./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/loops/sum_array-2-2.i --full-output --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f1d7dc9d Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/loops/sum_array-2-2.i -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0cf9175e436d0e00a51b884dabf87739d3176e3315a908e56fcba99730a10796 --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --- Real Ultimate output --- This is Ultimate 0.2.4-tmp.dk.referee-eval-f1d7dc9-m [2024-09-20 11:56:47,665 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-20 11:56:47,746 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-20 11:56:47,750 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-20 11:56:47,753 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-20 11:56:47,782 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-20 11:56:47,782 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-20 11:56:47,783 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-20 11:56:47,783 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-20 11:56:47,784 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-20 11:56:47,784 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-20 11:56:47,785 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-20 11:56:47,785 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-20 11:56:47,786 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-20 11:56:47,788 INFO L153 SettingsManager]: * Use SBE=true [2024-09-20 11:56:47,788 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-20 11:56:47,788 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-20 11:56:47,789 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-20 11:56:47,789 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-20 11:56:47,789 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-20 11:56:47,789 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-20 11:56:47,790 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-20 11:56:47,791 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-20 11:56:47,791 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-20 11:56:47,791 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-20 11:56:47,791 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-20 11:56:47,792 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-20 11:56:47,792 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-20 11:56:47,792 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-20 11:56:47,792 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-20 11:56:47,794 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-20 11:56:47,794 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-20 11:56:47,794 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-20 11:56:47,795 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-20 11:56:47,795 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-20 11:56:47,795 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-20 11:56:47,795 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-20 11:56:47,795 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-20 11:56:47,796 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-20 11:56:47,796 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-20 11:56:47,796 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-20 11:56:47,801 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-20 11:56:47,801 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0cf9175e436d0e00a51b884dabf87739d3176e3315a908e56fcba99730a10796 Applying setting for plugin de.uni_freiburg.informatik.ultimate.boogie.procedureinliner: Inline calls to implemented procedures -> NEVER Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Generate GraphML witnesses -> false [2024-09-20 11:56:48,033 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-20 11:56:48,057 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-20 11:56:48,060 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-20 11:56:48,061 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-20 11:56:48,061 INFO L274 PluginConnector]: CDTParser initialized [2024-09-20 11:56:48,062 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/loops/sum_array-2-2.i [2024-09-20 11:56:49,443 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-20 11:56:49,616 INFO L384 CDTParser]: Found 1 translation units. [2024-09-20 11:56:49,617 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/sum_array-2-2.i [2024-09-20 11:56:49,626 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/ca6d47969/1f61b1690ba749e6b2b2a9711036610d/FLAG2ceac7eb2 [2024-09-20 11:56:49,639 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/ca6d47969/1f61b1690ba749e6b2b2a9711036610d [2024-09-20 11:56:49,641 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-20 11:56:49,643 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-20 11:56:49,645 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-20 11:56:49,645 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-20 11:56:49,649 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-20 11:56:49,649 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,650 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6fa8450f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49, skipping insertion in model container [2024-09-20 11:56:49,650 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,669 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-20 11:56:49,823 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/sum_array-2-2.i[940,953] [2024-09-20 11:56:49,845 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-20 11:56:49,852 INFO L200 MainTranslator]: Completed pre-run [2024-09-20 11:56:49,862 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/sum_array-2-2.i[940,953] [2024-09-20 11:56:49,874 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-20 11:56:49,893 INFO L204 MainTranslator]: Completed translation [2024-09-20 11:56:49,893 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49 WrapperNode [2024-09-20 11:56:49,893 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-20 11:56:49,896 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-20 11:56:49,896 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-20 11:56:49,896 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-20 11:56:49,903 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,910 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,916 INFO L138 Inliner]: procedures = 18, calls = 37, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2024-09-20 11:56:49,917 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-20 11:56:49,917 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-20 11:56:49,918 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-20 11:56:49,918 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-20 11:56:49,942 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,942 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,945 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,971 INFO L175 MemorySlicer]: Split 14 memory accesses to 4 slices as follows [2, 5, 2, 5]. 36 percent of accesses are in the largest equivalence class. The 2 initializations are split as follows [2, 0, 0, 0]. The 3 writes are split as follows [0, 1, 1, 1]. [2024-09-20 11:56:49,971 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,972 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,977 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,982 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,983 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,984 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,986 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-20 11:56:49,987 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-20 11:56:49,987 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-20 11:56:49,988 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-20 11:56:49,988 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49" (1/1) ... [2024-09-20 11:56:49,997 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-20 11:56:50,007 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 11:56:50,020 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-20 11:56:50,022 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-20 11:56:50,059 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-20 11:56:50,059 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-09-20 11:56:50,059 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-09-20 11:56:50,060 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-20 11:56:50,060 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-20 11:56:50,060 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-09-20 11:56:50,060 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-09-20 11:56:50,060 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-09-20 11:56:50,060 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-09-20 11:56:50,060 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-09-20 11:56:50,061 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-09-20 11:56:50,061 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2024-09-20 11:56:50,061 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-09-20 11:56:50,061 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-09-20 11:56:50,061 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-20 11:56:50,061 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-20 11:56:50,061 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-09-20 11:56:50,061 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-09-20 11:56:50,061 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-09-20 11:56:50,062 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2024-09-20 11:56:50,062 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-20 11:56:50,062 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-20 11:56:50,062 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-09-20 11:56:50,136 INFO L242 CfgBuilder]: Building ICFG [2024-09-20 11:56:50,137 INFO L268 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-20 11:56:50,347 INFO L? ?]: Removed 11 outVars from TransFormulas that were not future-live. [2024-09-20 11:56:50,347 INFO L291 CfgBuilder]: Performing block encoding [2024-09-20 11:56:50,367 INFO L313 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-20 11:56:50,367 INFO L318 CfgBuilder]: Removed 4 assume(true) statements. [2024-09-20 11:56:50,368 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.09 11:56:50 BoogieIcfgContainer [2024-09-20 11:56:50,368 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-20 11:56:50,370 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-20 11:56:50,370 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-20 11:56:50,374 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-20 11:56:50,375 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.09 11:56:49" (1/3) ... [2024-09-20 11:56:50,375 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1d2ad339 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.09 11:56:50, skipping insertion in model container [2024-09-20 11:56:50,376 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 11:56:49" (2/3) ... [2024-09-20 11:56:50,376 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1d2ad339 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.09 11:56:50, skipping insertion in model container [2024-09-20 11:56:50,376 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.09 11:56:50" (3/3) ... [2024-09-20 11:56:50,377 INFO L112 eAbstractionObserver]: Analyzing ICFG sum_array-2-2.i [2024-09-20 11:56:50,394 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-20 11:56:50,394 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-20 11:56:50,445 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-20 11:56:50,451 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2d909159, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-20 11:56:50,451 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-20 11:56:50,455 INFO L276 IsEmpty]: Start isEmpty. Operand has 30 states, 22 states have (on average 1.6818181818181819) internal successors, (37), 23 states have internal predecessors, (37), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-20 11:56:50,460 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-09-20 11:56:50,460 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 11:56:50,461 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 11:56:50,461 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 11:56:50,465 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:56:50,465 INFO L85 PathProgramCache]: Analyzing trace with hash 868990998, now seen corresponding path program 1 times [2024-09-20 11:56:50,472 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 11:56:50,472 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1541717033] [2024-09-20 11:56:50,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:56:50,473 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 11:56:50,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:50,622 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 11:56:50,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:50,641 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-20 11:56:50,641 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 11:56:50,642 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1541717033] [2024-09-20 11:56:50,642 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1541717033] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-20 11:56:50,643 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-20 11:56:50,643 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-09-20 11:56:50,644 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1161428974] [2024-09-20 11:56:50,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-20 11:56:50,648 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-09-20 11:56:50,649 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 11:56:50,669 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-09-20 11:56:50,670 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-20 11:56:50,672 INFO L87 Difference]: Start difference. First operand has 30 states, 22 states have (on average 1.6818181818181819) internal successors, (37), 23 states have internal predecessors, (37), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 11:56:50,712 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 11:56:50,712 INFO L93 Difference]: Finished difference Result 51 states and 73 transitions. [2024-09-20 11:56:50,714 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-09-20 11:56:50,715 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2024-09-20 11:56:50,715 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 11:56:50,721 INFO L225 Difference]: With dead ends: 51 [2024-09-20 11:56:50,721 INFO L226 Difference]: Without dead ends: 25 [2024-09-20 11:56:50,724 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-20 11:56:50,728 INFO L434 NwaCegarLoop]: 34 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 4 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 34 SdHoareTripleChecker+Invalid, 4 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 4 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-20 11:56:50,731 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 34 Invalid, 4 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 4 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-20 11:56:50,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25 states. [2024-09-20 11:56:50,777 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25 to 25. [2024-09-20 11:56:50,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25 states, 19 states have (on average 1.2105263157894737) internal successors, (23), 19 states have internal predecessors, (23), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-20 11:56:50,784 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25 states to 25 states and 28 transitions. [2024-09-20 11:56:50,786 INFO L78 Accepts]: Start accepts. Automaton has 25 states and 28 transitions. Word has length 17 [2024-09-20 11:56:50,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 11:56:50,787 INFO L474 AbstractCegarLoop]: Abstraction has 25 states and 28 transitions. [2024-09-20 11:56:50,787 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 11:56:50,788 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:56:50,788 INFO L276 IsEmpty]: Start isEmpty. Operand 25 states and 28 transitions. [2024-09-20 11:56:50,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-09-20 11:56:50,793 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 11:56:50,793 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 11:56:50,793 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-20 11:56:50,793 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 11:56:50,794 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:56:50,794 INFO L85 PathProgramCache]: Analyzing trace with hash 256506248, now seen corresponding path program 1 times [2024-09-20 11:56:50,794 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 11:56:50,794 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [695904567] [2024-09-20 11:56:50,794 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:56:50,795 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 11:56:50,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:51,136 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 11:56:51,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:51,145 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-20 11:56:51,145 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 11:56:51,146 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [695904567] [2024-09-20 11:56:51,146 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [695904567] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-20 11:56:51,147 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-20 11:56:51,147 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-09-20 11:56:51,147 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1809952301] [2024-09-20 11:56:51,147 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-20 11:56:51,148 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2024-09-20 11:56:51,149 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 11:56:51,150 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-09-20 11:56:51,151 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-09-20 11:56:51,151 INFO L87 Difference]: Start difference. First operand 25 states and 28 transitions. Second operand has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 11:56:51,262 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 11:56:51,263 INFO L93 Difference]: Finished difference Result 56 states and 67 transitions. [2024-09-20 11:56:51,263 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-09-20 11:56:51,264 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2024-09-20 11:56:51,264 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 11:56:51,266 INFO L225 Difference]: With dead ends: 56 [2024-09-20 11:56:51,266 INFO L226 Difference]: Without dead ends: 35 [2024-09-20 11:56:51,267 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2024-09-20 11:56:51,270 INFO L434 NwaCegarLoop]: 15 mSDtfsCounter, 5 mSDsluCounter, 33 mSDsCounter, 0 mSdLazyCounter, 60 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 69 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 60 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-20 11:56:51,270 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 48 Invalid, 69 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 60 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-20 11:56:51,271 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 35 states. [2024-09-20 11:56:51,277 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 35 to 28. [2024-09-20 11:56:51,277 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 22 states have (on average 1.1818181818181819) internal successors, (26), 22 states have internal predecessors, (26), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2024-09-20 11:56:51,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 31 transitions. [2024-09-20 11:56:51,281 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 31 transitions. Word has length 17 [2024-09-20 11:56:51,281 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 11:56:51,281 INFO L474 AbstractCegarLoop]: Abstraction has 28 states and 31 transitions. [2024-09-20 11:56:51,281 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 2.6) internal successors, (13), 5 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 11:56:51,282 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:56:51,283 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 31 transitions. [2024-09-20 11:56:51,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2024-09-20 11:56:51,284 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 11:56:51,284 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 11:56:51,284 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-09-20 11:56:51,285 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 11:56:51,286 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:56:51,286 INFO L85 PathProgramCache]: Analyzing trace with hash 1240316604, now seen corresponding path program 1 times [2024-09-20 11:56:51,287 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 11:56:51,287 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1706765071] [2024-09-20 11:56:51,287 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:56:51,287 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 11:56:51,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:52,537 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 11:56:52,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:52,543 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-20 11:56:52,543 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 11:56:52,543 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1706765071] [2024-09-20 11:56:52,544 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1706765071] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 11:56:52,545 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [799944614] [2024-09-20 11:56:52,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:56:52,545 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:56:52,546 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 11:56:52,548 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 11:56:52,549 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-20 11:56:52,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:52,636 INFO L262 TraceCheckSpWp]: Trace formula consists of 130 conjuncts, 26 conjuncts are in the unsatisfiable core [2024-09-20 11:56:52,643 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 11:56:52,729 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 17 [2024-09-20 11:56:52,795 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 17 [2024-09-20 11:56:52,802 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 13 [2024-09-20 11:56:52,806 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2024-09-20 11:56:52,841 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 2 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-20 11:56:52,842 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 11:56:53,082 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-20 11:56:53,082 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 83 treesize of output 63 [2024-09-20 11:56:53,098 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:56:53,098 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 46 treesize of output 25 [2024-09-20 11:56:53,105 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 40 [2024-09-20 11:56:53,119 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:56:53,119 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 2 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 40 treesize of output 87 [2024-09-20 11:56:53,169 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-20 11:56:53,170 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [799944614] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 11:56:53,170 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 11:56:53,170 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9, 8] total 17 [2024-09-20 11:56:53,170 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [913740043] [2024-09-20 11:56:53,171 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 11:56:53,171 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 17 states [2024-09-20 11:56:53,171 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 11:56:53,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2024-09-20 11:56:53,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=55, Invalid=217, Unknown=0, NotChecked=0, Total=272 [2024-09-20 11:56:53,173 INFO L87 Difference]: Start difference. First operand 28 states and 31 transitions. Second operand has 17 states, 16 states have (on average 2.6875) internal successors, (43), 15 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 11:56:53,401 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 11:56:53,401 INFO L93 Difference]: Finished difference Result 42 states and 45 transitions. [2024-09-20 11:56:53,402 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-09-20 11:56:53,402 INFO L78 Accepts]: Start accepts. Automaton has has 17 states, 16 states have (on average 2.6875) internal successors, (43), 15 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 24 [2024-09-20 11:56:53,402 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 11:56:53,403 INFO L225 Difference]: With dead ends: 42 [2024-09-20 11:56:53,403 INFO L226 Difference]: Without dead ends: 40 [2024-09-20 11:56:53,403 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 43 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 77 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=81, Invalid=299, Unknown=0, NotChecked=0, Total=380 [2024-09-20 11:56:53,404 INFO L434 NwaCegarLoop]: 12 mSDtfsCounter, 20 mSDsluCounter, 107 mSDsCounter, 0 mSdLazyCounter, 193 mSolverCounterSat, 9 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 119 SdHoareTripleChecker+Invalid, 202 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 9 IncrementalHoareTripleChecker+Valid, 193 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-20 11:56:53,405 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [21 Valid, 119 Invalid, 202 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [9 Valid, 193 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-20 11:56:53,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40 states. [2024-09-20 11:56:53,412 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40 to 34. [2024-09-20 11:56:53,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34 states, 26 states have (on average 1.1538461538461537) internal successors, (30), 27 states have internal predecessors, (30), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-20 11:56:53,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34 states to 34 states and 37 transitions. [2024-09-20 11:56:53,414 INFO L78 Accepts]: Start accepts. Automaton has 34 states and 37 transitions. Word has length 24 [2024-09-20 11:56:53,415 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 11:56:53,415 INFO L474 AbstractCegarLoop]: Abstraction has 34 states and 37 transitions. [2024-09-20 11:56:53,415 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 17 states, 16 states have (on average 2.6875) internal successors, (43), 15 states have internal predecessors, (43), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 11:56:53,416 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:56:53,416 INFO L276 IsEmpty]: Start isEmpty. Operand 34 states and 37 transitions. [2024-09-20 11:56:53,417 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2024-09-20 11:56:53,417 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 11:56:53,418 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 11:56:53,435 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-09-20 11:56:53,618 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:56:53,619 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 11:56:53,619 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:56:53,619 INFO L85 PathProgramCache]: Analyzing trace with hash 1226106264, now seen corresponding path program 1 times [2024-09-20 11:56:53,620 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 11:56:53,620 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [27874861] [2024-09-20 11:56:53,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:56:53,620 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 11:56:53,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:53,880 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 11:56:53,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:53,882 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2024-09-20 11:56:53,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:53,891 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 3 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-20 11:56:53,891 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 11:56:53,891 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [27874861] [2024-09-20 11:56:53,891 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [27874861] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 11:56:53,893 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1235635957] [2024-09-20 11:56:53,893 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:56:53,893 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:56:53,893 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 11:56:53,896 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 11:56:53,897 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-20 11:56:53,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:53,989 INFO L262 TraceCheckSpWp]: Trace formula consists of 148 conjuncts, 10 conjuncts are in the unsatisfiable core [2024-09-20 11:56:53,991 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 11:56:54,093 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 3 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-20 11:56:54,094 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 11:56:54,284 INFO L134 CoverageAnalysis]: Checked inductivity of 7 backedges. 3 proven. 2 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-20 11:56:54,284 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1235635957] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 11:56:54,284 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 11:56:54,284 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 7, 7] total 13 [2024-09-20 11:56:54,284 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1794849295] [2024-09-20 11:56:54,285 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 11:56:54,285 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2024-09-20 11:56:54,285 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 11:56:54,286 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2024-09-20 11:56:54,286 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=46, Invalid=110, Unknown=0, NotChecked=0, Total=156 [2024-09-20 11:56:54,288 INFO L87 Difference]: Start difference. First operand 34 states and 37 transitions. Second operand has 13 states, 13 states have (on average 3.0) internal successors, (39), 13 states have internal predecessors, (39), 4 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-20 11:56:54,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 11:56:54,496 INFO L93 Difference]: Finished difference Result 84 states and 96 transitions. [2024-09-20 11:56:54,497 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-20 11:56:54,497 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.0) internal successors, (39), 13 states have internal predecessors, (39), 4 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 31 [2024-09-20 11:56:54,498 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 11:56:54,499 INFO L225 Difference]: With dead ends: 84 [2024-09-20 11:56:54,499 INFO L226 Difference]: Without dead ends: 49 [2024-09-20 11:56:54,499 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 60 SyntacticMatches, 2 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 44 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=110, Unknown=0, NotChecked=0, Total=156 [2024-09-20 11:56:54,500 INFO L434 NwaCegarLoop]: 17 mSDtfsCounter, 31 mSDsluCounter, 58 mSDsCounter, 0 mSdLazyCounter, 185 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 75 SdHoareTripleChecker+Invalid, 219 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 185 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-20 11:56:54,500 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 75 Invalid, 219 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 185 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-20 11:56:54,501 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2024-09-20 11:56:54,512 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 41. [2024-09-20 11:56:54,513 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 33 states have (on average 1.121212121212121) internal successors, (37), 34 states have internal predecessors, (37), 4 states have call successors, (4), 4 states have call predecessors, (4), 3 states have return successors, (3), 2 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-20 11:56:54,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 44 transitions. [2024-09-20 11:56:54,515 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 44 transitions. Word has length 31 [2024-09-20 11:56:54,515 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 11:56:54,516 INFO L474 AbstractCegarLoop]: Abstraction has 41 states and 44 transitions. [2024-09-20 11:56:54,516 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 3.0) internal successors, (39), 13 states have internal predecessors, (39), 4 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-20 11:56:54,517 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:56:54,517 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 44 transitions. [2024-09-20 11:56:54,518 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2024-09-20 11:56:54,520 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 11:56:54,520 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 11:56:54,537 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-09-20 11:56:54,724 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:56:54,725 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 11:56:54,726 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:56:54,726 INFO L85 PathProgramCache]: Analyzing trace with hash 1365597324, now seen corresponding path program 2 times [2024-09-20 11:56:54,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 11:56:54,726 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [431403130] [2024-09-20 11:56:54,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:56:54,726 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 11:56:54,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:57,436 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 11:56:57,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:57,439 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2024-09-20 11:56:57,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:56:57,448 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 2 proven. 15 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-20 11:56:57,449 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 11:56:57,449 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [431403130] [2024-09-20 11:56:57,449 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [431403130] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 11:56:57,449 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [415843061] [2024-09-20 11:56:57,450 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-20 11:56:57,450 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:56:57,450 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 11:56:57,452 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 11:56:57,454 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-20 11:56:57,534 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-20 11:56:57,534 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 11:56:57,539 INFO L262 TraceCheckSpWp]: Trace formula consists of 185 conjuncts, 34 conjuncts are in the unsatisfiable core [2024-09-20 11:56:57,542 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 11:56:57,663 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 23 [2024-09-20 11:56:57,962 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 21 [2024-09-20 11:56:57,966 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 15 [2024-09-20 11:56:57,969 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 9 [2024-09-20 11:56:58,020 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-20 11:56:58,024 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 11:56:58,428 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-20 11:56:58,429 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 89 treesize of output 67 [2024-09-20 11:56:58,441 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:56:58,442 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 46 treesize of output 25 [2024-09-20 11:56:58,449 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 40 [2024-09-20 11:56:58,460 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:56:58,460 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 2 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 40 treesize of output 87 [2024-09-20 11:56:58,555 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 2 proven. 5 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-20 11:56:58,555 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [415843061] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 11:56:58,555 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 11:56:58,555 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 12, 10] total 33 [2024-09-20 11:56:58,556 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [275477578] [2024-09-20 11:56:58,556 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 11:56:58,556 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 33 states [2024-09-20 11:56:58,556 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 11:56:58,557 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 33 interpolants. [2024-09-20 11:56:58,558 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=137, Invalid=919, Unknown=0, NotChecked=0, Total=1056 [2024-09-20 11:56:58,558 INFO L87 Difference]: Start difference. First operand 41 states and 44 transitions. Second operand has 33 states, 32 states have (on average 2.46875) internal successors, (79), 31 states have internal predecessors, (79), 5 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-20 11:57:03,603 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-20 11:57:05,332 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 11:57:05,332 INFO L93 Difference]: Finished difference Result 96 states and 110 transitions. [2024-09-20 11:57:05,333 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 37 states. [2024-09-20 11:57:05,333 INFO L78 Accepts]: Start accepts. Automaton has has 33 states, 32 states have (on average 2.46875) internal successors, (79), 31 states have internal predecessors, (79), 5 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Word has length 38 [2024-09-20 11:57:05,333 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 11:57:05,334 INFO L225 Difference]: With dead ends: 96 [2024-09-20 11:57:05,334 INFO L226 Difference]: Without dead ends: 57 [2024-09-20 11:57:05,335 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 123 GetRequests, 69 SyntacticMatches, 1 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 744 ImplicationChecksByTransitivity, 2.8s TimeCoverageRelationStatistics Valid=481, Invalid=2489, Unknown=0, NotChecked=0, Total=2970 [2024-09-20 11:57:05,336 INFO L434 NwaCegarLoop]: 16 mSDtfsCounter, 92 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 585 mSolverCounterSat, 105 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 93 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 691 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 105 IncrementalHoareTripleChecker+Valid, 585 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.8s IncrementalHoareTripleChecker+Time [2024-09-20 11:57:05,337 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [93 Valid, 187 Invalid, 691 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [105 Valid, 585 Invalid, 1 Unknown, 0 Unchecked, 4.8s Time] [2024-09-20 11:57:05,337 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2024-09-20 11:57:05,347 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 51. [2024-09-20 11:57:05,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51 states, 41 states have (on average 1.0975609756097562) internal successors, (45), 42 states have internal predecessors, (45), 5 states have call successors, (5), 5 states have call predecessors, (5), 4 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-20 11:57:05,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51 states to 51 states and 54 transitions. [2024-09-20 11:57:05,349 INFO L78 Accepts]: Start accepts. Automaton has 51 states and 54 transitions. Word has length 38 [2024-09-20 11:57:05,350 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 11:57:05,350 INFO L474 AbstractCegarLoop]: Abstraction has 51 states and 54 transitions. [2024-09-20 11:57:05,350 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 33 states, 32 states have (on average 2.46875) internal successors, (79), 31 states have internal predecessors, (79), 5 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-20 11:57:05,351 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:57:05,352 INFO L276 IsEmpty]: Start isEmpty. Operand 51 states and 54 transitions. [2024-09-20 11:57:05,353 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2024-09-20 11:57:05,353 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 11:57:05,353 INFO L216 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 11:57:05,371 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2024-09-20 11:57:05,557 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:57:05,558 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 11:57:05,559 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:57:05,559 INFO L85 PathProgramCache]: Analyzing trace with hash 1196273537, now seen corresponding path program 3 times [2024-09-20 11:57:05,559 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 11:57:05,559 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [749885081] [2024-09-20 11:57:05,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:57:05,560 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 11:57:05,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:57:05,808 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 11:57:05,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:57:05,811 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 30 [2024-09-20 11:57:05,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:57:05,814 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2024-09-20 11:57:05,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:57:05,817 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 4 proven. 17 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-09-20 11:57:05,817 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 11:57:05,817 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [749885081] [2024-09-20 11:57:05,817 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [749885081] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 11:57:05,818 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2011277821] [2024-09-20 11:57:05,818 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-20 11:57:05,818 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:57:05,818 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 11:57:05,820 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 11:57:05,821 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-20 11:57:05,964 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 2 check-sat command(s) [2024-09-20 11:57:05,964 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 11:57:05,971 INFO L262 TraceCheckSpWp]: Trace formula consists of 155 conjuncts, 38 conjuncts are in the unsatisfiable core [2024-09-20 11:57:05,974 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 11:57:06,221 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 17 [2024-09-20 11:57:06,257 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 39 treesize of output 38 [2024-09-20 11:57:06,758 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:57:06,758 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 44 treesize of output 46 [2024-09-20 11:57:06,775 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:57:06,776 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 46 treesize of output 48 [2024-09-20 11:57:06,792 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:57:06,793 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 1 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 38 treesize of output 40 [2024-09-20 11:57:06,890 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-09-20 11:57:06,890 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 11:57:07,149 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2011277821] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 11:57:07,150 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-20 11:57:07,150 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 12] total 20 [2024-09-20 11:57:07,150 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [852663744] [2024-09-20 11:57:07,150 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-20 11:57:07,150 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2024-09-20 11:57:07,151 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 11:57:07,151 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2024-09-20 11:57:07,152 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=58, Invalid=362, Unknown=0, NotChecked=0, Total=420 [2024-09-20 11:57:07,152 INFO L87 Difference]: Start difference. First operand 51 states and 54 transitions. Second operand has 20 states, 19 states have (on average 3.0) internal successors, (57), 19 states have internal predecessors, (57), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-20 11:57:07,903 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 11:57:07,903 INFO L93 Difference]: Finished difference Result 118 states and 127 transitions. [2024-09-20 11:57:07,903 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-20 11:57:07,904 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 19 states have (on average 3.0) internal successors, (57), 19 states have internal predecessors, (57), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Word has length 48 [2024-09-20 11:57:07,904 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 11:57:07,905 INFO L225 Difference]: With dead ends: 118 [2024-09-20 11:57:07,905 INFO L226 Difference]: Without dead ends: 91 [2024-09-20 11:57:07,906 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 87 GetRequests, 46 SyntacticMatches, 5 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 310 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=243, Invalid=1163, Unknown=0, NotChecked=0, Total=1406 [2024-09-20 11:57:07,907 INFO L434 NwaCegarLoop]: 16 mSDtfsCounter, 90 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 429 mSolverCounterSat, 91 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 90 SdHoareTripleChecker+Valid, 187 SdHoareTripleChecker+Invalid, 520 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 91 IncrementalHoareTripleChecker+Valid, 429 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2024-09-20 11:57:07,907 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [90 Valid, 187 Invalid, 520 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [91 Valid, 429 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2024-09-20 11:57:07,911 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2024-09-20 11:57:07,932 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 55. [2024-09-20 11:57:07,933 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55 states, 45 states have (on average 1.0888888888888888) internal successors, (49), 46 states have internal predecessors, (49), 5 states have call successors, (5), 5 states have call predecessors, (5), 4 states have return successors, (4), 3 states have call predecessors, (4), 4 states have call successors, (4) [2024-09-20 11:57:07,935 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 58 transitions. [2024-09-20 11:57:07,935 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 58 transitions. Word has length 48 [2024-09-20 11:57:07,936 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 11:57:07,936 INFO L474 AbstractCegarLoop]: Abstraction has 55 states and 58 transitions. [2024-09-20 11:57:07,936 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 19 states have (on average 3.0) internal successors, (57), 19 states have internal predecessors, (57), 4 states have call successors, (6), 4 states have call predecessors, (6), 2 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-20 11:57:07,936 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:57:07,936 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 58 transitions. [2024-09-20 11:57:07,937 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2024-09-20 11:57:07,937 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 11:57:07,937 INFO L216 NwaCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 11:57:07,951 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2024-09-20 11:57:08,138 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:57:08,138 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 11:57:08,138 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:57:08,138 INFO L85 PathProgramCache]: Analyzing trace with hash 1482814844, now seen corresponding path program 4 times [2024-09-20 11:57:08,139 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 11:57:08,139 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [616042693] [2024-09-20 11:57:08,139 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:57:08,139 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 11:57:08,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:57:10,638 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 11:57:10,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:57:10,641 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2024-09-20 11:57:10,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:57:10,648 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2024-09-20 11:57:10,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:57:10,655 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 4 proven. 