89 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-15 18:40:58,851 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-15 18:41:07,541 WARN L876 $PredicateComparison]: unable to prove that (let ((.cse1 (select |c_#memory_int#2| |c_main_~#input_string~0.base|)) (.cse12 (mod (+ c_main_~i~0 1) 4294967296)) (.cse5 (select |c_#memory_int#1| |c_main_~#vogal_array~0.base|))) (let ((.cse2 (select .cse5 |c_main_~#vogal_array~0.offset|)) (.cse6 (mod c_main_~j~0 4294967296)) (.cse10 (< .cse12 2147483648)) (.cse9 (select .cse1 (+ .cse12 (- 4294967296) |c_main_~#input_string~0.offset|))) (.cse8 (< 2147483647 .cse12)) (.cse7 (select .cse1 (+ .cse12 |c_main_~#input_string~0.offset|)))) (or (let ((.cse0 (mod (+ c_main_~i~0 2) 4294967296))) (and (or (< 2147483647 .cse0) (= (select .cse1 (+ .cse0 |c_main_~#input_string~0.offset|)) .cse2)) (or (= .cse2 (select .cse1 (+ .cse0 (- 4294967296) |c_main_~#input_string~0.offset|))) (< .cse0 2147483648)))) (let ((.cse4 (select .cse5 (+ .cse6 |c_main_~#vogal_array~0.offset|))) (.cse3 (mod c_main_~i~0 4294967296))) (and (or (< 2147483647 .cse3) (not (= (select .cse1 (+ .cse3 |c_main_~#input_string~0.offset|)) .cse4))) (or (not (= (select .cse1 (+ .cse3 (- 4294967296) |c_main_~#input_string~0.offset|)) .cse4)) (< .cse3 2147483648)))) (and (or (not (= .cse7 .cse2)) .cse8) (or (not (= .cse9 .cse2)) .cse10)) (< 1 .cse6) (let ((.cse11 (select .cse5 (+ |c_main_~#vogal_array~0.offset| 1)))) (and (or .cse10 (= .cse9 .cse11)) (or .cse8 (= .cse7 .cse11))))))) is different from true [2024-09-15 18:41:27,353 WARN L293 SmtUtils]: Spent 9.18s on a formula simplification that was a NOOP. DAG size: 66 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate)