./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/loops/eureka_05.i --full-output --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version de325976 Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/loops/eureka_05.i -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3f12ca1e314a03dfb1c8beadd0c1a180c2d2339dd5f3109d5999df06d52395ab --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --- Real Ultimate output --- This is Ultimate 0.2.4-tmp.dk.referee-eval-de32597-m [2024-09-17 18:10:50,192 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-17 18:10:50,268 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-17 18:10:50,274 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-17 18:10:50,277 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-17 18:10:50,310 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-17 18:10:50,311 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-17 18:10:50,311 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-17 18:10:50,312 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-17 18:10:50,312 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-17 18:10:50,313 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-17 18:10:50,314 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-17 18:10:50,314 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-17 18:10:50,317 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-17 18:10:50,317 INFO L153 SettingsManager]: * Use SBE=true [2024-09-17 18:10:50,318 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-17 18:10:50,318 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-17 18:10:50,318 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-17 18:10:50,319 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-17 18:10:50,326 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-17 18:10:50,328 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-17 18:10:50,329 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-17 18:10:50,329 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-17 18:10:50,329 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-17 18:10:50,330 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-17 18:10:50,330 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-17 18:10:50,330 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-17 18:10:50,330 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-17 18:10:50,330 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-17 18:10:50,331 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-17 18:10:50,331 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-17 18:10:50,331 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-17 18:10:50,333 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-17 18:10:50,334 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-17 18:10:50,334 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-17 18:10:50,335 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-17 18:10:50,335 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-17 18:10:50,335 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-17 18:10:50,335 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-17 18:10:50,335 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-17 18:10:50,335 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-17 18:10:50,336 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-17 18:10:50,336 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3f12ca1e314a03dfb1c8beadd0c1a180c2d2339dd5f3109d5999df06d52395ab Applying setting for plugin de.uni_freiburg.informatik.ultimate.boogie.procedureinliner: Inline calls to implemented procedures -> NEVER Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Generate GraphML witnesses -> false [2024-09-17 18:10:50,593 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-17 18:10:50,615 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-17 18:10:50,618 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-17 18:10:50,620 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-17 18:10:50,620 INFO L274 PluginConnector]: CDTParser initialized [2024-09-17 18:10:50,621 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/loops/eureka_05.i [2024-09-17 18:10:52,083 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-17 18:10:52,274 INFO L384 CDTParser]: Found 1 translation units. [2024-09-17 18:10:52,274 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/eureka_05.i [2024-09-17 18:10:52,281 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/e680719e2/6a5024fac46c4ea092bc05b6267a0da7/FLAG7fd870a77 [2024-09-17 18:10:52,671 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/e680719e2/6a5024fac46c4ea092bc05b6267a0da7 [2024-09-17 18:10:52,673 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-17 18:10:52,674 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-17 18:10:52,675 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-17 18:10:52,676 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-17 18:10:52,682 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-17 18:10:52,685 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:52,686 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3366aabc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52, skipping insertion in model container [2024-09-17 18:10:52,686 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:52,709 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-17 18:10:52,852 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/eureka_05.i[810,823] [2024-09-17 18:10:52,871 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-17 18:10:52,882 INFO L200 MainTranslator]: Completed pre-run [2024-09-17 18:10:52,895 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/eureka_05.i[810,823] [2024-09-17 18:10:52,913 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-17 18:10:52,934 INFO L204 MainTranslator]: Completed translation [2024-09-17 18:10:52,934 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52 WrapperNode [2024-09-17 18:10:52,935 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-17 18:10:52,936 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-17 18:10:52,936 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-17 18:10:52,937 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-17 18:10:52,944 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:52,955 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:52,962 INFO L138 Inliner]: procedures = 16, calls = 24, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2024-09-17 18:10:52,963 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-17 18:10:52,964 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-17 18:10:52,964 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-17 18:10:52,964 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-17 18:10:52,977 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:52,977 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:52,979 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:52,992 INFO L175 MemorySlicer]: Split 15 memory accesses to 3 slices as follows [2, 11, 2]. 73 percent of accesses are in the largest equivalence class. The 7 initializations are split as follows [2, 5, 0]. The 3 writes are split as follows [0, 2, 1]. [2024-09-17 18:10:52,992 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:52,993 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:53,001 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:53,006 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:53,008 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:53,010 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:53,012 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-17 18:10:53,013 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-17 18:10:53,014 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-17 18:10:53,014 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-17 18:10:53,015 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52" (1/1) ... [2024-09-17 18:10:53,021 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-17 18:10:53,033 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-17 18:10:53,057 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-17 18:10:53,061 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-17 18:10:53,117 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-17 18:10:53,118 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-09-17 18:10:53,118 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-09-17 18:10:53,118 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-17 18:10:53,118 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-17 18:10:53,118 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-09-17 18:10:53,118 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-09-17 18:10:53,120 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-09-17 18:10:53,120 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-09-17 18:10:53,121 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-09-17 18:10:53,121 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-09-17 18:10:53,121 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-09-17 18:10:53,121 INFO L130 BoogieDeclarations]: Found specification of procedure SelectionSort [2024-09-17 18:10:53,121 INFO L138 BoogieDeclarations]: Found implementation of procedure SelectionSort [2024-09-17 18:10:53,121 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-17 18:10:53,121 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-17 18:10:53,121 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-09-17 18:10:53,121 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-09-17 18:10:53,122 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-09-17 18:10:53,122 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-17 18:10:53,122 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-17 18:10:53,122 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-09-17 18:10:53,226 INFO L242 CfgBuilder]: Building ICFG [2024-09-17 18:10:53,230 INFO L268 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-17 18:10:53,430 INFO L? ?]: Removed 9 outVars from TransFormulas that were not future-live. [2024-09-17 18:10:53,431 INFO L291 CfgBuilder]: Performing block encoding [2024-09-17 18:10:53,472 INFO L313 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-17 18:10:53,474 INFO L318 CfgBuilder]: Removed 4 assume(true) statements. [2024-09-17 18:10:53,474 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.09 06:10:53 BoogieIcfgContainer [2024-09-17 18:10:53,474 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-17 18:10:53,477 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-17 18:10:53,477 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-17 18:10:53,482 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-17 18:10:53,482 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.09 06:10:52" (1/3) ... [2024-09-17 18:10:53,483 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2042437b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.09 06:10:53, skipping insertion in model container [2024-09-17 18:10:53,483 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.09 06:10:52" (2/3) ... [2024-09-17 18:10:53,484 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2042437b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.09 06:10:53, skipping insertion in model container [2024-09-17 18:10:53,484 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.09 06:10:53" (3/3) ... [2024-09-17 18:10:53,485 INFO L112 eAbstractionObserver]: Analyzing ICFG eureka_05.i [2024-09-17 18:10:53,505 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-17 18:10:53,505 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-17 18:10:53,576 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-17 18:10:53,583 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@69dc1dcb, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-17 18:10:53,583 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-17 18:10:53,587 INFO L276 IsEmpty]: Start isEmpty. Operand has 29 states, 19 states have (on average 1.5789473684210527) internal successors, (30), 20 states have internal predecessors, (30), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-17 18:10:53,595 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-09-17 18:10:53,595 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:10:53,596 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:10:53,597 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:10:53,602 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:53,603 INFO L85 PathProgramCache]: Analyzing trace with hash -2080310768, now seen corresponding path program 1 times [2024-09-17 18:10:53,611 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:10:53,611 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1034335723] [2024-09-17 18:10:53,612 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:10:53,612 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:10:53,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:53,769 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:10:53,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:53,791 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2024-09-17 18:10:53,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:53,799 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-17 18:10:53,799 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:10:53,799 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1034335723] [2024-09-17 18:10:53,800 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1034335723] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-17 18:10:53,800 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-17 18:10:53,800 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-09-17 18:10:53,802 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1808763554] [2024-09-17 18:10:53,802 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-17 18:10:53,806 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-09-17 18:10:53,807 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:10:53,827 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-09-17 18:10:53,828 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-09-17 18:10:53,830 INFO L87 Difference]: Start difference. First operand has 29 states, 19 states have (on average 1.5789473684210527) internal successors, (30), 20 states have internal predecessors, (30), 4 states have call successors, (4), 4 states have call predecessors, (4), 4 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Second operand has 4 states, 4 states have (on average 2.75) internal successors, (11), 2 states have internal predecessors, (11), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-17 18:10:54,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-17 18:10:54,054 INFO L93 Difference]: Finished difference Result 65 states and 92 transitions. [2024-09-17 18:10:54,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-17 18:10:54,061 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 2.75) internal successors, (11), 2 states have internal predecessors, (11), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 17 [2024-09-17 18:10:54,063 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-17 18:10:54,072 INFO L225 Difference]: With dead ends: 65 [2024-09-17 18:10:54,072 INFO L226 Difference]: Without dead ends: 36 [2024-09-17 18:10:54,075 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-09-17 18:10:54,080 INFO L434 NwaCegarLoop]: 5 mSDtfsCounter, 61 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 49 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 7 SdHoareTripleChecker+Invalid, 61 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 49 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-17 18:10:54,084 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [62 Valid, 7 Invalid, 61 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 49 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-17 18:10:54,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 36 states. [2024-09-17 18:10:54,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 36 to 25. [2024-09-17 18:10:54,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 17 states have (on average 1.2941176470588236) internal successors, (22), 17 states have internal predecessors, (22), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-17 18:10:54,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 29 transitions. [2024-09-17 18:10:54,149 INFO L78 Accepts]: Start accepts. Automaton has 25 states and 29 transitions. Word has length 17 [2024-09-17 18:10:54,149 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-17 18:10:54,150 INFO L474 AbstractCegarLoop]: Abstraction has 25 states and 29 transitions. [2024-09-17 18:10:54,150 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 2.75) internal successors, (11), 2 states have internal predecessors, (11), 2 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2024-09-17 18:10:54,152 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:54,152 INFO L276 IsEmpty]: Start isEmpty. Operand 25 states and 29 transitions. [2024-09-17 18:10:54,152 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-09-17 18:10:54,153 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:10:54,154 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:10:54,154 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-17 18:10:54,154 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:10:54,155 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:54,155 INFO L85 PathProgramCache]: Analyzing trace with hash 156377847, now seen corresponding path program 1 times [2024-09-17 18:10:54,155 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:10:54,156 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [941361134] [2024-09-17 18:10:54,158 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:10:54,158 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:10:54,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:54,285 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:10:54,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:54,306 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2024-09-17 18:10:54,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:54,320 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-17 18:10:54,323 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:10:54,324 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [941361134] [2024-09-17 18:10:54,324 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [941361134] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-17 18:10:54,324 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-17 18:10:54,324 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-09-17 18:10:54,324 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [229696139] [2024-09-17 18:10:54,324 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-17 18:10:54,327 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-17 18:10:54,327 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:10:54,328 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-17 18:10:54,330 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-09-17 18:10:54,330 INFO L87 Difference]: Start difference. First operand 25 states and 29 transitions. Second operand has 5 states, 5 states have (on average 2.2) internal successors, (11), 3 states have internal predecessors, (11), 2 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-17 18:10:54,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-17 18:10:54,569 INFO L93 Difference]: Finished difference Result 56 states and 68 transitions. [2024-09-17 18:10:54,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-17 18:10:54,570 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.2) internal successors, (11), 3 states have internal predecessors, (11), 2 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 17 [2024-09-17 18:10:54,570 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-17 18:10:54,571 INFO L225 Difference]: With dead ends: 56 [2024-09-17 18:10:54,571 INFO L226 Difference]: Without dead ends: 37 [2024-09-17 18:10:54,572 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2024-09-17 18:10:54,574 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 57 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 58 SdHoareTripleChecker+Valid, 5 SdHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-17 18:10:54,574 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [58 Valid, 5 Invalid, 82 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-17 18:10:54,576 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37 states. [2024-09-17 18:10:54,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37 to 26. [2024-09-17 18:10:54,598 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26 states, 18 states have (on average 1.2777777777777777) internal successors, (23), 18 states have internal predecessors, (23), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-17 18:10:54,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26 states to 26 states and 30 transitions. [2024-09-17 18:10:54,599 INFO L78 Accepts]: Start accepts. Automaton has 26 states and 30 transitions. Word has length 17 [2024-09-17 18:10:54,599 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-17 18:10:54,601 INFO L474 AbstractCegarLoop]: Abstraction has 26 states and 30 transitions. [2024-09-17 18:10:54,601 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.2) internal successors, (11), 3 states have internal predecessors, (11), 2 states have call successors, (4), 4 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-17 18:10:54,602 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:54,602 INFO L276 IsEmpty]: Start isEmpty. Operand 26 states and 30 transitions. [2024-09-17 18:10:54,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2024-09-17 18:10:54,604 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:10:54,604 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:10:54,604 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-09-17 18:10:54,605 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:10:54,605 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:54,607 INFO L85 PathProgramCache]: Analyzing trace with hash 364897058, now seen corresponding path program 1 times [2024-09-17 18:10:54,608 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:10:54,608 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1095749553] [2024-09-17 18:10:54,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:10:54,608 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:10:54,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:54,694 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:10:54,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:54,719 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2024-09-17 18:10:54,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:54,731 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-17 18:10:54,731 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:10:54,732 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1095749553] [2024-09-17 18:10:54,732 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1095749553] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-17 18:10:54,732 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [346861793] [2024-09-17 18:10:54,732 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:10:54,732 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:10:54,733 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-17 18:10:54,737 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-17 18:10:54,739 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-17 18:10:54,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:54,811 INFO L262 TraceCheckSpWp]: Trace formula consists of 104 conjuncts, 3 conjuncts are in the unsatisfiable core [2024-09-17 18:10:54,817 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-17 18:10:54,844 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-17 18:10:54,847 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-17 18:10:54,903 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-17 18:10:54,904 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [346861793] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-17 18:10:54,904 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-17 18:10:54,906 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 4, 4] total 8 [2024-09-17 18:10:54,907 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [192286428] [2024-09-17 18:10:54,907 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-17 18:10:54,907 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-09-17 18:10:54,908 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:10:54,908 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-09-17 18:10:54,909 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2024-09-17 18:10:54,909 INFO L87 Difference]: Start difference. First operand 26 states and 30 transitions. Second operand has 8 states, 8 states have (on average 2.5) internal successors, (20), 6 states have internal predecessors, (20), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-09-17 18:10:55,219 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-17 18:10:55,219 INFO L93 Difference]: Finished difference Result 65 states and 81 transitions. [2024-09-17 18:10:55,220 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-09-17 18:10:55,220 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 2.5) internal successors, (20), 6 states have internal predecessors, (20), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) Word has length 18 [2024-09-17 18:10:55,220 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-17 18:10:55,222 INFO L225 Difference]: With dead ends: 65 [2024-09-17 18:10:55,224 INFO L226 Difference]: Without dead ends: 46 [2024-09-17 18:10:55,225 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 51 GetRequests, 38 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=76, Invalid=134, Unknown=0, NotChecked=0, Total=210 [2024-09-17 18:10:55,226 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 66 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 108 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 66 SdHoareTripleChecker+Valid, 7 SdHoareTripleChecker+Invalid, 134 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 108 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-17 18:10:55,228 