37 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-20 11:57:10,655 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 11:57:10,655 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [616042693] [2024-09-20 11:57:10,655 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [616042693] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 11:57:10,656 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1755630267] [2024-09-20 11:57:10,656 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-20 11:57:10,656 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:57:10,656 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 11:57:10,658 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 11:57:10,659 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-20 11:57:10,755 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-20 11:57:10,755 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 11:57:10,762 INFO L262 TraceCheckSpWp]: Trace formula consists of 240 conjuncts, 47 conjuncts are in the unsatisfiable core [2024-09-20 11:57:10,766 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 11:57:10,938 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 23 [2024-09-20 11:57:16,351 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 21 [2024-09-20 11:57:16,356 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 15 [2024-09-20 11:57:16,360 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 9 [2024-09-20 11:57:16,425 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 0 proven. 43 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-20 11:57:16,425 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 11:57:28,806 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-20 11:57:28,806 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 89 treesize of output 67 [2024-09-20 11:57:28,817 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:57:28,817 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 46 treesize of output 25 [2024-09-20 11:57:28,822 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 40 [2024-09-20 11:57:28,832 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:57:28,833 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 2 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 40 treesize of output 87 [2024-09-20 11:57:28,943 INFO L134 CoverageAnalysis]: Checked inductivity of 45 backedges. 4 proven. 13 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2024-09-20 11:57:28,944 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1755630267] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 11:57:28,944 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 11:57:28,944 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 18, 12] total 42 [2024-09-20 11:57:28,944 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1939997951] [2024-09-20 11:57:28,944 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 11:57:28,944 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2024-09-20 11:57:28,945 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 11:57:28,945 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2024-09-20 11:57:28,946 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=176, Invalid=1543, Unknown=3, NotChecked=0, Total=1722 [2024-09-20 11:57:28,946 INFO L87 Difference]: Start difference. First operand 55 states and 58 transitions. Second operand has 42 states, 41 states have (on average 2.317073170731707) internal successors, (95), 40 states have internal predecessors, (95), 8 states have call successors, (10), 4 states have call predecessors, (10), 3 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-20 11:57:37,771 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.06s for a HTC check with result VALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-20 11:57:37,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 11:57:37,779 INFO L93 Difference]: Finished difference Result 116 states and 131 transitions. [2024-09-20 11:57:37,779 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 39 states. [2024-09-20 11:57:37,779 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 41 states have (on average 2.317073170731707) internal successors, (95), 40 states have internal predecessors, (95), 8 states have call successors, (10), 4 states have call predecessors, (10), 3 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) Word has length 52 [2024-09-20 11:57:37,780 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 11:57:37,781 INFO L225 Difference]: With dead ends: 116 [2024-09-20 11:57:37,781 INFO L226 Difference]: Without dead ends: 114 [2024-09-20 11:57:37,782 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 157 GetRequests, 91 SyntacticMatches, 3 SemanticMatches, 63 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1101 ImplicationChecksByTransitivity, 24.7s TimeCoverageRelationStatistics Valid=523, Invalid=3633, Unknown=4, NotChecked=0, Total=4160 [2024-09-20 11:57:37,782 INFO L434 NwaCegarLoop]: 15 mSDtfsCounter, 146 mSDsluCounter, 212 mSDsCounter, 0 mSdLazyCounter, 836 mSolverCounterSat, 122 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 147 SdHoareTripleChecker+Valid, 227 SdHoareTripleChecker+Invalid, 958 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 122 IncrementalHoareTripleChecker+Valid, 836 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2024-09-20 11:57:37,783 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [147 Valid, 227 Invalid, 958 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [122 Valid, 836 Invalid, 0 Unknown, 0 Unchecked, 2.1s Time] [2024-09-20 11:57:37,784 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2024-09-20 11:57:37,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 62. [2024-09-20 11:57:37,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62 states, 50 states have (on average 1.08) internal successors, (54), 51 states have internal predecessors, (54), 6 states have call successors, (6), 6 states have call predecessors, (6), 5 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-20 11:57:37,810 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62 states to 62 states and 65 transitions. [2024-09-20 11:57:37,811 INFO L78 Accepts]: Start accepts. Automaton has 62 states and 65 transitions. Word has length 52 [2024-09-20 11:57:37,811 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 11:57:37,811 INFO L474 AbstractCegarLoop]: Abstraction has 62 states and 65 transitions. [2024-09-20 11:57:37,811 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 41 states have (on average 2.317073170731707) internal successors, (95), 40 states have internal predecessors, (95), 8 states have call successors, (10), 4 states have call predecessors, (10), 3 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-20 11:57:37,811 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:57:37,811 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 65 transitions. [2024-09-20 11:57:37,812 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2024-09-20 11:57:37,812 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 11:57:37,812 INFO L216 NwaCegarLoop]: trace histogram [4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 11:57:37,825 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2024-09-20 11:57:38,013 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2024-09-20 11:57:38,013 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 11:57:38,014 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:57:38,014 INFO L85 PathProgramCache]: Analyzing trace with hash -1121119528, now seen corresponding path program 5 times [2024-09-20 11:57:38,014 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 11:57:38,014 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1162432721] [2024-09-20 11:57:38,014 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:57:38,014 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 11:57:38,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:57:38,313 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 11:57:38,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:57:38,316 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2024-09-20 11:57:38,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:57:38,319 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2024-09-20 11:57:38,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:57:38,323 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2024-09-20 11:57:38,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:57:38,328 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 9 proven. 24 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-20 11:57:38,328 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 11:57:38,328 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1162432721] [2024-09-20 11:57:38,329 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1162432721] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 11:57:38,329 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [142670370] [2024-09-20 11:57:38,329 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-20 11:57:38,329 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:57:38,329 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 11:57:38,331 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 11:57:38,332 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-20 11:59:10,435 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 4 check-sat command(s) [2024-09-20 11:59:10,435 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 11:59:10,440 INFO L262 TraceCheckSpWp]: Trace formula consists of 258 conjuncts, 18 conjuncts are in the unsatisfiable core [2024-09-20 11:59:10,442 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 11:59:10,594 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 9 proven. 24 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-20 11:59:10,594 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 11:59:10,832 INFO L134 CoverageAnalysis]: Checked inductivity of 63 backedges. 9 proven. 24 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-20 11:59:10,832 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [142670370] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 11:59:10,832 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 11:59:10,832 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 11, 11] total 19 [2024-09-20 11:59:10,832 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1639583929] [2024-09-20 11:59:10,832 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 11:59:10,833 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 19 states [2024-09-20 11:59:10,833 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 11:59:10,834 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2024-09-20 11:59:10,834 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=73, Invalid=269, Unknown=0, NotChecked=0, Total=342 [2024-09-20 11:59:10,834 INFO L87 Difference]: Start difference. First operand 62 states and 65 transitions. Second operand has 19 states, 19 states have (on average 2.8947368421052633) internal successors, (55), 19 states have internal predecessors, (55), 8 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-20 11:59:11,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 11:59:11,279 INFO L93 Difference]: Finished difference Result 142 states and 156 transitions. [2024-09-20 11:59:11,280 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-09-20 11:59:11,280 INFO L78 Accepts]: Start accepts. Automaton has has 19 states, 19 states have (on average 2.8947368421052633) internal successors, (55), 19 states have internal predecessors, (55), 8 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) Word has length 59 [2024-09-20 11:59:11,280 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 11:59:11,281 INFO L225 Difference]: With dead ends: 142 [2024-09-20 11:59:11,281 INFO L226 Difference]: Without dead ends: 77 [2024-09-20 11:59:11,281 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 136 GetRequests, 115 SyntacticMatches, 4 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=73, Invalid=269, Unknown=0, NotChecked=0, Total=342 [2024-09-20 11:59:11,282 INFO L434 NwaCegarLoop]: 21 mSDtfsCounter, 47 mSDsluCounter, 158 mSDsCounter, 0 mSdLazyCounter, 520 mSolverCounterSat, 62 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 51 SdHoareTripleChecker+Valid, 179 SdHoareTripleChecker+Invalid, 582 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 62 IncrementalHoareTripleChecker+Valid, 520 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-20 11:59:11,282 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [51 Valid, 179 Invalid, 582 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [62 Valid, 520 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-20 11:59:11,283 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 77 states. [2024-09-20 11:59:11,306 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 77 to 69. [2024-09-20 11:59:11,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69 states, 57 states have (on average 1.0701754385964912) internal successors, (61), 58 states have internal predecessors, (61), 6 states have call successors, (6), 6 states have call predecessors, (6), 5 states have return successors, (5), 4 states have call predecessors, (5), 5 states have call successors, (5) [2024-09-20 11:59:11,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69 states to 69 states and 72 transitions. [2024-09-20 11:59:11,307 INFO L78 Accepts]: Start accepts. Automaton has 69 states and 72 transitions. Word has length 59 [2024-09-20 11:59:11,308 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 11:59:11,308 INFO L474 AbstractCegarLoop]: Abstraction has 69 states and 72 transitions. [2024-09-20 11:59:11,308 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 19 states, 19 states have (on average 2.8947368421052633) internal successors, (55), 19 states have internal predecessors, (55), 8 states have call successors, (9), 2 states have call predecessors, (9), 1 states have return successors, (7), 7 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-20 11:59:11,308 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:59:11,308 INFO L276 IsEmpty]: Start isEmpty. Operand 69 states and 72 transitions. [2024-09-20 11:59:11,309 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-20 11:59:11,309 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 11:59:11,309 INFO L216 NwaCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 11:59:11,326 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Ended with exit code 0 [2024-09-20 11:59:11,510 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:59:11,510 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 11:59:11,511 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:59:11,511 INFO L85 PathProgramCache]: Analyzing trace with hash 1279452236, now seen corresponding path program 6 times [2024-09-20 11:59:11,511 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 11:59:11,511 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [103139615] [2024-09-20 11:59:11,511 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:59:11,511 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 11:59:11,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:14,424 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 11:59:14,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:14,426 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2024-09-20 11:59:14,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:14,432 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2024-09-20 11:59:14,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:14,438 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2024-09-20 11:59:14,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:14,444 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 6 proven. 69 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-20 11:59:14,444 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 11:59:14,444 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [103139615] [2024-09-20 11:59:14,444 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [103139615] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 11:59:14,444 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [504149000] [2024-09-20 11:59:14,445 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-09-20 11:59:14,445 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:59:14,445 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 11:59:14,447 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 11:59:14,448 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-20 11:59:16,258 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 5 check-sat command(s) [2024-09-20 11:59:16,258 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 11:59:16,260 INFO L262 TraceCheckSpWp]: Trace formula consists of 295 conjuncts, 41 conjuncts are in the unsatisfiable core [2024-09-20 11:59:16,263 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 11:59:16,526 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 17 [2024-09-20 11:59:17,060 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 25 treesize of output 17 [2024-09-20 11:59:17,063 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 13 [2024-09-20 11:59:17,065 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 17 treesize of output 9 [2024-09-20 11:59:17,105 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 0 proven. 31 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2024-09-20 11:59:17,105 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 11:59:17,575 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-20 11:59:17,576 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 89 treesize of output 67 [2024-09-20 11:59:17,588 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:59:17,589 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 46 treesize of output 25 [2024-09-20 11:59:17,597 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 40 [2024-09-20 11:59:17,607 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:59:17,608 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 2 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 40 treesize of output 87 [2024-09-20 11:59:17,621 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 62 treesize of output 12 [2024-09-20 11:59:17,763 INFO L134 CoverageAnalysis]: Checked inductivity of 87 backedges. 6 proven. 25 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2024-09-20 11:59:17,763 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [504149000] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 11:59:17,763 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 11:59:17,763 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [19, 16, 14] total 36 [2024-09-20 11:59:17,763 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1176392878] [2024-09-20 11:59:17,763 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 11:59:17,764 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2024-09-20 11:59:17,764 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 11:59:17,764 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2024-09-20 11:59:17,765 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=161, Invalid=1099, Unknown=0, NotChecked=0, Total=1260 [2024-09-20 11:59:17,765 INFO L87 Difference]: Start difference. First operand 69 states and 72 transitions. Second operand has 36 states, 35 states have (on average 2.8) internal successors, (98), 34 states have internal predecessors, (98), 11 states have call successors, (13), 4 states have call predecessors, (13), 2 states have return successors, (10), 10 states have call predecessors, (10), 10 states have call successors, (10) [2024-09-20 11:59:18,504 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 11:59:18,505 INFO L93 Difference]: Finished difference Result 84 states and 87 transitions. [2024-09-20 11:59:18,505 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2024-09-20 11:59:18,505 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 35 states have (on average 2.8) internal successors, (98), 34 states have internal predecessors, (98), 11 states have call successors, (13), 4 states have call predecessors, (13), 2 states have return successors, (10), 10 states have call predecessors, (10), 10 states have call successors, (10) Word has length 66 [2024-09-20 11:59:18,506 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 11:59:18,506 INFO L225 Difference]: With dead ends: 84 [2024-09-20 11:59:18,506 INFO L226 Difference]: Without dead ends: 82 [2024-09-20 11:59:18,507 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 174 GetRequests, 125 SyntacticMatches, 11 SemanticMatches, 38 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 595 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=200, Invalid=1360, Unknown=0, NotChecked=0, Total=1560 [2024-09-20 11:59:18,508 INFO L434 NwaCegarLoop]: 18 mSDtfsCounter, 32 mSDsluCounter, 274 mSDsCounter, 0 mSdLazyCounter, 1100 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 33 SdHoareTripleChecker+Valid, 292 SdHoareTripleChecker+Invalid, 1122 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 1100 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-20 11:59:18,508 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [33 Valid, 292 Invalid, 1122 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 1100 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-20 11:59:18,508 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82 states. [2024-09-20 11:59:18,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82 to 76. [2024-09-20 11:59:18,544 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76 states, 62 states have (on average 1.064516129032258) internal successors, (66), 63 states have internal predecessors, (66), 7 states have call successors, (7), 7 states have call predecessors, (7), 6 states have return successors, (6), 5 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-20 11:59:18,545 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 79 transitions. [2024-09-20 11:59:18,545 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 79 transitions. Word has length 66 [2024-09-20 11:59:18,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 11:59:18,545 INFO L474 AbstractCegarLoop]: Abstraction has 76 states and 79 transitions. [2024-09-20 11:59:18,545 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 35 states have (on average 2.8) internal successors, (98), 34 states have internal predecessors, (98), 11 states have call successors, (13), 4 states have call predecessors, (13), 2 states have return successors, (10), 10 states have call predecessors, (10), 10 states have call successors, (10) [2024-09-20 11:59:18,546 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:59:18,546 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 79 transitions. [2024-09-20 11:59:18,546 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2024-09-20 11:59:18,546 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 11:59:18,547 INFO L216 NwaCegarLoop]: trace histogram [5, 5, 5, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 11:59:18,560 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Forceful destruction successful, exit code 0 [2024-09-20 11:59:18,747 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:59:18,747 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 11:59:18,748 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:59:18,748 INFO L85 PathProgramCache]: Analyzing trace with hash 1811470856, now seen corresponding path program 7 times [2024-09-20 11:59:18,748 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 11:59:18,748 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [36984119] [2024-09-20 11:59:18,748 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:59:18,748 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 11:59:18,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:19,380 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 11:59:19,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:19,383 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2024-09-20 11:59:19,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:19,387 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2024-09-20 11:59:19,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:19,390 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2024-09-20 11:59:19,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:19,392 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2024-09-20 11:59:19,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:19,396 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 12 proven. 54 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2024-09-20 11:59:19,396 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 11:59:19,396 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [36984119] [2024-09-20 11:59:19,397 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [36984119] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 11:59:19,397 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1653789070] [2024-09-20 11:59:19,397 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-09-20 11:59:19,397 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:59:19,397 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 11:59:19,399 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 11:59:19,400 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-20 11:59:19,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:19,511 INFO L262 TraceCheckSpWp]: Trace formula consists of 313 conjuncts, 22 conjuncts are in the unsatisfiable core [2024-09-20 11:59:19,513 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 11:59:19,867 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 12 proven. 44 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2024-09-20 11:59:19,868 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 11:59:20,367 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 12 proven. 