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [66 Valid, 7 Invalid, 134 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 108 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-17 18:10:55,229 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46 states. [2024-09-17 18:10:55,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46 to 29. [2024-09-17 18:10:55,245 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 21 states have (on average 1.2380952380952381) internal successors, (26), 21 states have internal predecessors, (26), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-17 18:10:55,245 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 33 transitions. [2024-09-17 18:10:55,247 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 33 transitions. Word has length 18 [2024-09-17 18:10:55,247 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-17 18:10:55,248 INFO L474 AbstractCegarLoop]: Abstraction has 29 states and 33 transitions. [2024-09-17 18:10:55,248 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 2.5) internal successors, (20), 6 states have internal predecessors, (20), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (3), 2 states have call predecessors, (3), 2 states have call successors, (3) [2024-09-17 18:10:55,251 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:55,251 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 33 transitions. [2024-09-17 18:10:55,252 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2024-09-17 18:10:55,252 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:10:55,252 INFO L216 NwaCegarLoop]: trace histogram [4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:10:55,272 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-09-17 18:10:55,453 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:10:55,454 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:10:55,454 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:55,454 INFO L85 PathProgramCache]: Analyzing trace with hash -1764338249, now seen corresponding path program 2 times [2024-09-17 18:10:55,454 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:10:55,455 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1339671673] [2024-09-17 18:10:55,455 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:10:55,455 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:10:55,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:55,568 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:10:55,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:55,589 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-17 18:10:55,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:55,613 INFO L134 CoverageAnalysis]: Checked inductivity of 10 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-17 18:10:55,613 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:10:55,614 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1339671673] [2024-09-17 18:10:55,614 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1339671673] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-17 18:10:55,614 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-17 18:10:55,614 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-09-17 18:10:55,615 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1279908623] [2024-09-17 18:10:55,615 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-17 18:10:55,615 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-09-17 18:10:55,616 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:10:55,616 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-09-17 18:10:55,616 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-09-17 18:10:55,617 INFO L87 Difference]: Start difference. First operand 29 states and 33 transitions. Second operand has 7 states, 6 states have (on average 2.0) internal successors, (12), 4 states have internal predecessors, (12), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-17 18:10:55,793 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-17 18:10:55,794 INFO L93 Difference]: Finished difference Result 46 states and 53 transitions. [2024-09-17 18:10:55,794 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-17 18:10:55,794 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 6 states have (on average 2.0) internal successors, (12), 4 states have internal predecessors, (12), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 21 [2024-09-17 18:10:55,795 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-17 18:10:55,795 INFO L225 Difference]: With dead ends: 46 [2024-09-17 18:10:55,795 INFO L226 Difference]: Without dead ends: 34 [2024-09-17 18:10:55,796 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=91, Unknown=0, NotChecked=0, Total=132 [2024-09-17 18:10:55,797 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 75 mSDsluCounter, 4 mSDsCounter, 0 mSdLazyCounter, 97 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 75 SdHoareTripleChecker+Valid, 7 SdHoareTripleChecker+Invalid, 110 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 97 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-17 18:10:55,797 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [75 Valid, 7 Invalid, 110 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 97 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-17 18:10:55,797 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34 states. [2024-09-17 18:10:55,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34 to 30. [2024-09-17 18:10:55,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30 states, 22 states have (on average 1.2272727272727273) internal successors, (27), 22 states have internal predecessors, (27), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-17 18:10:55,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30 states to 30 states and 34 transitions. [2024-09-17 18:10:55,812 INFO L78 Accepts]: Start accepts. Automaton has 30 states and 34 transitions. Word has length 21 [2024-09-17 18:10:55,812 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-17 18:10:55,812 INFO L474 AbstractCegarLoop]: Abstraction has 30 states and 34 transitions. [2024-09-17 18:10:55,812 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 6 states have (on average 2.0) internal successors, (12), 4 states have internal predecessors, (12), 3 states have call successors, (4), 4 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-17 18:10:55,813 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:55,813 INFO L276 IsEmpty]: Start isEmpty. Operand 30 states and 34 transitions. [2024-09-17 18:10:55,814 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2024-09-17 18:10:55,815 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:10:55,815 INFO L216 NwaCegarLoop]: trace histogram [4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:10:55,816 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2024-09-17 18:10:55,816 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:10:55,817 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:55,818 INFO L85 PathProgramCache]: Analyzing trace with hash 1674322940, now seen corresponding path program 1 times [2024-09-17 18:10:55,818 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:10:55,818 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2140143068] [2024-09-17 18:10:55,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:10:55,819 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:10:55,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:55,927 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:10:55,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:55,941 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2024-09-17 18:10:55,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:55,979 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-17 18:10:55,979 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:10:55,979 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2140143068] [2024-09-17 18:10:55,980 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2140143068] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-17 18:10:55,980 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1986766989] [2024-09-17 18:10:55,980 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:10:55,980 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:10:55,980 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-17 18:10:55,982 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-17 18:10:55,987 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-17 18:10:56,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:56,057 INFO L262 TraceCheckSpWp]: Trace formula consists of 139 conjuncts, 6 conjuncts are in the unsatisfiable core [2024-09-17 18:10:56,059 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-17 18:10:56,127 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-17 18:10:56,128 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-17 18:10:56,215 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-17 18:10:56,216 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1986766989] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-17 18:10:56,216 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-17 18:10:56,216 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 13 [2024-09-17 18:10:56,216 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2096264818] [2024-09-17 18:10:56,216 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-17 18:10:56,217 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2024-09-17 18:10:56,217 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:10:56,218 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2024-09-17 18:10:56,218 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=123, Unknown=0, NotChecked=0, Total=156 [2024-09-17 18:10:56,219 INFO L87 Difference]: Start difference. First operand 30 states and 34 transitions. Second operand has 13 states, 13 states have (on average 2.6153846153846154) internal successors, (34), 11 states have internal predecessors, (34), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-17 18:10:56,750 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-17 18:10:56,750 INFO L93 Difference]: Finished difference Result 70 states and 87 transitions. [2024-09-17 18:10:56,750 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2024-09-17 18:10:56,751 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 2.6153846153846154) internal successors, (34), 11 states have internal predecessors, (34), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 24 [2024-09-17 18:10:56,751 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-17 18:10:56,752 INFO L225 Difference]: With dead ends: 70 [2024-09-17 18:10:56,752 INFO L226 Difference]: Without dead ends: 50 [2024-09-17 18:10:56,753 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 44 SyntacticMatches, 4 SemanticMatches, 27 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 98 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=210, Invalid=602, Unknown=0, NotChecked=0, Total=812 [2024-09-17 18:10:56,753 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 109 mSDsluCounter, 10 mSDsCounter, 0 mSdLazyCounter, 276 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 109 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 299 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 276 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-17 18:10:56,754 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [109 Valid, 13 Invalid, 299 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 276 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-17 18:10:56,754 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50 states. [2024-09-17 18:10:56,763 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50 to 32. [2024-09-17 18:10:56,764 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32 states, 24 states have (on average 1.2083333333333333) internal successors, (29), 24 states have internal predecessors, (29), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-17 18:10:56,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32 states to 32 states and 36 transitions. [2024-09-17 18:10:56,765 INFO L78 Accepts]: Start accepts. Automaton has 32 states and 36 transitions. Word has length 24 [2024-09-17 18:10:56,765 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-17 18:10:56,765 INFO L474 AbstractCegarLoop]: Abstraction has 32 states and 36 transitions. [2024-09-17 18:10:56,765 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 2.6153846153846154) internal successors, (34), 11 states have internal predecessors, (34), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-17 18:10:56,766 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:56,766 INFO L276 IsEmpty]: Start isEmpty. Operand 32 states and 36 transitions. [2024-09-17 18:10:56,767 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2024-09-17 18:10:56,767 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:10:56,767 INFO L216 NwaCegarLoop]: trace histogram [5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:10:56,785 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2024-09-17 18:10:56,967 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:10:56,968 