44 refuted. 0 times theorem prover too weak. 56 trivial. 0 not checked. [2024-09-20 11:59:20,368 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1653789070] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 11:59:20,368 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 11:59:20,368 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 13, 13] total 32 [2024-09-20 11:59:20,368 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1450761401] [2024-09-20 11:59:20,368 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 11:59:20,368 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 32 states [2024-09-20 11:59:20,368 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 11:59:20,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 32 interpolants. [2024-09-20 11:59:20,369 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=164, Invalid=828, Unknown=0, NotChecked=0, Total=992 [2024-09-20 11:59:20,370 INFO L87 Difference]: Start difference. First operand 76 states and 79 transitions. Second operand has 32 states, 32 states have (on average 2.78125) internal successors, (89), 32 states have internal predecessors, (89), 13 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (12), 12 states have call predecessors, (12), 12 states have call successors, (12) [2024-09-20 11:59:21,007 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 11:59:21,007 INFO L93 Difference]: Finished difference Result 171 states and 186 transitions. [2024-09-20 11:59:21,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2024-09-20 11:59:21,007 INFO L78 Accepts]: Start accepts. Automaton has has 32 states, 32 states have (on average 2.78125) internal successors, (89), 32 states have internal predecessors, (89), 13 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (12), 12 states have call predecessors, (12), 12 states have call successors, (12) Word has length 73 [2024-09-20 11:59:21,008 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 11:59:21,008 INFO L225 Difference]: With dead ends: 171 [2024-09-20 11:59:21,008 INFO L226 Difference]: Without dead ends: 91 [2024-09-20 11:59:21,009 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 137 SyntacticMatches, 5 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 245 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=164, Invalid=828, Unknown=0, NotChecked=0, Total=992 [2024-09-20 11:59:21,009 INFO L434 NwaCegarLoop]: 23 mSDtfsCounter, 72 mSDsluCounter, 211 mSDsCounter, 0 mSdLazyCounter, 883 mSolverCounterSat, 96 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 77 SdHoareTripleChecker+Valid, 234 SdHoareTripleChecker+Invalid, 979 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 96 IncrementalHoareTripleChecker+Valid, 883 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-20 11:59:21,010 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [77 Valid, 234 Invalid, 979 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [96 Valid, 883 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-20 11:59:21,010 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2024-09-20 11:59:21,039 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 83. [2024-09-20 11:59:21,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 83 states, 69 states have (on average 1.0579710144927537) internal successors, (73), 70 states have internal predecessors, (73), 7 states have call successors, (7), 7 states have call predecessors, (7), 6 states have return successors, (6), 5 states have call predecessors, (6), 6 states have call successors, (6) [2024-09-20 11:59:21,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 86 transitions. [2024-09-20 11:59:21,040 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 86 transitions. Word has length 73 [2024-09-20 11:59:21,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 11:59:21,040 INFO L474 AbstractCegarLoop]: Abstraction has 83 states and 86 transitions. [2024-09-20 11:59:21,040 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 32 states, 32 states have (on average 2.78125) internal successors, (89), 32 states have internal predecessors, (89), 13 states have call successors, (14), 2 states have call predecessors, (14), 1 states have return successors, (12), 12 states have call predecessors, (12), 12 states have call successors, (12) [2024-09-20 11:59:21,041 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:59:21,041 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 86 transitions. [2024-09-20 11:59:21,041 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 81 [2024-09-20 11:59:21,041 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 11:59:21,042 INFO L216 NwaCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 4, 4, 4, 4, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 11:59:21,057 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2024-09-20 11:59:21,242 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:59:21,242 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 11:59:21,243 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:59:21,243 INFO L85 PathProgramCache]: Analyzing trace with hash -1570893764, now seen corresponding path program 8 times [2024-09-20 11:59:21,243 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 11:59:21,243 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1281392301] [2024-09-20 11:59:21,243 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:59:21,243 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 11:59:21,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:24,096 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 11:59:24,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:24,098 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2024-09-20 11:59:24,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:24,104 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2024-09-20 11:59:24,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:24,117 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2024-09-20 11:59:24,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:24,125 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2024-09-20 11:59:24,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:24,134 INFO L134 CoverageAnalysis]: Checked inductivity of 143 backedges. 8 proven. 111 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-09-20 11:59:24,134 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 11:59:24,135 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1281392301] [2024-09-20 11:59:24,135 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1281392301] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 11:59:24,135 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [561802484] [2024-09-20 11:59:24,135 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-20 11:59:24,135 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:59:24,135 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 11:59:24,137 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 11:59:24,138 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-20 11:59:24,262 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-20 11:59:24,262 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 11:59:24,264 INFO L262 TraceCheckSpWp]: Trace formula consists of 350 conjuncts, 63 conjuncts are in the unsatisfiable core [2024-09-20 11:59:24,267 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 11:59:24,466 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 23 [2024-09-20 11:59:32,655 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 33 treesize of output 21 [2024-09-20 11:59:32,657 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 27 treesize of output 15 [2024-09-20 11:59:32,659 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 9 [2024-09-20 11:59:32,701 INFO L134 CoverageAnalysis]: Checked inductivity of 143 backedges. 0 proven. 126 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-20 11:59:32,701 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 11:59:33,422 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-20 11:59:33,423 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 89 treesize of output 67 [2024-09-20 11:59:33,433 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:59:33,434 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 46 treesize of output 25 [2024-09-20 11:59:33,439 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 44 treesize of output 40 [2024-09-20 11:59:33,449 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:59:33,449 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 2 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 2 new quantified variables, introduced 2 case distinctions, treesize of input 40 treesize of output 87 [2024-09-20 11:59:33,707 INFO L134 CoverageAnalysis]: Checked inductivity of 143 backedges. 8 proven. 41 refuted. 0 times theorem prover too weak. 94 trivial. 0 not checked. [2024-09-20 11:59:33,708 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [561802484] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 11:59:33,708 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 11:59:33,708 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 16] total 48 [2024-09-20 11:59:33,708 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1548218939] [2024-09-20 11:59:33,709 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 11:59:33,709 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2024-09-20 11:59:33,709 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 11:59:33,710 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2024-09-20 11:59:33,712 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=226, Invalid=2030, Unknown=0, NotChecked=0, Total=2256 [2024-09-20 11:59:33,713 INFO L87 Difference]: Start difference. First operand 83 states and 86 transitions. Second operand has 48 states, 47 states have (on average 3.0851063829787235) internal successors, (145), 46 states have internal predecessors, (145), 14 states have call successors, (16), 4 states have call predecessors, (16), 3 states have return successors, (13), 13 states have call predecessors, (13), 13 states have call successors, (13) [2024-09-20 11:59:36,155 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 11:59:36,155 INFO L93 Difference]: Finished difference Result 97 states and 100 transitions. [2024-09-20 11:59:36,156 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 29 states. [2024-09-20 11:59:36,156 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 47 states have (on average 3.0851063829787235) internal successors, (145), 46 states have internal predecessors, (145), 14 states have call successors, (16), 4 states have call predecessors, (16), 3 states have return successors, (13), 13 states have call predecessors, (13), 13 states have call successors, (13) Word has length 80 [2024-09-20 11:59:36,156 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 11:59:36,157 INFO L225 Difference]: With dead ends: 97 [2024-09-20 11:59:36,157 INFO L226 Difference]: Without dead ends: 95 [2024-09-20 11:59:36,158 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 216 GetRequests, 149 SyntacticMatches, 7 SemanticMatches, 60 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1215 ImplicationChecksByTransitivity, 10.0s TimeCoverageRelationStatistics Valid=396, Invalid=3386, Unknown=0, NotChecked=0, Total=3782 [2024-09-20 11:59:36,159 INFO L434 NwaCegarLoop]: 17 mSDtfsCounter, 51 mSDsluCounter, 249 mSDsCounter, 0 mSdLazyCounter, 1478 mSolverCounterSat, 37 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 266 SdHoareTripleChecker+Invalid, 1515 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 37 IncrementalHoareTripleChecker+Valid, 1478 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2024-09-20 11:59:36,159 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [52 Valid, 266 Invalid, 1515 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [37 Valid, 1478 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2024-09-20 11:59:36,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 95 states. [2024-09-20 11:59:36,203 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 95 to 90. [2024-09-20 11:59:36,203 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 90 states, 74 states have (on average 1.054054054054054) internal successors, (78), 75 states have internal predecessors, (78), 8 states have call successors, (8), 8 states have call predecessors, (8), 7 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-20 11:59:36,203 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 90 states to 90 states and 93 transitions. [2024-09-20 11:59:36,204 INFO L78 Accepts]: Start accepts. Automaton has 90 states and 93 transitions. Word has length 80 [2024-09-20 11:59:36,205 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 11:59:36,205 INFO L474 AbstractCegarLoop]: Abstraction has 