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:10:56,968 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:56,968 INFO L85 PathProgramCache]: Analyzing trace with hash 2009987497, now seen corresponding path program 1 times [2024-09-17 18:10:56,968 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:10:56,969 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [408561929] [2024-09-17 18:10:56,969 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:10:56,969 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:10:56,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:57,050 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:10:57,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:57,065 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-17 18:10:57,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:57,116 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-09-17 18:10:57,117 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:10:57,117 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [408561929] [2024-09-17 18:10:57,117 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [408561929] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-17 18:10:57,117 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2014440829] [2024-09-17 18:10:57,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:10:57,118 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:10:57,118 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-17 18:10:57,120 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-17 18:10:57,122 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-17 18:10:57,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:57,187 INFO L262 TraceCheckSpWp]: Trace formula consists of 156 conjuncts, 5 conjuncts are in the unsatisfiable core [2024-09-17 18:10:57,189 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-17 18:10:57,271 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-17 18:10:57,271 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-17 18:10:57,416 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-17 18:10:57,417 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2014440829] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-17 18:10:57,417 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-17 18:10:57,417 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 6, 7] total 16 [2024-09-17 18:10:57,417 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [959180427] [2024-09-17 18:10:57,417 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-17 18:10:57,418 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 16 states [2024-09-17 18:10:57,418 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:10:57,418 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 16 interpolants. [2024-09-17 18:10:57,419 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=186, Unknown=0, NotChecked=0, Total=240 [2024-09-17 18:10:57,419 INFO L87 Difference]: Start difference. First operand 32 states and 36 transitions. Second operand has 16 states, 16 states have (on average 2.5625) internal successors, (41), 13 states have internal predecessors, (41), 4 states have call successors, (8), 6 states have call predecessors, (8), 5 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-17 18:10:57,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-17 18:10:57,970 INFO L93 Difference]: Finished difference Result 83 states and 112 transitions. [2024-09-17 18:10:57,971 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2024-09-17 18:10:57,971 INFO L78 Accepts]: Start accepts. Automaton has has 16 states, 16 states have (on average 2.5625) internal successors, (41), 13 states have internal predecessors, (41), 4 states have call successors, (8), 6 states have call predecessors, (8), 5 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 28 [2024-09-17 18:10:57,971 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-17 18:10:57,972 INFO L225 Difference]: With dead ends: 83 [2024-09-17 18:10:57,972 INFO L226 Difference]: Without dead ends: 66 [2024-09-17 18:10:57,973 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 50 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 190 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=289, Invalid=767, Unknown=0, NotChecked=0, Total=1056 [2024-09-17 18:10:57,974 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 290 mSDsluCounter, 10 mSDsCounter, 0 mSdLazyCounter, 241 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 290 SdHoareTripleChecker+Valid, 13 SdHoareTripleChecker+Invalid, 272 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-17 18:10:57,974 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [290 Valid, 13 Invalid, 272 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 241 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-17 18:10:57,975 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66 states. [2024-09-17 18:10:58,007 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66 to 62. [2024-09-17 18:10:58,009 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62 states, 54 states have (on average 1.2777777777777777) internal successors, (69), 54 states have internal predecessors, (69), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-17 18:10:58,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62 states to 62 states and 76 transitions. [2024-09-17 18:10:58,012 INFO L78 Accepts]: Start accepts. Automaton has 62 states and 76 transitions. Word has length 28 [2024-09-17 18:10:58,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-17 18:10:58,013 INFO L474 AbstractCegarLoop]: Abstraction has 62 states and 76 transitions. [2024-09-17 18:10:58,013 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 16 states, 16 states have (on average 2.5625) internal successors, (41), 13 states have internal predecessors, (41), 4 states have call successors, (8), 6 states have call predecessors, (8), 5 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-17 18:10:58,013 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:58,013 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 76 transitions. [2024-09-17 18:10:58,014 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2024-09-17 18:10:58,015 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:10:58,015 INFO L216 NwaCegarLoop]: trace histogram [9, 9, 9, 5, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:10:58,033 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-09-17 18:10:58,218 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2024-09-17 18:10:58,219 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:10:58,220 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:58,220 INFO L85 PathProgramCache]: Analyzing trace with hash 752690779, now seen corresponding path program 2 times [2024-09-17 18:10:58,220 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:10:58,220 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1455436316] [2024-09-17 18:10:58,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:10:58,221 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:10:58,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:58,339 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:10:58,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:58,350 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-17 18:10:58,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:58,468 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 0 proven. 108 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2024-09-17 18:10:58,469 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:10:58,469 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1455436316] [2024-09-17 18:10:58,469 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1455436316] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-17 18:10:58,469 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [372697196] [2024-09-17 18:10:58,470 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-17 18:10:58,470 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:10:58,470 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-17 18:10:58,472 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-17 18:10:58,475 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-17 18:10:58,568 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-17 18:10:58,568 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-17 18:10:58,570 INFO L262 TraceCheckSpWp]: Trace formula consists of 264 conjuncts, 6 conjuncts are in the unsatisfiable core [2024-09-17 18:10:58,573 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-17 18:10:58,766 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 0 proven. 108 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2024-09-17 18:10:58,769 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-17 18:10:59,049 INFO L134 CoverageAnalysis]: Checked inductivity of 162 backedges. 0 proven. 108 refuted. 0 times theorem prover too weak. 54 trivial. 0 not checked. [2024-09-17 18:10:59,051 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [372697196] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-17 18:10:59,051 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-17 18:10:59,051 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 7, 8] total 19 [2024-09-17 18:10:59,052 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [709619017] [2024-09-17 18:10:59,052 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-17 18:10:59,052 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2024-09-17 18:10:59,052 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:10:59,053 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2024-09-17 18:10:59,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2024-09-17 18:10:59,054 INFO L87 Difference]: Start difference. First operand 62 states and 76 transitions. Second operand has 19 states, 19 states have (on average 4.0) internal successors, (76), 16 states have internal predecessors, (76), 4 states have call successors, (8), 6 states have call predecessors, (8), 4 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-17 18:10:59,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-17 18:10:59,340 INFO L93 Difference]: Finished difference Result 84 states and 104 transitions. [2024-09-17 18:10:59,340 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-09-17 18:10:59,340 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 19 states have (on average 4.0) internal successors, (76), 16 states have internal predecessors, (76), 4 states have call successors, (8), 6 states have call predecessors, (8), 4 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) Word has length 58 [2024-09-17 18:10:59,341 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-17 18:10:59,342 INFO L225 Difference]: With dead ends: 84 [2024-09-17 18:10:59,342 INFO L226 Difference]: Without dead ends: 72 [2024-09-17 18:10:59,342 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 135 GetRequests, 109 SyntacticMatches, 0 SemanticMatches, 26 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 151 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=200, Invalid=556, Unknown=0, NotChecked=0, Total=756 [2024-09-17 18:10:59,344 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 137 mSDsluCounter, 5 mSDsCounter, 0 mSdLazyCounter, 167 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 137 SdHoareTripleChecker+Valid, 8 SdHoareTripleChecker+Invalid, 183 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 167 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-17 18:10:59,344 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [137 Valid, 8 Invalid, 183 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 167 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-17 18:10:59,346 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2024-09-17 18:10:59,369 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 72. [2024-09-17 18:10:59,370 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 72 states, 64 states have (on average 1.296875) internal successors, (83), 64 states have internal predecessors, (83), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-17 18:10:59,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 90 transitions. [2024-09-17 18:10:59,374 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 90 transitions. Word has length 58 [2024-09-17 18:10:59,376 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-17 18:10:59,376 INFO L474 AbstractCegarLoop]: Abstraction has 72 states and 90 transitions. [2024-09-17 18:10:59,376 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 19 states have (on average 4.0) internal successors, (76), 16 states have internal predecessors, (76), 4 states have call successors, (8), 6 states have call predecessors, (8), 4 states have return successors, (5), 3 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-17 18:10:59,377 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:59,377 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 90 transitions. [2024-09-17 18:10:59,378 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2024-09-17 18:10:59,381 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:10:59,382 INFO L216 NwaCegarLoop]: trace histogram [9, 9, 9, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:10:59,400 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Forceful destruction successful, exit code 0 [2024-09-17 18:10:59,582 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:10:59,582 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:10:59,583 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:10:59,583 INFO L85 PathProgramCache]: Analyzing trace with hash 1101248827, now seen corresponding path program 3 times [2024-09-17 18:10:59,583 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:10:59,583 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [564206520] [2024-09-17 18:10:59,583 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:10:59,583 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:10:59,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:59,706 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:10:59,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:59,717 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-17 18:10:59,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:10:59,843 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 0 proven. 147 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2024-09-17 18:10:59,844 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:10:59,844 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [564206520] [2024-09-17 18:10:59,844 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [564206520] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-17 18:10:59,844 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1993652554] [2024-09-17 18:10:59,844 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-17 18:10:59,845 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:10:59,845 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-17 18:10:59,847 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-17 18:10:59,849 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-17 18:10:59,923 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2024-09-17 18:10:59,923 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-17 18:10:59,924 INFO L262 TraceCheckSpWp]: Trace formula consists of 125 conjuncts, 12 conjuncts are in the unsatisfiable core [2024-09-17 18:10:59,927 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-17 18:10:59,965 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 11 [2024-09-17 18:11:00,274 INFO L134 CoverageAnalysis]: Checked inductivity of 203 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 198 trivial. 0 not checked. [2024-09-17 18:11:00,275 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-17 18:11:00,275 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1993652554] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-17 18:11:00,275 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-17 18:11:00,275 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [10] total 18 [2024-09-17 18:11:00,275 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2067945106] [2024-09-17 18:11:00,275 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-17 18:11:00,276 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2024-09-17 18:11:00,276 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:11:00,276 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2024-09-17 18:11:00,276 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=263, Unknown=0, NotChecked=0, Total=306 [2024-09-17 18:11:00,277 INFO L87 Difference]: Start difference. First operand 72 states and 90 transitions. Second operand has 9 states, 8 states have (on average 2.375) internal successors, (19), 8 states have internal predecessors, (19), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-17 18:11:00,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-17 18:11:00,464 INFO L93 Difference]: Finished difference Result 81 states and 99 transitions. [2024-09-17 18:11:00,464 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-09-17 18:11:00,465 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 8 states have (on average 2.375) internal successors, (19), 8 states have internal predecessors, (19), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 64 [2024-09-17 18:11:00,465 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-17 18:11:00,466 INFO L225 Difference]: With dead ends: 81 [2024-09-17 18:11:00,466 INFO L226 Difference]: Without dead ends: 79 [2024-09-17 18:11:00,467 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 57 SyntacticMatches, 1 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=67, Invalid=395, Unknown=0, NotChecked=0, Total=462 [2024-09-17 18:11:00,467 INFO L434 NwaCegarLoop]: 19 mSDtfsCounter, 18 mSDsluCounter, 88 mSDsCounter, 0 mSdLazyCounter, 73 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 18 SdHoareTripleChecker+Valid, 107 SdHoareTripleChecker+Invalid, 82 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 73 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-17 18:11:00,468 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [18 Valid, 107 Invalid, 82 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 73 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-17 18:11:00,468 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2024-09-17 18:11:00,491 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 78. [2024-09-17 18:11:00,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78 states, 68 states have (on average 1.2794117647058822) internal successors, (87), 69 states have internal predecessors, (87), 5 states have call successors, (5), 5 states have call predecessors, (5), 4 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-17 18:11:00,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 96 transitions. [2024-09-17 18:11:00,493 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 96 transitions. Word has length 64 [2024-09-17 18:11:00,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-17 18:11:00,493 INFO L474 AbstractCegarLoop]: Abstraction has 78 states and 96 transitions. [2024-09-17 18:11:00,494 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 8 states have (on average 2.375) internal successors, (19), 8 states have internal predecessors, (19), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-17 18:11:00,494 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:11:00,494 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 96 transitions. [2024-09-17 18:11:00,495 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2024-09-17 18:11:00,495 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:11:00,495 INFO L216 NwaCegarLoop]: trace histogram [9, 9, 9, 5, 5, 5, 5, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:11:00,513 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-09-17 18:11:00,696 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable7 [2024-09-17 18:11:00,696 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:11:00,697 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:11:00,697 INFO L85 PathProgramCache]: Analyzing trace with hash -2042194420, now seen corresponding path program 1 times [2024-09-17 18:11:00,697 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:11:00,697 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2141692970] [2024-09-17 18:11:00,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:11:00,697 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:11:00,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:00,829 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:11:00,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:00,839 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-17 18:11:00,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:00,941 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 60 [2024-09-17 18:11:00,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:00,945 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 2 proven. 147 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2024-09-17 18:11:00,945 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:11:00,945 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2141692970] [2024-09-17 18:11:00,945 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2141692970] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-17 18:11:00,945 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [167135419] [2024-09-17 18:11:00,946 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:11:00,946 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:11:00,946 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-17 18:11:00,948 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-17 18:11:00,949 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-17 18:11:01,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:01,049 INFO L262 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 7 conjuncts are in the unsatisfiable core [2024-09-17 18:11:01,052 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-17 18:11:01,238 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 27 proven. 120 refuted. 0 times theorem prover too weak. 60 trivial. 0 not checked. [2024-09-17 18:11:01,240 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-17 18:11:01,543 INFO L134 CoverageAnalysis]: Checked inductivity of 207 backedges. 29 proven. 120 refuted. 0 times theorem prover too weak. 58 trivial. 0 not checked. [2024-09-17 18:11:01,543 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [167135419] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-17 18:11:01,543 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-17 18:11:01,543 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 8, 9] total 21 [2024-09-17 18:11:01,544 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [935800525] [2024-09-17 18:11:01,544 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-17 18:11:01,544 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-17 18:11:01,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:11:01,545 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-17 18:11:01,545 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=100, Invalid=320, Unknown=0, NotChecked=0, Total=420 [2024-09-17 18:11:01,546 INFO L87 Difference]: Start difference. First operand 78 states and 96 transitions. Second operand has 21 states, 21 states have (on average 4.238095238095238) internal successors, (89), 19 states have internal predecessors, (89), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-17 18:11:02,008 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-17 18:11:02,009 INFO L93 Difference]: Finished difference Result 106 states and 129 transitions. [2024-09-17 18:11:02,009 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2024-09-17 18:11:02,009 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 21 states have (on average 4.238095238095238) internal successors, (89), 19 states have internal predecessors, (89), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) Word has length 71 [2024-09-17 18:11:02,010 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-17 18:11:02,013 INFO L225 Difference]: With dead ends: 106 [2024-09-17 18:11:02,014 INFO L226 Difference]: Without dead ends: 81 [2024-09-17 18:11:02,015 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 134 SyntacticMatches, 2 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 323 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=360, Invalid=1046, Unknown=0, NotChecked=0, Total=1406 [2024-09-17 18:11:02,019 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 168 mSDsluCounter, 7 mSDsCounter, 0 mSdLazyCounter, 247 mSolverCounterSat, 16 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 168 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 263 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 16 IncrementalHoareTripleChecker+Valid, 247 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-17 18:11:02,019 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [168 Valid, 10 Invalid, 263 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [16 Valid, 247 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-17 18:11:02,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 81 states. [2024-09-17 18:11:02,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 81 to 79. [2024-09-17 18:11:02,042 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 79 states, 69 states have (on average 1.2753623188405796) internal successors, (88), 70 states have internal predecessors, (88), 5 states have call successors, (5), 5 states have call predecessors, (5), 4 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-17 18:11:02,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 79 states to 79 states and 97 transitions. [2024-09-17 18:11:02,043 INFO L78 Accepts]: Start accepts. Automaton has 79 states and 97 transitions. Word has length 71 [2024-09-17 18:11:02,044 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-17 18:11:02,044 INFO L474 AbstractCegarLoop]: Abstraction has 79 states and 97 transitions. [2024-09-17 18:11:02,044 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 21 states have (on average 4.238095238095238) internal successors, (89), 19 states have internal predecessors, (89), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (5), 2 states have call predecessors, (5), 3 states have call successors, (5) [2024-09-17 18:11:02,044 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:11:02,045 INFO L276 IsEmpty]: Start isEmpty. Operand 79 states and 97 transitions. [2024-09-17 18:11:02,045 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2024-09-17 18:11:02,046 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:11:02,046 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 10, 5, 5, 5, 5, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:11:02,063 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2024-09-17 18:11:02,248 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:11:02,249 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:11:02,249 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:11:02,249 INFO L85 PathProgramCache]: Analyzing trace with hash 2083039638, now seen corresponding path program 2 times [2024-09-17 18:11:02,249 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:11:02,249 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [351761292] [2024-09-17 18:11:02,250 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:11:02,250 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:11:02,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:03,147 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:11:03,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:03,178 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-17 18:11:03,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:03,907 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-17 18:11:03,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:03,910 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 2 proven. 142 refuted. 0 times theorem prover too weak. 95 trivial. 0 not checked. [2024-09-17 18:11:03,911 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:11:03,911 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [351761292] [2024-09-17 18:11:03,911 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [351761292] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-17 18:11:03,911 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [291248685] [2024-09-17 18:11:03,911 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-17 18:11:03,912 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:11:03,912 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-17 18:11:03,913 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-17 18:11:03,920 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-17 18:11:04,044 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-17 18:11:04,044 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-17 18:11:04,047 INFO L262 TraceCheckSpWp]: Trace formula consists of 316 conjuncts, 23 conjuncts are in the unsatisfiable core [2024-09-17 18:11:04,050 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-17 18:11:04,143 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-17 18:11:04,143 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 7 [2024-09-17 18:11:04,621 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 0 proven. 109 refuted. 0 times theorem prover too weak. 130 trivial. 0 not checked. [2024-09-17 18:11:04,622 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-17 18:11:05,226 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 96 proven. 15 refuted. 0 times theorem prover too weak. 128 trivial. 0 not checked. [2024-09-17 18:11:05,226 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [291248685] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-17 18:11:05,226 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-17 18:11:05,227 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 12, 12] total 41 [2024-09-17 18:11:05,227 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [229683127] [2024-09-17 18:11:05,227 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-17 18:11:05,227 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2024-09-17 18:11:05,227 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:11:05,228 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2024-09-17 18:11:05,229 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=160, Invalid=1480, Unknown=0, NotChecked=0, Total=1640 [2024-09-17 18:11:05,229 INFO L87 Difference]: Start difference. First operand 79 states and 97 transitions. Second operand has 41 states, 41 states have (on average 2.2439024390243905) internal successors, (92), 37 states have internal predecessors, (92), 6 states have call successors, (10), 9 states have call predecessors, (10), 8 states have return successors, (8), 4 states have call predecessors, (8), 5 states have call successors, (8) [2024-09-17 18:11:07,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-17 18:11:07,012 INFO L93 Difference]: Finished difference Result 161 states and 198 transitions. [2024-09-17 18:11:07,013 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2024-09-17 18:11:07,013 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 41 states have (on average 2.2439024390243905) internal successors, (92), 37 states have internal predecessors, (92), 6 states have call successors, (10), 9 states have call predecessors, (10), 8 states have return successors, (8), 4 states have call predecessors, (8), 5 states have call successors, (8) Word has length 74 [2024-09-17 18:11:07,013 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-17 18:11:07,015 INFO L225 Difference]: With dead ends: 161 [2024-09-17 18:11:07,015 INFO L226 Difference]: Without dead ends: 101 [2024-09-17 18:11:07,016 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 199 GetRequests, 135 SyntacticMatches, 0 SemanticMatches, 64 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 788 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=602, Invalid=3688, Unknown=0, NotChecked=0, Total=4290 [2024-09-17 18:11:07,017 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 216 mSDsluCounter, 5 mSDsCounter, 0 mSdLazyCounter, 893 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 217 SdHoareTripleChecker+Valid, 8 SdHoareTripleChecker+Invalid, 916 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 893 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-17 18:11:07,017 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [217 Valid, 8 Invalid, 916 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 893 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-17 18:11:07,018 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2024-09-17 18:11:07,046 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 88. [2024-09-17 18:11:07,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88 states, 78 states have (on average 1.2564102564102564) internal successors, (98), 79 states have internal predecessors, (98), 5 states have call successors, (5), 5 states have call predecessors, (5), 4 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-17 18:11:07,047 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88 states to 88 states and 107 transitions. [2024-09-17 18:11:07,048 INFO L78 Accepts]: Start accepts. Automaton has 88 states and 107 transitions. Word has length 74 [2024-09-17 18:11:07,048 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-17 18:11:07,048 INFO L474 AbstractCegarLoop]: Abstraction has 88 states and 107 transitions. [2024-09-17 18:11:07,048 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 41 states have (on average 2.2439024390243905) internal successors, (92), 37 states have internal predecessors, (92), 6 states have call successors, (10), 9 states have call predecessors, (10), 8 states have return successors, (8), 4 states have call predecessors, (8), 5 states have call successors, (8) [2024-09-17 18:11:07,049 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:11:07,049 INFO L276 IsEmpty]: Start isEmpty. Operand 88 states and 107 transitions. [2024-09-17 18:11:07,050 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2024-09-17 18:11:07,050 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:11:07,050 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 8, 5, 5, 5, 5, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:11:07,067 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2024-09-17 18:11:07,254 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:11:07,255 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:11:07,255 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:11:07,255 INFO L85 PathProgramCache]: Analyzing trace with hash 1642634130, now seen corresponding path program 1 times [2024-09-17 18:11:07,255 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:11:07,255 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [981318049] [2024-09-17 18:11:07,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:11:07,256 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:11:07,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:07,616 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:11:07,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:07,629 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-17 18:11:07,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:08,251 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-17 18:11:08,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:08,254 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 2 proven. 129 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2024-09-17 18:11:08,255 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:11:08,255 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [981318049] [2024-09-17 18:11:08,255 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [981318049] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-17 18:11:08,255 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [759054384] [2024-09-17 18:11:08,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:11:08,255 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:11:08,255 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-17 18:11:08,257 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-17 18:11:08,259 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-17 18:11:08,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:08,359 INFO L262 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 21 conjuncts are in the unsatisfiable core [2024-09-17 18:11:08,361 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-17 18:11:08,440 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-17 18:11:08,441 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 7 [2024-09-17 18:11:08,828 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 0 proven. 85 refuted. 0 times theorem prover too weak. 154 trivial. 0 not checked. [2024-09-17 18:11:08,828 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-17 18:11:09,186 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 80 proven. 7 refuted. 0 times theorem prover too weak. 152 trivial. 0 not checked. [2024-09-17 18:11:09,186 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [759054384] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-17 18:11:09,186 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-17 18:11:09,186 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 11, 11] total 36 [2024-09-17 18:11:09,187 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [972266292] [2024-09-17 18:11:09,187 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-17 18:11:09,187 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2024-09-17 18:11:09,187 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:11:09,188 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2024-09-17 18:11:09,188 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=167, Invalid=1093, Unknown=0, NotChecked=0, Total=1260 [2024-09-17 18:11:09,188 INFO L87 Difference]: Start difference. First operand 88 states and 107 transitions. Second operand has 36 states, 36 states have (on average 2.361111111111111) internal successors, (85), 32 states have internal predecessors, (85), 5 states have call successors, (10), 9 states have call predecessors, (10), 8 states have return successors, (8), 4 states have call predecessors, (8), 5 states have call successors, (8) [2024-09-17 18:11:09,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-17 18:11:09,803 INFO L93 Difference]: Finished difference Result 159 states and 193 transitions. [2024-09-17 18:11:09,803 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2024-09-17 18:11:09,803 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 2.361111111111111) internal successors, (85), 32 states have internal predecessors, (85), 5 states have call successors, (10), 9 states have call predecessors, (10), 8 states have return successors, (8), 4 states have call predecessors, (8), 5 states have call successors, (8) Word has length 74 [2024-09-17 18:11:09,803 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-17 18:11:09,804 INFO L225 Difference]: With dead ends: 159 [2024-09-17 18:11:09,804 INFO L226 Difference]: Without dead ends: 101 [2024-09-17 18:11:09,805 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 183 GetRequests, 136 SyntacticMatches, 0 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 535 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=377, Invalid=1975, Unknown=0, NotChecked=0, Total=2352 [2024-09-17 18:11:09,806 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 106 mSDsluCounter, 2 mSDsCounter, 0 mSdLazyCounter, 582 mSolverCounterSat, 13 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 107 SdHoareTripleChecker+Valid, 5 SdHoareTripleChecker+Invalid, 595 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 13 IncrementalHoareTripleChecker+Valid, 582 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-17 18:11:09,806 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [107 Valid, 5 Invalid, 595 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [13 Valid, 582 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-09-17 18:11:09,806 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101 states. [2024-09-17 18:11:09,833 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101 to 91. [2024-09-17 18:11:09,833 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 91 states, 81 states have (on average 1.2469135802469136) internal successors, (101), 82 states have internal predecessors, (101), 5 states have call successors, (5), 5 states have call predecessors, (5), 4 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-17 18:11:09,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 110 transitions. [2024-09-17 18:11:09,834 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 110 transitions. Word has length 74 [2024-09-17 18:11:09,834 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-17 18:11:09,834 INFO L474 AbstractCegarLoop]: Abstraction has 91 states and 110 transitions. [2024-09-17 18:11:09,834 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 2.361111111111111) internal successors, (85), 32 states have internal predecessors, (85), 5 states have call successors, (10), 9 states have call predecessors, (10), 8 states have return successors, (8), 4 states have call predecessors, (8), 5 states have call successors, (8) [2024-09-17 18:11:09,834 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:11:09,835 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 110 transitions. [2024-09-17 18:11:09,835 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2024-09-17 18:11:09,835 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:11:09,835 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 7, 5, 5, 5, 5, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:11:09,848 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Forceful destruction successful, exit code 0 [2024-09-17 18:11:10,036 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:11:10,036 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:11:10,036 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:11:10,037 INFO L85 PathProgramCache]: Analyzing trace with hash 2086534804, now seen corresponding path program 2 times [2024-09-17 18:11:10,037 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:11:10,037 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [95376284] [2024-09-17 18:11:10,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:11:10,037 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:11:10,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:10,618 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:11:10,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:10,645 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-17 18:11:10,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:10,673 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-17 18:11:10,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:10,678 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 3 proven. 16 refuted. 0 times theorem prover too weak. 220 trivial. 0 not checked. [2024-09-17 18:11:10,678 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:11:10,678 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [95376284] [2024-09-17 18:11:10,678 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [95376284] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-17 18:11:10,678 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1980344756] [2024-09-17 18:11:10,678 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-17 18:11:10,679 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:11:10,679 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-17 18:11:10,681 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-17 18:11:10,682 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-17 18:11:10,783 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-17 18:11:10,783 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-17 18:11:10,789 INFO L262 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 17 conjuncts are in the unsatisfiable core [2024-09-17 18:11:10,791 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-17 18:11:10,873 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-17 18:11:10,873 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 15 treesize of output 7 [2024-09-17 18:11:11,136 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 211 trivial. 0 not checked. [2024-09-17 18:11:11,136 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-17 18:11:11,438 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 209 trivial. 0 not checked. [2024-09-17 18:11:11,439 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1980344756] provided 1 perfect and 1 imperfect interpolant sequences [2024-09-17 18:11:11,439 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-09-17 18:11:11,439 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [17, 8] total 29 [2024-09-17 18:11:11,439 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [53050947] [2024-09-17 18:11:11,439 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-17 18:11:11,440 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2024-09-17 18:11:11,440 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:11:11,440 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2024-09-17 18:11:11,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=96, Invalid=716, Unknown=0, NotChecked=0, Total=812 [2024-09-17 18:11:11,441 INFO L87 Difference]: Start difference. First operand 91 states and 110 transitions. Second operand has 8 states, 8 states have (on average 3.25) internal successors, (26), 7 states have internal predecessors, (26), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-17 18:11:11,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-17 18:11:11,628 INFO L93 Difference]: Finished difference Result 158 states and 191 transitions. [2024-09-17 18:11:11,628 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-09-17 18:11:11,628 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 3.25) internal successors, (26), 7 states have internal predecessors, (26), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) Word has length 74 [2024-09-17 18:11:11,628 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-17 18:11:11,629 INFO L225 Difference]: With dead ends: 158 [2024-09-17 18:11:11,629 INFO L226 Difference]: Without dead ends: 94 [2024-09-17 18:11:11,630 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 171 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 273 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=128, Invalid=928, Unknown=0, NotChecked=0, Total=1056 [2024-09-17 18:11:11,630 INFO L434 NwaCegarLoop]: 20 mSDtfsCounter, 30 mSDsluCounter, 47 mSDsCounter, 0 mSdLazyCounter, 87 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 30 SdHoareTripleChecker+Valid, 67 SdHoareTripleChecker+Invalid, 91 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 87 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-17 18:11:11,631 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [30 Valid, 67 Invalid, 91 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 87 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-17 18:11:11,631 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 94 states. [2024-09-17 18:11:11,684 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 94 to 85. [2024-09-17 18:11:11,685 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85 states, 75 states have (on average 1.2533333333333334) internal successors, (94), 76 states have internal predecessors, (94), 5 states have call successors, (5), 5 states have call predecessors, (5), 4 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-17 18:11:11,686 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85 states to 85 states and 103 transitions. [2024-09-17 18:11:11,686 INFO L78 Accepts]: Start accepts. Automaton has 85 states and 103 transitions. Word has length 74 [2024-09-17 18:11:11,686 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-17 18:11:11,687 INFO L474 AbstractCegarLoop]: Abstraction has 85 states and 103 transitions. [2024-09-17 18:11:11,687 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 3.25) internal successors, (26), 7 states have internal predecessors, (26), 3 states have call successors, (5), 4 states have call predecessors, (5), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-17 18:11:11,687 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:11:11,687 INFO L276 IsEmpty]: Start isEmpty. Operand 85 states and 103 transitions. [2024-09-17 18:11:11,688 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 75 [2024-09-17 18:11:11,688 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:11:11,688 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 8, 5, 5, 5, 5, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:11:11,706 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2024-09-17 18:11:11,889 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2024-09-17 18:11:11,890 INFO L399 AbstractCegarLoop]: === Iteration 13 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:11:11,890 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:11:11,891 INFO L85 PathProgramCache]: Analyzing trace with hash -2132308138, now seen corresponding path program 3 times [2024-09-17 18:11:11,891 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:11:11,891 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [922583654] [2024-09-17 18:11:11,891 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:11:11,892 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:11:11,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:12,564 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:11:12,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:12,587 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-17 18:11:12,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:13,242 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-17 18:11:13,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:13,245 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 2 proven. 142 refuted. 0 times theorem prover too weak. 95 trivial. 0 not checked. [2024-09-17 18:11:13,245 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:11:13,245 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [922583654] [2024-09-17 18:11:13,245 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [922583654] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-17 18:11:13,245 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2121326679] [2024-09-17 18:11:13,245 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-17 18:11:13,246 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:11:13,246 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-17 18:11:13,247 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-17 18:11:13,249 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-09-17 18:11:13,338 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2024-09-17 18:11:13,338 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-17 18:11:13,340 INFO L262 TraceCheckSpWp]: Trace formula consists of 177 conjuncts, 21 conjuncts are in the unsatisfiable core [2024-09-17 18:11:13,342 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-17 18:11:13,347 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 18 treesize of output 14 [2024-09-17 18:11:13,378 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 32 [2024-09-17 18:11:13,979 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 9 proven. 4 refuted. 0 times theorem prover too weak. 226 trivial. 0 not checked. [2024-09-17 18:11:13,979 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-17 18:11:14,224 INFO L134 CoverageAnalysis]: Checked inductivity of 239 backedges. 10 proven. 3 refuted. 0 times theorem prover too weak. 226 trivial. 0 not checked. [2024-09-17 18:11:14,224 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2121326679] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-17 18:11:14,224 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-17 18:11:14,225 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [22, 11, 10] total 36 [2024-09-17 18:11:14,225 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1790261311] [2024-09-17 18:11:14,225 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-17 18:11:14,225 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2024-09-17 18:11:14,225 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:11:14,226 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2024-09-17 18:11:14,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=123, Invalid=1137, Unknown=0, NotChecked=0, Total=1260 [2024-09-17 18:11:14,227 INFO L87 Difference]: Start difference. First operand 85 states and 103 transitions. Second operand has 36 states, 34 states have (on average 2.411764705882353) internal successors, (82), 33 states have internal predecessors, (82), 10 states have call successors, (13), 7 states have call predecessors, (13), 4 states have return successors, (8), 7 states have call predecessors, (8), 7 states have call successors, (8) [2024-09-17 18:11:15,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-17 18:11:15,843 INFO L93 Difference]: Finished difference Result 151 states and 184 transitions. [2024-09-17 18:11:15,843 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2024-09-17 18:11:15,843 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 34 states have (on average 2.411764705882353) internal successors, (82), 33 states have internal predecessors, (82), 10 states have call successors, (13), 7 states have call predecessors, (13), 4 states have return successors, (8), 7 states have call predecessors, (8), 7 states have call successors, (8) Word has length 74 [2024-09-17 18:11:15,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-17 18:11:15,844 INFO L225 Difference]: With dead ends: 151 [2024-09-17 18:11:15,844 INFO L226 Difference]: Without dead ends: 90 [2024-09-17 18:11:15,846 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 201 GetRequests, 136 SyntacticMatches, 5 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 800 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=447, Invalid=3335, Unknown=0, NotChecked=0, Total=3782 [2024-09-17 18:11:15,847 INFO L434 NwaCegarLoop]: 3 mSDtfsCounter, 110 mSDsluCounter, 27 mSDsCounter, 0 mSdLazyCounter, 933 mSolverCounterSat, 26 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 110 SdHoareTripleChecker+Valid, 30 SdHoareTripleChecker+Invalid, 959 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 26 IncrementalHoareTripleChecker+Valid, 933 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-17 18:11:15,847 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [110 Valid, 30 Invalid, 959 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [26 Valid, 933 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-17 18:11:15,848 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 90 states. [2024-09-17 18:11:15,890 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 90 to 89. [2024-09-17 18:11:15,890 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 89 states, 77 states have (on average 1.2207792207792207) internal successors, (94), 78 states have internal predecessors, (94), 6 states have call successors, (6), 6 states have call predecessors, (6), 5 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-17 18:11:15,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 105 transitions. [2024-09-17 18:11:15,891 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 105 transitions. Word has length 74 [2024-09-17 18:11:15,891 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-17 18:11:15,891 INFO L474 AbstractCegarLoop]: Abstraction has 89 states and 105 transitions. [2024-09-17 18:11:15,892 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 34 states have (on average 2.411764705882353) internal successors, (82), 33 states have internal predecessors, (82), 10 states have call successors, (13), 7 states have call predecessors, (13), 4 states have return successors, (8), 7 states have call predecessors, (8), 7 states have call successors, (8) [2024-09-17 18:11:15,892 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:11:15,892 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 105 transitions. [2024-09-17 18:11:15,893 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 82 [2024-09-17 18:11:15,893 INFO L208 NwaCegarLoop]: Found error trace [2024-09-17 18:11:15,893 INFO L216 NwaCegarLoop]: trace histogram [10, 10, 7, 5, 5, 5, 5, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-17 18:11:15,907 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2024-09-17 18:11:16,093 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2024-09-17 18:11:16,094 INFO L399 AbstractCegarLoop]: === Iteration 14 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-17 18:11:16,094 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-17 18:11:16,094 INFO L85 PathProgramCache]: Analyzing trace with hash 1023722515, now seen corresponding path program 4 times [2024-09-17 18:11:16,095 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-17 18:11:16,095 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1724454441] [2024-09-17 18:11:16,095 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-17 18:11:16,095 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-17 18:11:16,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:16,439 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-17 18:11:16,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:16,452 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2024-09-17 18:11:16,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:17,983 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 63 [2024-09-17 18:11:17,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:17,985 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 70 [2024-09-17 18:11:17,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-17 18:11:17,987 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 27 proven. 152 refuted. 0 times theorem prover too weak. 71 trivial. 0 not checked. [2024-09-17 18:11:17,987 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-17 18:11:17,987 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1724454441] [2024-09-17 18:11:17,987 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1724454441] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-17 18:11:17,987 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1334162609] [2024-09-17 18:11:17,988 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-17 18:11:17,988 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-17 18:11:17,988 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-17 18:11:17,990 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-17 18:11:17,995 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-09-17 18:11:18,085 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-17 18:11:18,085 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-17 18:11:18,087 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 48 conjuncts are in the unsatisfiable core [2024-09-17 18:11:18,090 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-17 18:11:18,276 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 28 treesize of output 7 [2024-09-17 18:11:18,654 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-17 18:11:18,654 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 80 treesize of output 47 [2024-09-17 18:11:18,826 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-17 18:11:18,826 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 53 treesize of output 17 [2024-09-17 18:11:18,855 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 84 proven. 122 refuted. 0 times theorem prover too weak. 44 trivial. 0 not checked. [2024-09-17 18:11:18,856 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-17 18:11:23,721 INFO L134 CoverageAnalysis]: Checked inductivity of 250 backedges. 164 proven. 24 refuted. 0 times theorem prover too weak. 62 trivial. 0 not checked. [2024-09-17 18:11:23,722 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1334162609] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-17 18:11:23,722 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-17 18:11:23,722 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [27, 22, 15] total 60 [2024-09-17 18:11:23,722 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [819071597] [2024-09-17 18:11:23,723 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-17 18:11:23,723 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 60 states [2024-09-17 18:11:23,723 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-17 18:11:23,724 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 60 interpolants. [2024-09-17 18:11:23,726 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=323, Invalid=3216, Unknown=1, NotChecked=0, Total=3540 [2024-09-17 18:11:23,726 INFO L87 Difference]: Start difference. First operand 89 states and 105 transitions. Second operand has 60 states, 60 states have (on average 1.9833333333333334) internal successors, (119), 58 states have internal predecessors, (119), 3 states have call successors, (8), 5 states have call predecessors, (8), 4 states have return successors, (6), 3 states have call predecessors, (6), 3 states have call successors, (6) [2024-09-17 18:11:32,960 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:11:36,205 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.76s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:11:40,715 WARN L854 $PredicateComparison]: unable to prove that (let ((.cse5 (select |c_#memory_int#1| |c_~#array~0.base|)) (.cse9 (* c_SelectionSort_~lh~0 4))) (let ((.cse10 (+ .cse9 |c_~#array~0.offset|)) (.cse8 (+ .cse9 |c_~#array~0.offset| 8)) (.cse13 (+ c_SelectionSort_~lh~0 4)) (.cse1 (= |c_#memory_int#1| |c_old(#memory_int#1)|)) (.cse4 (select .cse5 (+ |c_~#array~0.offset| 8)))) (let ((.cse0 (and .cse1 (not (= .cse4 0)))) (.cse6 (< c_SelectionSort_~i~0 .cse13)) (.cse14 (select .cse5 .cse8)) (.cse12 (select .cse5 .cse10)) (.cse2 (= 3 c_SelectionSort_~rh~0)) (.cse3 (select .cse5 (+ |c_~#array~0.offset| 12)))) (and (= |c_~#array~0.base| |c_old(~#array~0.base)|) (or .cse0 (and .cse1 .cse2 (= c_SelectionSort_~lh~0 0) (<= (+ .cse3 .cse4 1) (select .cse5 |c_~#array~0.offset|))) .cse6) (forall ((v_ArrVal_626 Int)) (or (let ((.cse7 (let ((.cse11 (+ |c_~#array~0.offset| (* c_SelectionSort_~i~0 4)))) (store (store .cse5 .cse10 (select .cse5 .cse11)) .cse11 v_ArrVal_626)))) (< (select .cse7 .cse8) (+ (select .cse7 (+ .cse9 |c_~#array~0.offset| 12)) 1))) (< v_ArrVal_626 .cse12))) (= |c_old(~#array~0.offset)| |c_~#array~0.offset|) (<= c_SelectionSort_~i~0 .cse13) (< (select .cse5 (+ .cse9 |c_~#array~0.offset| 4)) (+ .cse14 1)) (or .cse0 .cse6 (let ((.cse15 (= |c_SelectionSort_#t~mem2| 0))) (and (or (< .cse14 .cse12) (not .cse15)) (= (+ c_SelectionSort_~lh~0 3) c_SelectionSort_~rh~0) (or .cse15 (and .cse1 .cse2 (= .cse3 |c_SelectionSort_#t~mem2|)))))) (= |c_old(~n~0)| c_~n~0) (= c_SelectionSort_~lh~0 1))))) is different from false [2024-09-17 18:11:42,113 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.33s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:11:46,125 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:11:51,279 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:11:55,335 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:11:59,632 WARN L854 $PredicateComparison]: unable to prove that (let ((.cse6 (* c_SelectionSort_~lh~0 4))) (let ((.cse1 (select |c_#memory_int#1| |c_~#array~0.base|)) (.cse7 (+ .cse6 |c_~#array~0.offset|))) (let ((.cse2 (+ .cse6 |c_~#array~0.offset| 8)) (.cse3 (select .cse1 .cse7)) (.cse4 (+ c_SelectionSort_~lh~0 4))) (and (= |c_~#array~0.base| |c_old(~#array~0.base)|) (let ((.cse0 (= |c_#memory_int#1| |c_old(#memory_int#1)|))) (or (and (= (+ c_SelectionSort_~lh~0 3) c_SelectionSort_~rh~0) (or (and .cse0 (= 3 c_SelectionSort_~rh~0) (not (= (select .cse1 (+ |c_~#array~0.offset| 12)) 0))) (< (select .cse1 .cse2) .cse3))) (and .cse0 (not (= (select .cse1 (+ |c_~#array~0.offset| 8)) 0))) (< c_SelectionSort_~i~0 .cse4))) (forall ((v_ArrVal_626 Int)) (or (let ((.cse5 (let ((.cse8 (+ |c_~#array~0.offset| (* c_SelectionSort_~i~0 4)))) (store (store .cse1 .cse7 (select .cse1 .cse8)) .cse8 v_ArrVal_626)))) (< (select .cse5 .cse2) (+ (select .cse5 (+ .cse6 |c_~#array~0.offset| 12)) 1))) (< v_ArrVal_626 .cse3))) (= |c_old(~#array~0.offset)| |c_~#array~0.offset|) (<= c_SelectionSort_~i~0 .cse4) (= |c_old(~n~0)| c_~n~0))))) is different from false [2024-09-17 18:12:03,922 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:12:17,981 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:12:27,274 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:12:31,448 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:12:32,780 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.33s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:12:38,802 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:12:48,470 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:12:52,486 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:12:59,621 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:13:04,259 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:13:08,283 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:13:42,827 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:13:46,904 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:13:50,914 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:13:54,951 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:14:12,289 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:14:16,539 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:14:26,105 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:14:30,117 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1] [2024-09-17 18:14:42,755 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [1]