90 states and 93 transitions. [2024-09-20 11:59:36,205 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 47 states have (on average 3.0851063829787235) internal successors, (145), 46 states have internal predecessors, (145), 14 states have call successors, (16), 4 states have call predecessors, (16), 3 states have return successors, (13), 13 states have call predecessors, (13), 13 states have call successors, (13) [2024-09-20 11:59:36,206 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:59:36,206 INFO L276 IsEmpty]: Start isEmpty. Operand 90 states and 93 transitions. [2024-09-20 11:59:36,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2024-09-20 11:59:36,207 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 11:59:36,207 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 11:59:36,225 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Forceful destruction successful, exit code 0 [2024-09-20 11:59:36,407 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2024-09-20 11:59:36,408 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 11:59:36,412 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 11:59:36,412 INFO L85 PathProgramCache]: Analyzing trace with hash 1193369624, now seen corresponding path program 9 times [2024-09-20 11:59:36,412 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 11:59:36,412 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1023443965] [2024-09-20 11:59:36,412 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 11:59:36,412 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 11:59:36,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:37,098 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 11:59:37,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:37,100 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2024-09-20 11:59:37,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:37,102 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2024-09-20 11:59:37,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:37,104 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 62 [2024-09-20 11:59:37,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:37,107 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 69 [2024-09-20 11:59:37,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:37,110 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 76 [2024-09-20 11:59:37,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 11:59:37,114 INFO L134 CoverageAnalysis]: Checked inductivity of 175 backedges. 15 proven. 83 refuted. 0 times theorem prover too weak. 77 trivial. 0 not checked. [2024-09-20 11:59:37,114 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 11:59:37,114 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1023443965] [2024-09-20 11:59:37,114 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1023443965] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 11:59:37,115 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [544912751] [2024-09-20 11:59:37,115 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-20 11:59:37,115 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 11:59:37,115 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 11:59:37,117 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 11:59:37,118 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-09-20 11:59:39,712 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-20 11:59:39,713 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 11:59:39,716 INFO L262 TraceCheckSpWp]: Trace formula consists of 272 conjuncts, 106 conjuncts are in the unsatisfiable core [2024-09-20 11:59:39,721 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 11:59:39,873 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 52 treesize of output 39 [2024-09-20 11:59:39,877 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 1 [2024-09-20 11:59:40,074 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 52 treesize of output 39 [2024-09-20 11:59:40,077 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 1 [2024-09-20 11:59:40,290 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 21 treesize of output 17 [2024-09-20 11:59:40,343 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 1 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 39 treesize of output 38 [2024-09-20 11:59:40,413 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:59:40,413 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 2 select indices, 2 select index equivalence classes, 3 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 56 treesize of output 58 [2024-09-20 11:59:40,493 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:59:40,493 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 3 select indices, 3 select index equivalence classes, 6 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 73 treesize of output 78 [2024-09-20 11:59:40,575 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 11:59:40,575 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 4 select indices, 4 select index equivalence classes, 10 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 90 treesize of output 98 [2024-09-20 11:59:42,896 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-20 11:59:42,901 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-20 11:59:42,971 INFO L349 Elim1Store]: treesize reduction 48, result has 61.6 percent of original size [2024-09-20 11:59:42,971 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 11 select indices, 11 select index equivalence classes, 12 disjoint index pairs (out of 55 index pairs), introduced 11 new quantified variables, introduced 55 case distinctions, treesize of input 184 treesize of output 210 [2024-09-20 11:59:42,992 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-20 11:59:42,996 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-20 11:59:43,088 INFO L349 Elim1Store]: treesize reduction 48, result has 61.6 percent of original size [2024-09-20 11:59:43,089 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 11 select indices, 11 select index equivalence classes, 12 disjoint index pairs (out of 55 index pairs), introduced 11 new quantified variables, introduced 55 case distinctions, treesize of input 220 treesize of output 234 [2024-09-20 11:59:43,102 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-20 11:59:43,105 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-20 11:59:43,193 INFO L349 Elim1Store]: treesize reduction 48, result has 61.6 percent of original size [2024-09-20 11:59:43,193 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 11 select indices, 11 select index equivalence classes, 12 disjoint index pairs (out of 55 index pairs), introduced 11 new quantified variables, introduced 55 case distinctions, treesize of input 168 treesize of output 182 [2024-09-20 11:59:43,475 INFO L134 CoverageAnalysis]: Checked inductivity of 175 backedges. 62 proven. 46 refuted. 0 times theorem prover too weak. 67 trivial. 0 not checked. [2024-09-20 11:59:43,475 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 11:59:51,427 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [544912751] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 11:59:51,427 INFO L185 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2024-09-20 11:59:51,427 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 27] total 41 [2024-09-20 11:59:51,428 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [756300123] [2024-09-20 11:59:51,428 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2024-09-20 11:59:51,428 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 41 states [2024-09-20 11:59:51,428 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 11:59:51,429 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 41 interpolants. [2024-09-20 11:59:51,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=237, Invalid=2212, Unknown=1, NotChecked=0, Total=2450 [2024-09-20 11:59:51,430 INFO L87 Difference]: Start difference. First operand 90 states and 93 transitions. Second operand has 41 states, 39 states have (on average 2.358974358974359) internal successors, (92), 39 states have internal predecessors, (92), 11 states have call successors, (12), 4 states have call predecessors, (12), 3 states have return successors, (9), 9 states have call predecessors, (9), 9 states have call successors, (9) [2024-09-20 12:00:10,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 12:00:10,135 INFO L93 Difference]: Finished difference Result 269 states and 282 transitions. [2024-09-20 12:00:10,135 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 76 states. [2024-09-20 12:00:10,136 INFO L78 Accepts]: Start accepts. Automaton has has 41 states, 39 states have (on average 2.358974358974359) internal successors, (92), 39 states have internal predecessors, (92), 11 states have call successors, (12), 4 states have call predecessors, (12), 3 states have return successors, (9), 9 states have call predecessors, (9), 9 states have call successors, (9) Word has length 87 [2024-09-20 12:00:10,136 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 12:00:10,137 INFO L225 Difference]: With dead ends: 269 [2024-09-20 12:00:10,137 INFO L226 Difference]: Without dead ends: 154 [2024-09-20 12:00:10,140 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 198 GetRequests, 81 SyntacticMatches, 9 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3172 ImplicationChecksByTransitivity, 21.1s TimeCoverageRelationStatistics Valid=1301, Invalid=10688, Unknown=1, NotChecked=0, Total=11990 [2024-09-20 12:00:10,140 INFO L434 NwaCegarLoop]: 16 mSDtfsCounter, 249 mSDsluCounter, 303 mSDsCounter, 0 mSdLazyCounter, 1745 mSolverCounterSat, 277 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 250 SdHoareTripleChecker+Valid, 319 SdHoareTripleChecker+Invalid, 2022 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 277 IncrementalHoareTripleChecker+Valid, 1745 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.5s IncrementalHoareTripleChecker+Time [2024-09-20 12:00:10,141 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [250 Valid, 319 Invalid, 2022 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [277 Valid, 1745 Invalid, 0 Unknown, 0 Unchecked, 5.5s Time] [2024-09-20 12:00:10,141 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154 states. [2024-09-20 12:00:10,186 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154 to 97. [2024-09-20 12:00:10,187 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 97 states, 81 states have (on average 1.0493827160493827) internal successors, (85), 82 states have internal predecessors, (85), 8 states have call successors, (8), 8 states have call predecessors, (8), 7 states have return successors, (7), 6 states have call predecessors, (7), 7 states have call successors, (7) [2024-09-20 12:00:10,187 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 97 states to 97 states and 100 transitions. [2024-09-20 12:00:10,188 INFO L78 Accepts]: Start accepts. Automaton has 97 states and 100 transitions. Word has length 87 [2024-09-20 12:00:10,188 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 12:00:10,188 INFO L474 AbstractCegarLoop]: Abstraction has 97 states and 100 transitions. [2024-09-20 12:00:10,188 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 41 states, 39 states have (on average 2.358974358974359) internal successors, (92), 39 states have internal predecessors, (92), 11 states have call successors, (12), 4 states have call predecessors, (12), 3 states have return successors, (9), 9 states have call predecessors, (9), 9 states have call successors, (9) [2024-09-20 12:00:10,189 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 12:00:10,189 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 100 transitions. [2024-09-20 12:00:10,190 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 95 [2024-09-20 12:00:10,190 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 12:00:10,190 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 5, 5, 5, 5, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 12:00:10,206 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2024-09-20 12:00:10,390 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2024-09-20 12:00:10,391 INFO L399 AbstractCegarLoop]: === Iteration 13 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 12:00:10,391 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 12:00:10,391 INFO L85 PathProgramCache]: Analyzing trace with hash 1265552396, now seen corresponding path program 10 times [2024-09-20 12:00:10,391 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 12:00:10,391 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [170949605] [2024-09-20 12:00:10,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 12:00:10,392 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 12:00:10,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat