./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/loops/vogal-1.i --full-output --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version ca4ee3dd Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/certificate-witnesses-artifact/automizer/data/config -Xmx15G -Xms4m -jar /storage/repos/certificate-witnesses-artifact/automizer/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/certificate-witnesses-artifact/automizer/data -tc /storage/repos/certificate-witnesses-artifact/automizer/config/AutomizerReach.xml -i ../sv-benchmarks/c/loops/vogal-1.i -s /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/certificate-witnesses-artifact/automizer --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 0004a4c1c8347096eaba7e87038be30bb20b14d3b5abd082e79b4b4e835a243e --procedureinliner.inline.calls.to.implemented.procedures NEVER --traceabstraction.positions.where.we.compute.the.hoare.annotation All --witnessprinter.yaml.format.version 2.1 --witnessprinter.generate.graphml.witnesses false --- Real Ultimate output --- This is Ultimate 0.2.4-tmp.dk.referee-eval-ca4ee3d-m [2024-09-20 18:40:59,425 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-09-20 18:40:59,480 INFO L114 SettingsManager]: Loading settings from /storage/repos/certificate-witnesses-artifact/automizer/config/svcomp-Reach-32bit-Automizer_Default.epf [2024-09-20 18:40:59,484 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-09-20 18:40:59,485 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-09-20 18:40:59,500 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-09-20 18:40:59,500 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-09-20 18:40:59,500 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-09-20 18:40:59,501 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-09-20 18:40:59,501 INFO L153 SettingsManager]: * Use memory slicer=true [2024-09-20 18:40:59,504 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2024-09-20 18:40:59,504 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2024-09-20 18:40:59,505 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-09-20 18:40:59,506 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-09-20 18:40:59,507 INFO L153 SettingsManager]: * Use SBE=true [2024-09-20 18:40:59,507 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-09-20 18:40:59,507 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2024-09-20 18:40:59,507 INFO L153 SettingsManager]: * sizeof long=4 [2024-09-20 18:40:59,507 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-09-20 18:40:59,508 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-09-20 18:40:59,508 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-09-20 18:40:59,508 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2024-09-20 18:40:59,508 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2024-09-20 18:40:59,509 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2024-09-20 18:40:59,511 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-09-20 18:40:59,511 INFO L153 SettingsManager]: * sizeof long double=12 [2024-09-20 18:40:59,511 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-09-20 18:40:59,511 INFO L153 SettingsManager]: * Use constant arrays=true [2024-09-20 18:40:59,512 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-09-20 18:40:59,512 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-09-20 18:40:59,512 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2024-09-20 18:40:59,512 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2024-09-20 18:40:59,512 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-20 18:40:59,512 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-09-20 18:40:59,512 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2024-09-20 18:40:59,513 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2024-09-20 18:40:59,513 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-09-20 18:40:59,513 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2024-09-20 18:40:59,513 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2024-09-20 18:40:59,513 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2024-09-20 18:40:59,513 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2024-09-20 18:40:59,514 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2024-09-20 18:40:59,514 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/certificate-witnesses-artifact/automizer/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/certificate-witnesses-artifact/automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 0004a4c1c8347096eaba7e87038be30bb20b14d3b5abd082e79b4b4e835a243e Applying setting for plugin de.uni_freiburg.informatik.ultimate.boogie.procedureinliner: Inline calls to implemented procedures -> NEVER Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: Positions where we compute the Hoare Annotation -> All Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: YAML Format version -> 2.1 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Generate GraphML witnesses -> false [2024-09-20 18:40:59,722 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-09-20 18:40:59,742 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-09-20 18:40:59,744 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-09-20 18:40:59,745 INFO L270 PluginConnector]: Initializing CDTParser... [2024-09-20 18:40:59,746 INFO L274 PluginConnector]: CDTParser initialized [2024-09-20 18:40:59,746 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/certificate-witnesses-artifact/automizer/../sv-benchmarks/c/loops/vogal-1.i [2024-09-20 18:41:01,011 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-09-20 18:41:01,151 INFO L384 CDTParser]: Found 1 translation units. [2024-09-20 18:41:01,152 INFO L180 CDTParser]: Scanning /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/vogal-1.i [2024-09-20 18:41:01,157 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/certificate-witnesses-artifact/automizer/data/f601227dc/f20d9d25a4f54c598681b65e50ca4583/FLAGad8723aaf [2024-09-20 18:41:01,168 INFO L435 CDTParser]: Successfully deleted /storage/repos/certificate-witnesses-artifact/automizer/data/f601227dc/f20d9d25a4f54c598681b65e50ca4583 [2024-09-20 18:41:01,170 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-09-20 18:41:01,171 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-09-20 18:41:01,174 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-09-20 18:41:01,174 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-09-20 18:41:01,178 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-09-20 18:41:01,179 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,181 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2afa5757 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01, skipping insertion in model container [2024-09-20 18:41:01,181 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,197 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-09-20 18:41:01,315 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/vogal-1.i[895,908] [2024-09-20 18:41:01,334 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-20 18:41:01,339 INFO L200 MainTranslator]: Completed pre-run [2024-09-20 18:41:01,348 WARN L248 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/certificate-witnesses-artifact/sv-benchmarks/c/loops/vogal-1.i[895,908] [2024-09-20 18:41:01,355 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-09-20 18:41:01,369 INFO L204 MainTranslator]: Completed translation [2024-09-20 18:41:01,369 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01 WrapperNode [2024-09-20 18:41:01,369 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-09-20 18:41:01,370 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-09-20 18:41:01,370 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-09-20 18:41:01,370 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-09-20 18:41:01,375 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,383 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,389 INFO L138 Inliner]: procedures = 17, calls = 34, calls flagged for inlining = 0, calls inlined = 0, statements flattened = 0 [2024-09-20 18:41:01,389 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-09-20 18:41:01,389 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-09-20 18:41:01,390 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-09-20 18:41:01,390 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-09-20 18:41:01,400 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,400 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,402 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,413 INFO L175 MemorySlicer]: Split 21 memory accesses to 3 slices as follows [2, 13, 6]. 62 percent of accesses are in the largest equivalence class. The 13 initializations are split as follows [2, 11, 0]. The 1 writes are split as follows [0, 0, 1]. [2024-09-20 18:41:01,413 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,413 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,418 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,421 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,422 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,422 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,424 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-09-20 18:41:01,425 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-09-20 18:41:01,425 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-09-20 18:41:01,425 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-09-20 18:41:01,425 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01" (1/1) ... [2024-09-20 18:41:01,429 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2024-09-20 18:41:01,439 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:01,450 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2024-09-20 18:41:01,452 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2024-09-20 18:41:01,483 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-09-20 18:41:01,483 INFO L130 BoogieDeclarations]: Found specification of procedure main [2024-09-20 18:41:01,484 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2024-09-20 18:41:01,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-09-20 18:41:01,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-09-20 18:41:01,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-09-20 18:41:01,484 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2024-09-20 18:41:01,485 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2024-09-20 18:41:01,485 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2024-09-20 18:41:01,485 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2024-09-20 18:41:01,486 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2024-09-20 18:41:01,486 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2024-09-20 18:41:01,486 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-09-20 18:41:01,486 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-09-20 18:41:01,486 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2024-09-20 18:41:01,486 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2024-09-20 18:41:01,487 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2024-09-20 18:41:01,487 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_assert [2024-09-20 18:41:01,487 INFO L138 BoogieDeclarations]: Found implementation of procedure __VERIFIER_assert [2024-09-20 18:41:01,487 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2024-09-20 18:41:01,557 INFO L242 CfgBuilder]: Building ICFG [2024-09-20 18:41:01,558 INFO L268 CfgBuilder]: Building CFG for each procedure with an implementation [2024-09-20 18:41:01,738 INFO L? ?]: Removed 12 outVars from TransFormulas that were not future-live. [2024-09-20 18:41:01,738 INFO L291 CfgBuilder]: Performing block encoding [2024-09-20 18:41:01,761 INFO L313 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-09-20 18:41:01,762 INFO L318 CfgBuilder]: Removed 6 assume(true) statements. [2024-09-20 18:41:01,762 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.09 06:41:01 BoogieIcfgContainer [2024-09-20 18:41:01,762 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-09-20 18:41:01,763 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2024-09-20 18:41:01,763 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2024-09-20 18:41:01,766 INFO L274 PluginConnector]: TraceAbstraction initialized [2024-09-20 18:41:01,767 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.09 06:41:01" (1/3) ... [2024-09-20 18:41:01,767 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@f4ae178 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.09 06:41:01, skipping insertion in model container [2024-09-20 18:41:01,768 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.09 06:41:01" (2/3) ... [2024-09-20 18:41:01,769 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@f4ae178 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.09 06:41:01, skipping insertion in model container [2024-09-20 18:41:01,769 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.09 06:41:01" (3/3) ... [2024-09-20 18:41:01,770 INFO L112 eAbstractionObserver]: Analyzing ICFG vogal-1.i [2024-09-20 18:41:01,781 INFO L209 ceAbstractionStarter]: Automizer settings: Hoare:All NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2024-09-20 18:41:01,781 INFO L149 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2024-09-20 18:41:01,815 INFO L335 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2024-09-20 18:41:01,820 INFO L336 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@276a400, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2024-09-20 18:41:01,820 INFO L337 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2024-09-20 18:41:01,825 INFO L276 IsEmpty]: Start isEmpty. Operand has 35 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 28 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) [2024-09-20 18:41:01,830 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2024-09-20 18:41:01,830 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:01,830 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:01,830 INFO L399 AbstractCegarLoop]: === Iteration 1 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:01,836 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:01,836 INFO L85 PathProgramCache]: Analyzing trace with hash -1308321975, now seen corresponding path program 1 times [2024-09-20 18:41:01,842 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:01,843 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1368419489] [2024-09-20 18:41:01,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:01,843 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:01,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:01,984 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:01,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:01,997 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-20 18:41:01,999 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:01,999 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1368419489] [2024-09-20 18:41:02,000 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1368419489] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-20 18:41:02,000 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-20 18:41:02,000 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-09-20 18:41:02,001 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [933250227] [2024-09-20 18:41:02,002 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-20 18:41:02,005 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2024-09-20 18:41:02,006 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:02,021 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2024-09-20 18:41:02,022 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-20 18:41:02,023 INFO L87 Difference]: Start difference. First operand has 35 states, 27 states have (on average 1.6296296296296295) internal successors, (44), 28 states have internal predecessors, (44), 3 states have call successors, (3), 3 states have call predecessors, (3), 3 states have return successors, (3), 3 states have call predecessors, (3), 3 states have call successors, (3) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:02,042 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:02,042 INFO L93 Difference]: Finished difference Result 64 states and 93 transitions. [2024-09-20 18:41:02,043 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2024-09-20 18:41:02,044 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 17 [2024-09-20 18:41:02,045 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:02,049 INFO L225 Difference]: With dead ends: 64 [2024-09-20 18:41:02,049 INFO L226 Difference]: Without dead ends: 28 [2024-09-20 18:41:02,051 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2024-09-20 18:41:02,053 INFO L434 NwaCegarLoop]: 41 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 41 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 2 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:02,053 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 41 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 2 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-20 18:41:02,064 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28 states. [2024-09-20 18:41:02,073 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28 to 28. [2024-09-20 18:41:02,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 28 states, 23 states have (on average 1.3478260869565217) internal successors, (31), 23 states have internal predecessors, (31), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:02,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28 states to 28 states and 35 transitions. [2024-09-20 18:41:02,076 INFO L78 Accepts]: Start accepts. Automaton has 28 states and 35 transitions. Word has length 17 [2024-09-20 18:41:02,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:02,076 INFO L474 AbstractCegarLoop]: Abstraction has 28 states and 35 transitions. [2024-09-20 18:41:02,076 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:02,077 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:02,077 INFO L276 IsEmpty]: Start isEmpty. Operand 28 states and 35 transitions. [2024-09-20 18:41:02,077 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2024-09-20 18:41:02,077 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:02,078 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:02,078 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2024-09-20 18:41:02,078 INFO L399 AbstractCegarLoop]: === Iteration 2 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:02,078 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:02,079 INFO L85 PathProgramCache]: Analyzing trace with hash 516425503, now seen corresponding path program 1 times [2024-09-20 18:41:02,079 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:02,079 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1212035748] [2024-09-20 18:41:02,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:02,079 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:02,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:02,212 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:02,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:02,216 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-20 18:41:02,216 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:02,218 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1212035748] [2024-09-20 18:41:02,218 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1212035748] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-20 18:41:02,218 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-09-20 18:41:02,219 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-09-20 18:41:02,219 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [896279057] [2024-09-20 18:41:02,219 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-20 18:41:02,220 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-09-20 18:41:02,222 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:02,222 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-09-20 18:41:02,223 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-20 18:41:02,224 INFO L87 Difference]: Start difference. First operand 28 states and 35 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:02,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:02,267 INFO L93 Difference]: Finished difference Result 63 states and 83 transitions. [2024-09-20 18:41:02,267 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-09-20 18:41:02,268 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 19 [2024-09-20 18:41:02,268 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:02,270 INFO L225 Difference]: With dead ends: 63 [2024-09-20 18:41:02,270 INFO L226 Difference]: Without dead ends: 41 [2024-09-20 18:41:02,271 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 5 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-09-20 18:41:02,272 INFO L434 NwaCegarLoop]: 26 mSDtfsCounter, 14 mSDsluCounter, 22 mSDsCounter, 0 mSdLazyCounter, 19 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 48 SdHoareTripleChecker+Invalid, 21 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 19 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:02,273 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 48 Invalid, 21 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 19 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-20 18:41:02,273 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41 states. [2024-09-20 18:41:02,278 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41 to 29. [2024-09-20 18:41:02,279 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29 states, 24 states have (on average 1.3333333333333333) internal successors, (32), 24 states have internal predecessors, (32), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:02,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29 states to 29 states and 36 transitions. [2024-09-20 18:41:02,281 INFO L78 Accepts]: Start accepts. Automaton has 29 states and 36 transitions. Word has length 19 [2024-09-20 18:41:02,281 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:02,281 INFO L474 AbstractCegarLoop]: Abstraction has 29 states and 36 transitions. [2024-09-20 18:41:02,281 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:02,282 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:02,282 INFO L276 IsEmpty]: Start isEmpty. Operand 29 states and 36 transitions. [2024-09-20 18:41:02,283 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2024-09-20 18:41:02,283 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:02,283 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:02,286 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2024-09-20 18:41:02,286 INFO L399 AbstractCegarLoop]: === Iteration 3 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:02,286 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:02,286 INFO L85 PathProgramCache]: Analyzing trace with hash 22246406, now seen corresponding path program 1 times [2024-09-20 18:41:02,287 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:02,287 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1414451308] [2024-09-20 18:41:02,287 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:02,287 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:02,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:02,432 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:02,434 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:02,441 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-09-20 18:41:02,442 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:02,442 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1414451308] [2024-09-20 18:41:02,442 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1414451308] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:02,443 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1252183714] [2024-09-20 18:41:02,443 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:02,443 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:02,443 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:02,445 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:02,446 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2024-09-20 18:41:02,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:02,513 INFO L262 TraceCheckSpWp]: Trace formula consists of 118 conjuncts, 12 conjuncts are in the unsatisfiable core [2024-09-20 18:41:02,518 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:02,582 INFO L134 CoverageAnalysis]: Checked inductivity of 1 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-20 18:41:02,585 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-20 18:41:02,585 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1252183714] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-20 18:41:02,585 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-20 18:41:02,585 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [4] total 8 [2024-09-20 18:41:02,585 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [838297785] [2024-09-20 18:41:02,585 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-20 18:41:02,586 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2024-09-20 18:41:02,586 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:02,586 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-09-20 18:41:02,587 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2024-09-20 18:41:02,587 INFO L87 Difference]: Start difference. First operand 29 states and 36 transitions. Second operand has 6 states, 6 states have (on average 2.6666666666666665) internal successors, (16), 5 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:02,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:02,635 INFO L93 Difference]: Finished difference Result 53 states and 68 transitions. [2024-09-20 18:41:02,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-09-20 18:41:02,636 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 2.6666666666666665) internal successors, (16), 5 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 20 [2024-09-20 18:41:02,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:02,637 INFO L225 Difference]: With dead ends: 53 [2024-09-20 18:41:02,637 INFO L226 Difference]: Without dead ends: 48 [2024-09-20 18:41:02,637 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 26 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2024-09-20 18:41:02,639 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 28 mSDsluCounter, 106 mSDsCounter, 0 mSdLazyCounter, 25 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 138 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 25 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:02,640 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 138 Invalid, 25 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 25 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-20 18:41:02,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48 states. [2024-09-20 18:41:02,644 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48 to 41. [2024-09-20 18:41:02,645 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41 states, 36 states have (on average 1.3611111111111112) internal successors, (49), 36 states have internal predecessors, (49), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:02,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 53 transitions. [2024-09-20 18:41:02,649 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 53 transitions. Word has length 20 [2024-09-20 18:41:02,649 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:02,649 INFO L474 AbstractCegarLoop]: Abstraction has 41 states and 53 transitions. [2024-09-20 18:41:02,649 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 2.6666666666666665) internal successors, (16), 5 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:02,649 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:02,650 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 53 transitions. [2024-09-20 18:41:02,650 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2024-09-20 18:41:02,650 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:02,650 INFO L216 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:02,664 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2024-09-20 18:41:02,851 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2,2 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:02,851 INFO L399 AbstractCegarLoop]: === Iteration 4 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:02,852 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:02,852 INFO L85 PathProgramCache]: Analyzing trace with hash 260967679, now seen corresponding path program 1 times [2024-09-20 18:41:02,852 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:02,852 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [80172878] [2024-09-20 18:41:02,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:02,852 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:02,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:02,986 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:02,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:02,989 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-20 18:41:02,989 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:02,989 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [80172878] [2024-09-20 18:41:02,989 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [80172878] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:02,989 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1406374218] [2024-09-20 18:41:02,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:02,991 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:02,992 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:02,993 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:02,994 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2024-09-20 18:41:03,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:03,048 INFO L262 TraceCheckSpWp]: Trace formula consists of 137 conjuncts, 7 conjuncts are in the unsatisfiable core [2024-09-20 18:41:03,049 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:03,071 INFO L134 CoverageAnalysis]: Checked inductivity of 3 backedges. 1 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-20 18:41:03,072 INFO L323 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2024-09-20 18:41:03,073 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1406374218] provided 1 perfect and 0 imperfect interpolant sequences [2024-09-20 18:41:03,073 INFO L185 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2024-09-20 18:41:03,073 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [4] total 6 [2024-09-20 18:41:03,074 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1080250605] [2024-09-20 18:41:03,075 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-20 18:41:03,075 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2024-09-20 18:41:03,075 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:03,075 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-09-20 18:41:03,076 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2024-09-20 18:41:03,076 INFO L87 Difference]: Start difference. First operand 41 states and 53 transitions. Second operand has 4 states, 4 states have (on average 5.5) internal successors, (22), 4 states have internal predecessors, (22), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:03,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:03,112 INFO L93 Difference]: Finished difference Result 74 states and 98 transitions. [2024-09-20 18:41:03,112 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-09-20 18:41:03,113 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 5.5) internal successors, (22), 4 states have internal predecessors, (22), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 26 [2024-09-20 18:41:03,113 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:03,113 INFO L225 Difference]: With dead ends: 74 [2024-09-20 18:41:03,114 INFO L226 Difference]: Without dead ends: 45 [2024-09-20 18:41:03,115 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=13, Invalid=17, Unknown=0, NotChecked=0, Total=30 [2024-09-20 18:41:03,115 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 0 mSDsluCounter, 46 mSDsCounter, 0 mSdLazyCounter, 28 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 76 SdHoareTripleChecker+Invalid, 28 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 28 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:03,116 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 76 Invalid, 28 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 28 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-20 18:41:03,117 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45 states. [2024-09-20 18:41:03,121 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45 to 45. [2024-09-20 18:41:03,121 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 45 states, 40 states have (on average 1.35) internal successors, (54), 40 states have internal predecessors, (54), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:03,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 45 states to 45 states and 58 transitions. [2024-09-20 18:41:03,124 INFO L78 Accepts]: Start accepts. Automaton has 45 states and 58 transitions. Word has length 26 [2024-09-20 18:41:03,124 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:03,124 INFO L474 AbstractCegarLoop]: Abstraction has 45 states and 58 transitions. [2024-09-20 18:41:03,125 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 5.5) internal successors, (22), 4 states have internal predecessors, (22), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:03,125 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:03,125 INFO L276 IsEmpty]: Start isEmpty. Operand 45 states and 58 transitions. [2024-09-20 18:41:03,126 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2024-09-20 18:41:03,126 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:03,126 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:03,144 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2024-09-20 18:41:03,326 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3,3 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:03,327 INFO L399 AbstractCegarLoop]: === Iteration 5 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:03,327 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:03,327 INFO L85 PathProgramCache]: Analyzing trace with hash 1671267723, now seen corresponding path program 1 times [2024-09-20 18:41:03,327 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:03,327 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [659969134] [2024-09-20 18:41:03,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:03,328 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:03,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:03,421 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:03,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:03,424 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-09-20 18:41:03,425 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:03,425 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [659969134] [2024-09-20 18:41:03,425 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [659969134] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:03,425 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [935710678] [2024-09-20 18:41:03,425 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:03,425 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:03,426 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:03,428 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:03,432 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2024-09-20 18:41:03,487 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:03,488 INFO L262 TraceCheckSpWp]: Trace formula consists of 139 conjuncts, 18 conjuncts are in the unsatisfiable core [2024-09-20 18:41:03,490 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:03,595 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2024-09-20 18:41:03,597 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:03,725 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-20 18:41:03,726 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 46 treesize of output 30 [2024-09-20 18:41:03,753 INFO L134 CoverageAnalysis]: Checked inductivity of 4 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-20 18:41:03,754 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [935710678] provided 1 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:03,754 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-09-20 18:41:03,754 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [4, 9] total 15 [2024-09-20 18:41:03,754 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [785332546] [2024-09-20 18:41:03,754 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-20 18:41:03,754 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2024-09-20 18:41:03,755 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:03,755 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-09-20 18:41:03,756 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2024-09-20 18:41:03,756 INFO L87 Difference]: Start difference. First operand 45 states and 58 transitions. Second operand has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:03,889 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:03,890 INFO L93 Difference]: Finished difference Result 65 states and 82 transitions. [2024-09-20 18:41:03,890 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2024-09-20 18:41:03,890 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 27 [2024-09-20 18:41:03,890 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:03,891 INFO L225 Difference]: With dead ends: 65 [2024-09-20 18:41:03,891 INFO L226 Difference]: Without dead ends: 43 [2024-09-20 18:41:03,891 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 64 GetRequests, 46 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 88 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=79, Invalid=301, Unknown=0, NotChecked=0, Total=380 [2024-09-20 18:41:03,891 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 8 mSDsluCounter, 95 mSDsCounter, 0 mSdLazyCounter, 52 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 123 SdHoareTripleChecker+Invalid, 53 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 52 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:03,892 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [8 Valid, 123 Invalid, 53 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 52 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-20 18:41:03,892 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43 states. [2024-09-20 18:41:03,898 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43 to 43. [2024-09-20 18:41:03,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43 states, 38 states have (on average 1.3421052631578947) internal successors, (51), 38 states have internal predecessors, (51), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:03,900 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43 states to 43 states and 55 transitions. [2024-09-20 18:41:03,901 INFO L78 Accepts]: Start accepts. Automaton has 43 states and 55 transitions. Word has length 27 [2024-09-20 18:41:03,901 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:03,901 INFO L474 AbstractCegarLoop]: Abstraction has 43 states and 55 transitions. [2024-09-20 18:41:03,902 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 3.2857142857142856) internal successors, (23), 7 states have internal predecessors, (23), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:03,902 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:03,902 INFO L276 IsEmpty]: Start isEmpty. Operand 43 states and 55 transitions. [2024-09-20 18:41:03,903 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2024-09-20 18:41:03,903 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:03,903 INFO L216 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:03,916 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Ended with exit code 0 [2024-09-20 18:41:04,104 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4,4 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:04,104 INFO L399 AbstractCegarLoop]: === Iteration 6 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:04,105 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:04,105 INFO L85 PathProgramCache]: Analyzing trace with hash -400223430, now seen corresponding path program 1 times [2024-09-20 18:41:04,105 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:04,105 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [811509440] [2024-09-20 18:41:04,105 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:04,105 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:04,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:04,191 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:04,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:04,194 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 1 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-20 18:41:04,194 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:04,196 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [811509440] [2024-09-20 18:41:04,196 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [811509440] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:04,196 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1726079928] [2024-09-20 18:41:04,197 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:04,197 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:04,197 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:04,198 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:04,200 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2024-09-20 18:41:04,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:04,252 INFO L262 TraceCheckSpWp]: Trace formula consists of 144 conjuncts, 20 conjuncts are in the unsatisfiable core [2024-09-20 18:41:04,254 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:04,348 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-20 18:41:04,355 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2024-09-20 18:41:04,355 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:04,445 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-20 18:41:04,446 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 47 treesize of output 31 [2024-09-20 18:41:04,476 INFO L134 CoverageAnalysis]: Checked inductivity of 5 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2024-09-20 18:41:04,476 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1726079928] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:04,476 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:04,476 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 9, 7] total 15 [2024-09-20 18:41:04,477 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [463046591] [2024-09-20 18:41:04,477 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:04,477 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2024-09-20 18:41:04,477 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:04,478 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2024-09-20 18:41:04,478 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=47, Invalid=163, Unknown=0, NotChecked=0, Total=210 [2024-09-20 18:41:04,478 INFO L87 Difference]: Start difference. First operand 43 states and 55 transitions. Second operand has 15 states, 15 states have (on average 4.133333333333334) internal successors, (62), 15 states have internal predecessors, (62), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:04,640 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:04,640 INFO L93 Difference]: Finished difference Result 124 states and 169 transitions. [2024-09-20 18:41:04,641 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-09-20 18:41:04,641 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 15 states have (on average 4.133333333333334) internal successors, (62), 15 states have internal predecessors, (62), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 28 [2024-09-20 18:41:04,641 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:04,642 INFO L225 Difference]: With dead ends: 124 [2024-09-20 18:41:04,642 INFO L226 Difference]: Without dead ends: 88 [2024-09-20 18:41:04,642 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=83, Invalid=259, Unknown=0, NotChecked=0, Total=342 [2024-09-20 18:41:04,643 INFO L434 NwaCegarLoop]: 23 mSDtfsCounter, 95 mSDsluCounter, 182 mSDsCounter, 0 mSdLazyCounter, 148 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 95 SdHoareTripleChecker+Valid, 205 SdHoareTripleChecker+Invalid, 151 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 148 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:04,643 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [95 Valid, 205 Invalid, 151 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 148 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-20 18:41:04,643 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88 states. [2024-09-20 18:41:04,654 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88 to 46. [2024-09-20 18:41:04,655 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 46 states, 41 states have (on average 1.3170731707317074) internal successors, (54), 41 states have internal predecessors, (54), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:04,656 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46 states to 46 states and 58 transitions. [2024-09-20 18:41:04,656 INFO L78 Accepts]: Start accepts. Automaton has 46 states and 58 transitions. Word has length 28 [2024-09-20 18:41:04,656 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:04,657 INFO L474 AbstractCegarLoop]: Abstraction has 46 states and 58 transitions. [2024-09-20 18:41:04,657 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 15 states have (on average 4.133333333333334) internal successors, (62), 15 states have internal predecessors, (62), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:04,657 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:04,657 INFO L276 IsEmpty]: Start isEmpty. Operand 46 states and 58 transitions. [2024-09-20 18:41:04,658 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2024-09-20 18:41:04,658 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:04,658 INFO L216 NwaCegarLoop]: trace histogram [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:04,671 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2024-09-20 18:41:04,859 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5,5 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:04,859 INFO L399 AbstractCegarLoop]: === Iteration 7 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:04,859 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:04,859 INFO L85 PathProgramCache]: Analyzing trace with hash -461832489, now seen corresponding path program 1 times [2024-09-20 18:41:04,859 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:04,860 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [589880044] [2024-09-20 18:41:04,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:04,860 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:04,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:04,943 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:04,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:04,945 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-20 18:41:04,945 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:04,945 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [589880044] [2024-09-20 18:41:04,945 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [589880044] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:04,946 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1934627085] [2024-09-20 18:41:04,946 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:04,946 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:04,946 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:04,949 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:04,951 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2024-09-20 18:41:05,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:05,003 INFO L262 TraceCheckSpWp]: Trace formula consists of 155 conjuncts, 22 conjuncts are in the unsatisfiable core [2024-09-20 18:41:05,005 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:05,066 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:05,066 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 42 treesize of output 34 [2024-09-20 18:41:05,113 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 0 proven. 4 refuted. 0 times theorem prover too weak. 4 trivial. 0 not checked. [2024-09-20 18:41:05,113 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:05,195 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-20 18:41:05,196 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 47 treesize of output 31 [2024-09-20 18:41:05,216 INFO L134 CoverageAnalysis]: Checked inductivity of 8 backedges. 1 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2024-09-20 18:41:05,217 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1934627085] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:05,217 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:05,217 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 10, 9] total 18 [2024-09-20 18:41:05,217 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [928329604] [2024-09-20 18:41:05,217 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:05,217 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2024-09-20 18:41:05,217 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:05,218 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2024-09-20 18:41:05,218 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=54, Invalid=252, Unknown=0, NotChecked=0, Total=306 [2024-09-20 18:41:05,218 INFO L87 Difference]: Start difference. First operand 46 states and 58 transitions. Second operand has 18 states, 18 states have (on average 2.6666666666666665) internal successors, (48), 18 states have internal predecessors, (48), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:05,504 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:05,505 INFO L93 Difference]: Finished difference Result 152 states and 208 transitions. [2024-09-20 18:41:05,505 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2024-09-20 18:41:05,505 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 2.6666666666666665) internal successors, (48), 18 states have internal predecessors, (48), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2024-09-20 18:41:05,505 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:05,507 INFO L225 Difference]: With dead ends: 152 [2024-09-20 18:41:05,507 INFO L226 Difference]: Without dead ends: 114 [2024-09-20 18:41:05,508 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 80 GetRequests, 49 SyntacticMatches, 1 SemanticMatches, 30 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 205 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=217, Invalid=775, Unknown=0, NotChecked=0, Total=992 [2024-09-20 18:41:05,509 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 323 mSDsluCounter, 178 mSDsCounter, 0 mSdLazyCounter, 182 mSolverCounterSat, 14 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 323 SdHoareTripleChecker+Valid, 210 SdHoareTripleChecker+Invalid, 196 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 14 IncrementalHoareTripleChecker+Valid, 182 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:05,509 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [323 Valid, 210 Invalid, 196 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [14 Valid, 182 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-20 18:41:05,510 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114 states. [2024-09-20 18:41:05,525 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114 to 48. [2024-09-20 18:41:05,525 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48 states, 43 states have (on average 1.302325581395349) internal successors, (56), 43 states have internal predecessors, (56), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:05,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48 states to 48 states and 60 transitions. [2024-09-20 18:41:05,526 INFO L78 Accepts]: Start accepts. Automaton has 48 states and 60 transitions. Word has length 30 [2024-09-20 18:41:05,526 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:05,526 INFO L474 AbstractCegarLoop]: Abstraction has 48 states and 60 transitions. [2024-09-20 18:41:05,526 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 2.6666666666666665) internal successors, (48), 18 states have internal predecessors, (48), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:05,527 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:05,527 INFO L276 IsEmpty]: Start isEmpty. Operand 48 states and 60 transitions. [2024-09-20 18:41:05,527 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2024-09-20 18:41:05,528 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:05,528 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:05,542 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2024-09-20 18:41:05,729 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2024-09-20 18:41:05,729 INFO L399 AbstractCegarLoop]: === Iteration 8 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:05,730 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:05,730 INFO L85 PathProgramCache]: Analyzing trace with hash 450517516, now seen corresponding path program 1 times [2024-09-20 18:41:05,730 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:05,730 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [574422021] [2024-09-20 18:41:05,730 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:05,730 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:05,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:05,808 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:05,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:05,810 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-09-20 18:41:05,810 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:05,810 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [574422021] [2024-09-20 18:41:05,810 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [574422021] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:05,810 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1461958313] [2024-09-20 18:41:05,810 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:05,810 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:05,810 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:05,812 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:05,814 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Waiting until timeout for monitored process [2024-09-20 18:41:05,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:05,866 INFO L262 TraceCheckSpWp]: Trace formula consists of 170 conjuncts, 8 conjuncts are in the unsatisfiable core [2024-09-20 18:41:05,867 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:05,877 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 2 proven. 1 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2024-09-20 18:41:05,877 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:05,887 INFO L134 CoverageAnalysis]: Checked inductivity of 12 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-20 18:41:05,887 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1461958313] provided 1 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:05,888 INFO L185 FreeRefinementEngine]: Found 1 perfect and 2 imperfect interpolant sequences. [2024-09-20 18:41:05,888 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [6, 3] total 8 [2024-09-20 18:41:05,888 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [747463012] [2024-09-20 18:41:05,888 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-09-20 18:41:05,888 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2024-09-20 18:41:05,889 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:05,889 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-09-20 18:41:05,889 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2024-09-20 18:41:05,889 INFO L87 Difference]: Start difference. First operand 48 states and 60 transitions. Second operand has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:05,913 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:05,913 INFO L93 Difference]: Finished difference Result 83 states and 109 transitions. [2024-09-20 18:41:05,913 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-09-20 18:41:05,913 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 34 [2024-09-20 18:41:05,914 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:05,914 INFO L225 Difference]: With dead ends: 83 [2024-09-20 18:41:05,914 INFO L226 Difference]: Without dead ends: 52 [2024-09-20 18:41:05,914 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 69 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2024-09-20 18:41:05,915 INFO L434 NwaCegarLoop]: 29 mSDtfsCounter, 6 mSDsluCounter, 20 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6 SdHoareTripleChecker+Valid, 49 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:05,915 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [6 Valid, 49 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2024-09-20 18:41:05,929 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52 states. [2024-09-20 18:41:05,939 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52 to 52. [2024-09-20 18:41:05,939 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52 states, 47 states have (on average 1.2765957446808511) internal successors, (60), 47 states have internal predecessors, (60), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:05,940 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52 states to 52 states and 64 transitions. [2024-09-20 18:41:05,940 INFO L78 Accepts]: Start accepts. Automaton has 52 states and 64 transitions. Word has length 34 [2024-09-20 18:41:05,940 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:05,940 INFO L474 AbstractCegarLoop]: Abstraction has 52 states and 64 transitions. [2024-09-20 18:41:05,940 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.0) internal successors, (27), 3 states have internal predecessors, (27), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:05,941 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:05,941 INFO L276 IsEmpty]: Start isEmpty. Operand 52 states and 64 transitions. [2024-09-20 18:41:05,941 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2024-09-20 18:41:05,941 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:05,942 INFO L216 NwaCegarLoop]: trace histogram [3, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:05,954 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (7)] Forceful destruction successful, exit code 0 [2024-09-20 18:41:06,142 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7,7 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:06,143 INFO L399 AbstractCegarLoop]: === Iteration 9 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:06,143 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:06,143 INFO L85 PathProgramCache]: Analyzing trace with hash 1134559415, now seen corresponding path program 1 times [2024-09-20 18:41:06,143 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:06,143 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1240699323] [2024-09-20 18:41:06,143 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:06,144 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:06,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:06,262 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:06,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:06,264 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 0 proven. 6 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2024-09-20 18:41:06,264 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:06,264 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1240699323] [2024-09-20 18:41:06,264 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1240699323] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:06,265 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1202962388] [2024-09-20 18:41:06,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:06,265 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:06,265 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:06,266 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:06,267 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Waiting until timeout for monitored process [2024-09-20 18:41:06,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:06,324 INFO L262 TraceCheckSpWp]: Trace formula consists of 183 conjuncts, 10 conjuncts are in the unsatisfiable core [2024-09-20 18:41:06,328 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:06,347 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 1 proven. 6 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2024-09-20 18:41:06,347 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:06,373 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 1 proven. 1 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-09-20 18:41:06,373 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1202962388] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:06,373 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:06,373 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6, 4] total 10 [2024-09-20 18:41:06,374 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [346001045] [2024-09-20 18:41:06,374 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:06,374 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2024-09-20 18:41:06,375 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:06,375 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2024-09-20 18:41:06,375 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=23, Invalid=67, Unknown=0, NotChecked=0, Total=90 [2024-09-20 18:41:06,376 INFO L87 Difference]: Start difference. First operand 52 states and 64 transitions. Second operand has 10 states, 10 states have (on average 5.1) internal successors, (51), 10 states have internal predecessors, (51), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:06,666 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:06,667 INFO L93 Difference]: Finished difference Result 297 states and 421 transitions. [2024-09-20 18:41:06,667 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2024-09-20 18:41:06,667 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 10 states have internal predecessors, (51), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 37 [2024-09-20 18:41:06,667 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:06,669 INFO L225 Difference]: With dead ends: 297 [2024-09-20 18:41:06,669 INFO L226 Difference]: Without dead ends: 254 [2024-09-20 18:41:06,670 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 93 GetRequests, 73 SyntacticMatches, 0 SemanticMatches, 20 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 71 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=115, Invalid=347, Unknown=0, NotChecked=0, Total=462 [2024-09-20 18:41:06,671 INFO L434 NwaCegarLoop]: 52 mSDtfsCounter, 288 mSDsluCounter, 181 mSDsCounter, 0 mSdLazyCounter, 234 mSolverCounterSat, 50 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 288 SdHoareTripleChecker+Valid, 233 SdHoareTripleChecker+Invalid, 284 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 50 IncrementalHoareTripleChecker+Valid, 234 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:06,671 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [288 Valid, 233 Invalid, 284 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [50 Valid, 234 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-20 18:41:06,672 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2024-09-20 18:41:06,710 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 65. [2024-09-20 18:41:06,710 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65 states, 60 states have (on average 1.2833333333333334) internal successors, (77), 60 states have internal predecessors, (77), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:06,711 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65 states to 65 states and 81 transitions. [2024-09-20 18:41:06,711 INFO L78 Accepts]: Start accepts. Automaton has 65 states and 81 transitions. Word has length 37 [2024-09-20 18:41:06,711 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:06,711 INFO L474 AbstractCegarLoop]: Abstraction has 65 states and 81 transitions. [2024-09-20 18:41:06,712 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.1) internal successors, (51), 10 states have internal predecessors, (51), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:06,712 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:06,712 INFO L276 IsEmpty]: Start isEmpty. Operand 65 states and 81 transitions. [2024-09-20 18:41:06,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2024-09-20 18:41:06,712 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:06,712 INFO L216 NwaCegarLoop]: trace histogram [4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:06,724 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (8)] Ended with exit code 0 [2024-09-20 18:41:06,916 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8,8 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:06,917 INFO L399 AbstractCegarLoop]: === Iteration 10 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:06,917 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:06,917 INFO L85 PathProgramCache]: Analyzing trace with hash 1612339571, now seen corresponding path program 2 times [2024-09-20 18:41:06,917 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:06,917 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1297855566] [2024-09-20 18:41:06,917 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:06,917 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:06,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:07,035 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:07,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:07,037 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-20 18:41:07,037 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:07,037 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1297855566] [2024-09-20 18:41:07,037 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1297855566] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:07,037 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [183647739] [2024-09-20 18:41:07,037 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-20 18:41:07,037 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:07,037 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:07,040 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:07,041 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Waiting until timeout for monitored process [2024-09-20 18:41:07,111 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-20 18:41:07,111 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:41:07,112 INFO L262 TraceCheckSpWp]: Trace formula consists of 218 conjuncts, 11 conjuncts are in the unsatisfiable core [2024-09-20 18:41:07,114 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:07,126 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-20 18:41:07,127 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:07,179 INFO L134 CoverageAnalysis]: Checked inductivity of 25 backedges. 0 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-20 18:41:07,179 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [183647739] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:07,179 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:07,179 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7, 7] total 13 [2024-09-20 18:41:07,180 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [65843763] [2024-09-20 18:41:07,180 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:07,180 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2024-09-20 18:41:07,180 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:07,180 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2024-09-20 18:41:07,181 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=112, Unknown=0, NotChecked=0, Total=156 [2024-09-20 18:41:07,181 INFO L87 Difference]: Start difference. First operand 65 states and 81 transitions. Second operand has 13 states, 13 states have (on average 3.076923076923077) internal successors, (40), 13 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:07,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:07,407 INFO L93 Difference]: Finished difference Result 309 states and 412 transitions. [2024-09-20 18:41:07,408 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-09-20 18:41:07,408 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 3.076923076923077) internal successors, (40), 13 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 44 [2024-09-20 18:41:07,408 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:07,409 INFO L225 Difference]: With dead ends: 309 [2024-09-20 18:41:07,410 INFO L226 Difference]: Without dead ends: 254 [2024-09-20 18:41:07,410 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 96 GetRequests, 85 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=112, Unknown=0, NotChecked=0, Total=156 [2024-09-20 18:41:07,410 INFO L434 NwaCegarLoop]: 68 mSDtfsCounter, 149 mSDsluCounter, 351 mSDsCounter, 0 mSdLazyCounter, 275 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 149 SdHoareTripleChecker+Valid, 419 SdHoareTripleChecker+Invalid, 297 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 275 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:07,411 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [149 Valid, 419 Invalid, 297 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 275 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-20 18:41:07,412 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254 states. [2024-09-20 18:41:07,436 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254 to 66. [2024-09-20 18:41:07,436 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 66 states, 61 states have (on average 1.278688524590164) internal successors, (78), 61 states have internal predecessors, (78), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:07,437 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 82 transitions. [2024-09-20 18:41:07,437 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 82 transitions. Word has length 44 [2024-09-20 18:41:07,437 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:07,438 INFO L474 AbstractCegarLoop]: Abstraction has 66 states and 82 transitions. [2024-09-20 18:41:07,438 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 3.076923076923077) internal successors, (40), 13 states have internal predecessors, (40), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:07,438 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:07,438 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 82 transitions. [2024-09-20 18:41:07,439 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-20 18:41:07,439 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:07,439 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:07,451 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (9)] Ended with exit code 0 [2024-09-20 18:41:07,639 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9,9 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:07,640 INFO L399 AbstractCegarLoop]: === Iteration 11 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:07,640 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:07,641 INFO L85 PathProgramCache]: Analyzing trace with hash 974810732, now seen corresponding path program 3 times [2024-09-20 18:41:07,641 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:07,641 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1875968604] [2024-09-20 18:41:07,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:07,641 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:07,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:07,997 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:07,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:07,999 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-20 18:41:07,999 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:07,999 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1875968604] [2024-09-20 18:41:08,000 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1875968604] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:08,000 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1706705322] [2024-09-20 18:41:08,000 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-20 18:41:08,000 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:08,000 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:08,001 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:08,002 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Waiting until timeout for monitored process [2024-09-20 18:41:08,178 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 4 check-sat command(s) [2024-09-20 18:41:08,178 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:41:08,180 INFO L262 TraceCheckSpWp]: Trace formula consists of 227 conjuncts, 23 conjuncts are in the unsatisfiable core [2024-09-20 18:41:08,182 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:08,258 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-20 18:41:08,258 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:08,392 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 0 proven. 13 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-20 18:41:08,392 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1706705322] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:08,392 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:08,392 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 10, 10] total 20 [2024-09-20 18:41:08,392 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [707704120] [2024-09-20 18:41:08,392 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:08,392 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2024-09-20 18:41:08,393 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:08,393 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2024-09-20 18:41:08,393 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=55, Invalid=325, Unknown=0, NotChecked=0, Total=380 [2024-09-20 18:41:08,393 INFO L87 Difference]: Start difference. First operand 66 states and 82 transitions. Second operand has 20 states, 20 states have (on average 3.55) internal successors, (71), 18 states have internal predecessors, (71), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:08,541 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:08,541 INFO L93 Difference]: Finished difference Result 182 states and 237 transitions. [2024-09-20 18:41:08,541 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2024-09-20 18:41:08,541 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 20 states have (on average 3.55) internal successors, (71), 18 states have internal predecessors, (71), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-20 18:41:08,541 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:08,542 INFO L225 Difference]: With dead ends: 182 [2024-09-20 18:41:08,542 INFO L226 Difference]: Without dead ends: 176 [2024-09-20 18:41:08,543 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 105 GetRequests, 81 SyntacticMatches, 2 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 93 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=79, Invalid=473, Unknown=0, NotChecked=0, Total=552 [2024-09-20 18:41:08,543 INFO L434 NwaCegarLoop]: 98 mSDtfsCounter, 149 mSDsluCounter, 813 mSDsCounter, 0 mSdLazyCounter, 151 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 149 SdHoareTripleChecker+Valid, 911 SdHoareTripleChecker+Invalid, 155 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 151 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:08,543 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [149 Valid, 911 Invalid, 155 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4 Valid, 151 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-20 18:41:08,544 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 176 states. [2024-09-20 18:41:08,570 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 176 to 110. [2024-09-20 18:41:08,571 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 110 states, 105 states have (on average 1.3142857142857143) internal successors, (138), 105 states have internal predecessors, (138), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:08,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 110 states to 110 states and 142 transitions. [2024-09-20 18:41:08,571 INFO L78 Accepts]: Start accepts. Automaton has 110 states and 142 transitions. Word has length 45 [2024-09-20 18:41:08,572 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:08,572 INFO L474 AbstractCegarLoop]: Abstraction has 110 states and 142 transitions. [2024-09-20 18:41:08,572 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 20 states have (on average 3.55) internal successors, (71), 18 states have internal predecessors, (71), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:08,572 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:08,572 INFO L276 IsEmpty]: Start isEmpty. Operand 110 states and 142 transitions. [2024-09-20 18:41:08,573 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-20 18:41:08,573 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:08,573 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:08,586 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (10)] Ended with exit code 0 [2024-09-20 18:41:08,773 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable10 [2024-09-20 18:41:08,774 INFO L399 AbstractCegarLoop]: === Iteration 12 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:08,774 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:08,774 INFO L85 PathProgramCache]: Analyzing trace with hash 581783722, now seen corresponding path program 1 times [2024-09-20 18:41:08,774 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:08,774 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [936324582] [2024-09-20 18:41:08,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:08,774 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:08,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:09,853 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:09,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:09,855 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-20 18:41:09,855 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:09,856 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [936324582] [2024-09-20 18:41:09,857 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [936324582] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:09,857 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1640993260] [2024-09-20 18:41:09,857 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:09,857 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:09,857 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:09,858 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:09,860 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Waiting until timeout for monitored process [2024-09-20 18:41:09,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:09,943 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 42 conjuncts are in the unsatisfiable core [2024-09-20 18:41:09,945 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:10,248 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-20 18:41:10,251 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-20 18:41:10,265 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 13 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-20 18:41:10,265 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:10,553 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:10,553 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 68 treesize of output 57 [2024-09-20 18:41:10,561 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:10,561 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 47 treesize of output 35 [2024-09-20 18:41:10,714 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 8 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-20 18:41:10,715 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1640993260] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:10,715 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:10,715 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [17, 14, 13] total 36 [2024-09-20 18:41:10,715 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [32472937] [2024-09-20 18:41:10,715 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:10,715 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2024-09-20 18:41:10,715 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:10,716 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2024-09-20 18:41:10,716 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=211, Invalid=1049, Unknown=0, NotChecked=0, Total=1260 [2024-09-20 18:41:10,716 INFO L87 Difference]: Start difference. First operand 110 states and 142 transitions. Second operand has 36 states, 36 states have (on average 2.3333333333333335) internal successors, (84), 36 states have internal predecessors, (84), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:13,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:13,276 INFO L93 Difference]: Finished difference Result 571 states and 790 transitions. [2024-09-20 18:41:13,277 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2024-09-20 18:41:13,277 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 2.3333333333333335) internal successors, (84), 36 states have internal predecessors, (84), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-20 18:41:13,277 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:13,279 INFO L225 Difference]: With dead ends: 571 [2024-09-20 18:41:13,279 INFO L226 Difference]: Without dead ends: 480 [2024-09-20 18:41:13,282 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 164 GetRequests, 80 SyntacticMatches, 0 SemanticMatches, 84 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2127 ImplicationChecksByTransitivity, 2.5s TimeCoverageRelationStatistics Valid=1453, Invalid=5857, Unknown=0, NotChecked=0, Total=7310 [2024-09-20 18:41:13,282 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 393 mSDsluCounter, 357 mSDsCounter, 0 mSdLazyCounter, 654 mSolverCounterSat, 93 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 393 SdHoareTripleChecker+Valid, 385 SdHoareTripleChecker+Invalid, 747 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 93 IncrementalHoareTripleChecker+Valid, 654 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:13,283 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [393 Valid, 385 Invalid, 747 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [93 Valid, 654 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-20 18:41:13,283 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 480 states. [2024-09-20 18:41:13,387 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 480 to 303. [2024-09-20 18:41:13,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 303 states, 298 states have (on average 1.3557046979865772) internal successors, (404), 298 states have internal predecessors, (404), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:13,388 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 303 states to 303 states and 408 transitions. [2024-09-20 18:41:13,389 INFO L78 Accepts]: Start accepts. Automaton has 303 states and 408 transitions. Word has length 45 [2024-09-20 18:41:13,389 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:13,389 INFO L474 AbstractCegarLoop]: Abstraction has 303 states and 408 transitions. [2024-09-20 18:41:13,389 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 2.3333333333333335) internal successors, (84), 36 states have internal predecessors, (84), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:13,389 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:13,389 INFO L276 IsEmpty]: Start isEmpty. Operand 303 states and 408 transitions. [2024-09-20 18:41:13,390 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-20 18:41:13,390 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:13,390 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:13,402 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (11)] Forceful destruction successful, exit code 0 [2024-09-20 18:41:13,590 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2024-09-20 18:41:13,591 INFO L399 AbstractCegarLoop]: === Iteration 13 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:13,591 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:13,591 INFO L85 PathProgramCache]: Analyzing trace with hash 388004718, now seen corresponding path program 2 times [2024-09-20 18:41:13,591 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:13,591 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1023118718] [2024-09-20 18:41:13,591 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:13,591 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:13,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:14,396 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:14,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:14,398 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 7 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-20 18:41:14,399 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:14,399 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1023118718] [2024-09-20 18:41:14,399 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1023118718] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:14,399 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1184838236] [2024-09-20 18:41:14,399 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-20 18:41:14,399 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:14,399 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:14,401 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:14,402 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Waiting until timeout for monitored process [2024-09-20 18:41:14,470 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-20 18:41:14,471 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:41:14,472 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 41 conjuncts are in the unsatisfiable core [2024-09-20 18:41:14,474 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:15,230 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:15,231 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 152 treesize of output 146 [2024-09-20 18:41:15,239 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:15,239 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 80 treesize of output 52 [2024-09-20 18:41:15,331 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-20 18:41:15,332 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:16,066 INFO L349 Elim1Store]: treesize reduction 58, result has 1.7 percent of original size [2024-09-20 18:41:16,066 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 188 treesize of output 1 [2024-09-20 18:41:16,070 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 11 proven. 2 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-20 18:41:16,070 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1184838236] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:16,070 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:16,070 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 15, 12] total 36 [2024-09-20 18:41:16,070 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [463655425] [2024-09-20 18:41:16,070 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:16,070 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 36 states [2024-09-20 18:41:16,070 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:16,071 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 36 interpolants. [2024-09-20 18:41:16,071 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=200, Invalid=1060, Unknown=0, NotChecked=0, Total=1260 [2024-09-20 18:41:16,071 INFO L87 Difference]: Start difference. First operand 303 states and 408 transitions. Second operand has 36 states, 36 states have (on average 2.5) internal successors, (90), 36 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:27,489 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:27,489 INFO L93 Difference]: Finished difference Result 1764 states and 2442 transitions. [2024-09-20 18:41:27,489 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 203 states. [2024-09-20 18:41:27,490 INFO L78 Accepts]: Start accepts. Automaton has has 36 states, 36 states have (on average 2.5) internal successors, (90), 36 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-20 18:41:27,490 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:27,496 INFO L225 Difference]: With dead ends: 1764 [2024-09-20 18:41:27,496 INFO L226 Difference]: Without dead ends: 1570 [2024-09-20 18:41:27,505 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 318 GetRequests, 89 SyntacticMatches, 0 SemanticMatches, 229 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21105 ImplicationChecksByTransitivity, 10.2s TimeCoverageRelationStatistics Valid=6078, Invalid=47052, Unknown=0, NotChecked=0, Total=53130 [2024-09-20 18:41:27,505 INFO L434 NwaCegarLoop]: 30 mSDtfsCounter, 1094 mSDsluCounter, 354 mSDsCounter, 0 mSdLazyCounter, 1305 mSolverCounterSat, 251 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1094 SdHoareTripleChecker+Valid, 384 SdHoareTripleChecker+Invalid, 1556 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 251 IncrementalHoareTripleChecker+Valid, 1305 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:27,506 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [1094 Valid, 384 Invalid, 1556 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [251 Valid, 1305 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2024-09-20 18:41:27,507 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1570 states. [2024-09-20 18:41:27,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1570 to 860. [2024-09-20 18:41:27,905 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 860 states, 855 states have (on average 1.3719298245614036) internal successors, (1173), 855 states have internal predecessors, (1173), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:27,907 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 860 states to 860 states and 1177 transitions. [2024-09-20 18:41:27,909 INFO L78 Accepts]: Start accepts. Automaton has 860 states and 1177 transitions. Word has length 45 [2024-09-20 18:41:27,909 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:27,909 INFO L474 AbstractCegarLoop]: Abstraction has 860 states and 1177 transitions. [2024-09-20 18:41:27,910 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 36 states, 36 states have (on average 2.5) internal successors, (90), 36 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:27,910 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:27,910 INFO L276 IsEmpty]: Start isEmpty. Operand 860 states and 1177 transitions. [2024-09-20 18:41:27,911 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-20 18:41:27,911 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:27,912 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:27,923 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (12)] Forceful destruction successful, exit code 0 [2024-09-20 18:41:28,112 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12,12 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:28,112 INFO L399 AbstractCegarLoop]: === Iteration 14 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:28,112 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:28,112 INFO L85 PathProgramCache]: Analyzing trace with hash 1193665450, now seen corresponding path program 1 times [2024-09-20 18:41:28,113 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:28,113 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1853292819] [2024-09-20 18:41:28,113 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:28,113 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:28,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:28,711 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:28,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:28,715 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 7 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2024-09-20 18:41:28,715 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:28,715 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1853292819] [2024-09-20 18:41:28,715 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1853292819] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:28,715 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2075742787] [2024-09-20 18:41:28,715 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:28,715 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:28,716 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:28,717 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:28,718 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Waiting until timeout for monitored process [2024-09-20 18:41:28,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:28,788 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 48 conjuncts are in the unsatisfiable core [2024-09-20 18:41:28,790 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:29,158 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 31 treesize of output 19 [2024-09-20 18:41:29,162 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:29,162 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 23 treesize of output 11 [2024-09-20 18:41:29,176 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 13 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-20 18:41:29,176 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:29,638 INFO L349 Elim1Store]: treesize reduction 25, result has 32.4 percent of original size [2024-09-20 18:41:29,638 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 109 treesize of output 78 [2024-09-20 18:41:29,646 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:29,646 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 91 treesize of output 63 [2024-09-20 18:41:29,716 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 7 proven. 6 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-20 18:41:29,716 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2075742787] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:29,716 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:29,716 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 16, 15] total 38 [2024-09-20 18:41:29,716 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [385589983] [2024-09-20 18:41:29,716 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:29,717 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-20 18:41:29,717 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:29,717 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-20 18:41:29,717 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=289, Invalid=1117, Unknown=0, NotChecked=0, Total=1406 [2024-09-20 18:41:29,717 INFO L87 Difference]: Start difference. First operand 860 states and 1177 transitions. Second operand has 38 states, 38 states have (on average 2.3947368421052633) internal successors, (91), 38 states have internal predecessors, (91), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:32,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:32,031 INFO L93 Difference]: Finished difference Result 1736 states and 2337 transitions. [2024-09-20 18:41:32,031 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 45 states. [2024-09-20 18:41:32,032 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 2.3947368421052633) internal successors, (91), 38 states have internal predecessors, (91), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-20 18:41:32,032 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:32,036 INFO L225 Difference]: With dead ends: 1736 [2024-09-20 18:41:32,036 INFO L226 Difference]: Without dead ends: 1356 [2024-09-20 18:41:32,037 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 142 GetRequests, 72 SyntacticMatches, 0 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1244 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=1257, Invalid=3855, Unknown=0, NotChecked=0, Total=5112 [2024-09-20 18:41:32,038 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 414 mSDsluCounter, 346 mSDsCounter, 0 mSdLazyCounter, 697 mSolverCounterSat, 60 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 414 SdHoareTripleChecker+Valid, 374 SdHoareTripleChecker+Invalid, 757 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 60 IncrementalHoareTripleChecker+Valid, 697 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:32,038 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [414 Valid, 374 Invalid, 757 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [60 Valid, 697 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-20 18:41:32,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1356 states. [2024-09-20 18:41:32,452 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1356 to 897. [2024-09-20 18:41:32,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 897 states, 892 states have (on average 1.3475336322869955) internal successors, (1202), 892 states have internal predecessors, (1202), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:32,455 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 897 states to 897 states and 1206 transitions. [2024-09-20 18:41:32,456 INFO L78 Accepts]: Start accepts. Automaton has 897 states and 1206 transitions. Word has length 45 [2024-09-20 18:41:32,456 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:32,457 INFO L474 AbstractCegarLoop]: Abstraction has 897 states and 1206 transitions. [2024-09-20 18:41:32,457 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 2.3947368421052633) internal successors, (91), 38 states have internal predecessors, (91), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:32,457 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:32,457 INFO L276 IsEmpty]: Start isEmpty. Operand 897 states and 1206 transitions. [2024-09-20 18:41:32,458 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-20 18:41:32,458 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:32,458 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:32,470 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (13)] Ended with exit code 0 [2024-09-20 18:41:32,662 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2024-09-20 18:41:32,663 INFO L399 AbstractCegarLoop]: === Iteration 15 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:32,663 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:32,663 INFO L85 PathProgramCache]: Analyzing trace with hash 1115359342, now seen corresponding path program 2 times [2024-09-20 18:41:32,663 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:32,663 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1823612322] [2024-09-20 18:41:32,663 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:32,663 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:32,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:33,112 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:33,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:33,114 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 2 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-09-20 18:41:33,115 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:33,115 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1823612322] [2024-09-20 18:41:33,115 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1823612322] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:33,115 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2054076240] [2024-09-20 18:41:33,115 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-20 18:41:33,115 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:33,115 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:33,117 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:33,118 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Waiting until timeout for monitored process [2024-09-20 18:41:33,192 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-20 18:41:33,192 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:41:33,193 INFO L262 TraceCheckSpWp]: Trace formula consists of 222 conjuncts, 41 conjuncts are in the unsatisfiable core [2024-09-20 18:41:33,195 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:33,790 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:33,790 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 152 treesize of output 146 [2024-09-20 18:41:33,796 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:33,796 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 80 treesize of output 52 [2024-09-20 18:41:34,016 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 6 proven. 12 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2024-09-20 18:41:34,017 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:34,682 INFO L349 Elim1Store]: treesize reduction 58, result has 1.7 percent of original size [2024-09-20 18:41:34,682 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 147 treesize of output 1 [2024-09-20 18:41:34,685 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 11 proven. 2 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-09-20 18:41:34,685 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2054076240] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:34,685 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:34,685 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 15, 12] total 29 [2024-09-20 18:41:34,685 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1074456599] [2024-09-20 18:41:34,685 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:34,685 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2024-09-20 18:41:34,685 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:34,686 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2024-09-20 18:41:34,686 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=177, Invalid=635, Unknown=0, NotChecked=0, Total=812 [2024-09-20 18:41:34,686 INFO L87 Difference]: Start difference. First operand 897 states and 1206 transitions. Second operand has 29 states, 29 states have (on average 3.0) internal successors, (87), 29 states have internal predecessors, (87), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:38,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:38,135 INFO L93 Difference]: Finished difference Result 2244 states and 3053 transitions. [2024-09-20 18:41:38,135 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 60 states. [2024-09-20 18:41:38,135 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 3.0) internal successors, (87), 29 states have internal predecessors, (87), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-20 18:41:38,135 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:38,141 INFO L225 Difference]: With dead ends: 2244 [2024-09-20 18:41:38,141 INFO L226 Difference]: Without dead ends: 1805 [2024-09-20 18:41:38,142 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 153 GetRequests, 75 SyntacticMatches, 0 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1743 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=1242, Invalid=5078, Unknown=0, NotChecked=0, Total=6320 [2024-09-20 18:41:38,143 INFO L434 NwaCegarLoop]: 33 mSDtfsCounter, 285 mSDsluCounter, 280 mSDsCounter, 0 mSdLazyCounter, 736 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 285 SdHoareTripleChecker+Valid, 313 SdHoareTripleChecker+Invalid, 785 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 736 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:38,143 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [285 Valid, 313 Invalid, 785 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 736 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-20 18:41:38,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1805 states. [2024-09-20 18:41:38,683 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1805 to 950. [2024-09-20 18:41:38,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 950 states, 945 states have (on average 1.3227513227513228) internal successors, (1250), 945 states have internal predecessors, (1250), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:38,685 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 950 states to 950 states and 1254 transitions. [2024-09-20 18:41:38,687 INFO L78 Accepts]: Start accepts. Automaton has 950 states and 1254 transitions. Word has length 45 [2024-09-20 18:41:38,688 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:38,688 INFO L474 AbstractCegarLoop]: Abstraction has 950 states and 1254 transitions. [2024-09-20 18:41:38,688 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 3.0) internal successors, (87), 29 states have internal predecessors, (87), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:38,688 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:38,688 INFO L276 IsEmpty]: Start isEmpty. Operand 950 states and 1254 transitions. [2024-09-20 18:41:38,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2024-09-20 18:41:38,689 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:38,689 INFO L216 NwaCegarLoop]: trace histogram [5, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:38,701 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (14)] Ended with exit code 0 [2024-09-20 18:41:38,892 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2024-09-20 18:41:38,892 INFO L399 AbstractCegarLoop]: === Iteration 16 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:38,892 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:38,892 INFO L85 PathProgramCache]: Analyzing trace with hash 941187050, now seen corresponding path program 1 times [2024-09-20 18:41:38,893 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:38,893 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [781383305] [2024-09-20 18:41:38,893 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:38,893 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:38,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:39,402 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:39,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:39,404 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 5 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2024-09-20 18:41:39,405 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:39,405 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [781383305] [2024-09-20 18:41:39,405 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [781383305] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:39,405 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [734110974] [2024-09-20 18:41:39,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:39,405 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:39,405 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:39,407 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:39,408 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Waiting until timeout for monitored process [2024-09-20 18:41:39,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:39,471 INFO L262 TraceCheckSpWp]: Trace formula consists of 212 conjuncts, 37 conjuncts are in the unsatisfiable core [2024-09-20 18:41:39,472 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:39,640 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 12 [2024-09-20 18:41:39,642 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-20 18:41:39,650 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 5 proven. 9 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-09-20 18:41:39,650 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:39,835 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:39,836 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 24 treesize of output 22 [2024-09-20 18:41:39,843 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:39,843 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 53 treesize of output 42 [2024-09-20 18:41:39,907 INFO L134 CoverageAnalysis]: Checked inductivity of 30 backedges. 8 proven. 3 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2024-09-20 18:41:39,907 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [734110974] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:39,907 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:39,907 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 12, 13] total 27 [2024-09-20 18:41:39,907 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [891831810] [2024-09-20 18:41:39,907 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:39,909 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 27 states [2024-09-20 18:41:39,909 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:39,909 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 27 interpolants. [2024-09-20 18:41:39,910 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=150, Invalid=552, Unknown=0, NotChecked=0, Total=702 [2024-09-20 18:41:39,910 INFO L87 Difference]: Start difference. First operand 950 states and 1254 transitions. Second operand has 27 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 27 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:41,159 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:41,159 INFO L93 Difference]: Finished difference Result 1709 states and 2245 transitions. [2024-09-20 18:41:41,159 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-20 18:41:41,160 INFO L78 Accepts]: Start accepts. Automaton has has 27 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 27 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 45 [2024-09-20 18:41:41,160 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:41,164 INFO L225 Difference]: With dead ends: 1709 [2024-09-20 18:41:41,164 INFO L226 Difference]: Without dead ends: 1240 [2024-09-20 18:41:41,165 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 119 GetRequests, 83 SyntacticMatches, 0 SemanticMatches, 36 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 381 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=330, Invalid=1076, Unknown=0, NotChecked=0, Total=1406 [2024-09-20 18:41:41,165 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 164 mSDsluCounter, 176 mSDsCounter, 0 mSdLazyCounter, 362 mSolverCounterSat, 17 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 164 SdHoareTripleChecker+Valid, 208 SdHoareTripleChecker+Invalid, 379 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 17 IncrementalHoareTripleChecker+Valid, 362 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:41,165 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [164 Valid, 208 Invalid, 379 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [17 Valid, 362 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2024-09-20 18:41:41,166 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1240 states. [2024-09-20 18:41:41,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1240 to 895. [2024-09-20 18:41:41,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 895 states, 890 states have (on average 1.3022471910112359) internal successors, (1159), 890 states have internal predecessors, (1159), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:41,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 895 states to 895 states and 1163 transitions. [2024-09-20 18:41:41,694 INFO L78 Accepts]: Start accepts. Automaton has 895 states and 1163 transitions. Word has length 45 [2024-09-20 18:41:41,695 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:41,695 INFO L474 AbstractCegarLoop]: Abstraction has 895 states and 1163 transitions. [2024-09-20 18:41:41,695 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 27 states, 27 states have (on average 2.7037037037037037) internal successors, (73), 27 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:41,695 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:41,695 INFO L276 IsEmpty]: Start isEmpty. Operand 895 states and 1163 transitions. [2024-09-20 18:41:41,696 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2024-09-20 18:41:41,696 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:41,697 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:41,708 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (15)] Ended with exit code 0 [2024-09-20 18:41:41,900 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2024-09-20 18:41:41,901 INFO L399 AbstractCegarLoop]: === Iteration 17 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:41,901 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:41,901 INFO L85 PathProgramCache]: Analyzing trace with hash -128402447, now seen corresponding path program 1 times [2024-09-20 18:41:41,901 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:41,901 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [338615826] [2024-09-20 18:41:41,901 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:41,901 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:41,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:42,033 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:42,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:42,035 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 20 proven. 3 refuted. 0 times theorem prover too weak. 32 trivial. 0 not checked. [2024-09-20 18:41:42,035 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:42,035 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [338615826] [2024-09-20 18:41:42,035 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [338615826] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:42,035 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1132128197] [2024-09-20 18:41:42,035 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:42,036 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:42,036 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:42,037 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:42,038 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Waiting until timeout for monitored process [2024-09-20 18:41:42,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:42,118 INFO L262 TraceCheckSpWp]: Trace formula consists of 244 conjuncts, 51 conjuncts are in the unsatisfiable core [2024-09-20 18:41:42,119 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:42,426 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-20 18:41:42,509 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:42,509 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 27 treesize of output 11 [2024-09-20 18:41:42,520 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 0 proven. 45 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2024-09-20 18:41:42,520 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:42,852 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:42,853 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 67 treesize of output 57 [2024-09-20 18:41:43,116 INFO L349 Elim1Store]: treesize reduction 10, result has 52.4 percent of original size [2024-09-20 18:41:43,116 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 57 treesize of output 40 [2024-09-20 18:41:43,151 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 5 proven. 26 refuted. 0 times theorem prover too weak. 24 trivial. 0 not checked. [2024-09-20 18:41:43,151 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1132128197] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:43,151 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:43,152 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 21, 16] total 38 [2024-09-20 18:41:43,152 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1200722322] [2024-09-20 18:41:43,152 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:43,152 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-20 18:41:43,152 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:43,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-20 18:41:43,153 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=194, Invalid=1212, Unknown=0, NotChecked=0, Total=1406 [2024-09-20 18:41:43,153 INFO L87 Difference]: Start difference. First operand 895 states and 1163 transitions. Second operand has 38 states, 38 states have (on average 3.026315789473684) internal successors, (115), 38 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:45,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:45,576 INFO L93 Difference]: Finished difference Result 2463 states and 3266 transitions. [2024-09-20 18:41:45,576 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2024-09-20 18:41:45,576 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 3.026315789473684) internal successors, (115), 38 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 54 [2024-09-20 18:41:45,576 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:45,583 INFO L225 Difference]: With dead ends: 2463 [2024-09-20 18:41:45,583 INFO L226 Difference]: Without dead ends: 2181 [2024-09-20 18:41:45,584 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 141 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 59 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 831 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=559, Invalid=3101, Unknown=0, NotChecked=0, Total=3660 [2024-09-20 18:41:45,584 INFO L434 NwaCegarLoop]: 46 mSDtfsCounter, 312 mSDsluCounter, 622 mSDsCounter, 0 mSdLazyCounter, 1046 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 312 SdHoareTripleChecker+Valid, 668 SdHoareTripleChecker+Invalid, 1065 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 1046 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:45,584 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [312 Valid, 668 Invalid, 1065 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 1046 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-20 18:41:45,589 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2181 states. [2024-09-20 18:41:46,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2181 to 934. [2024-09-20 18:41:46,201 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 934 states, 929 states have (on average 1.3110871905274488) internal successors, (1218), 929 states have internal predecessors, (1218), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:46,203 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 934 states to 934 states and 1222 transitions. [2024-09-20 18:41:46,205 INFO L78 Accepts]: Start accepts. Automaton has 934 states and 1222 transitions. Word has length 54 [2024-09-20 18:41:46,205 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:46,205 INFO L474 AbstractCegarLoop]: Abstraction has 934 states and 1222 transitions. [2024-09-20 18:41:46,205 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 3.026315789473684) internal successors, (115), 38 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:46,205 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:46,206 INFO L276 IsEmpty]: Start isEmpty. Operand 934 states and 1222 transitions. [2024-09-20 18:41:46,207 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2024-09-20 18:41:46,207 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:46,207 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:46,218 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (16)] Forceful destruction successful, exit code 0 [2024-09-20 18:41:46,407 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2024-09-20 18:41:46,407 INFO L399 AbstractCegarLoop]: === Iteration 18 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:46,408 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:46,408 INFO L85 PathProgramCache]: Analyzing trace with hash -1628474760, now seen corresponding path program 2 times [2024-09-20 18:41:46,408 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:46,408 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1441883806] [2024-09-20 18:41:46,408 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:46,408 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:46,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:46,832 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:46,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:46,834 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 23 proven. 4 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-20 18:41:46,835 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:46,835 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1441883806] [2024-09-20 18:41:46,835 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1441883806] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:46,835 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [166279174] [2024-09-20 18:41:46,835 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-20 18:41:46,835 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:46,835 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:46,837 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:46,837 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Waiting until timeout for monitored process [2024-09-20 18:41:46,910 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-20 18:41:46,910 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:41:46,912 INFO L262 TraceCheckSpWp]: Trace formula consists of 246 conjuncts, 72 conjuncts are in the unsatisfiable core [2024-09-20 18:41:46,913 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:47,842 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-20 18:41:47,886 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 20 proven. 29 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2024-09-20 18:41:47,886 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:48,579 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:48,579 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 65 treesize of output 50 [2024-09-20 18:41:48,827 INFO L349 Elim1Store]: treesize reduction 10, result has 52.4 percent of original size [2024-09-20 18:41:48,827 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 57 treesize of output 40 [2024-09-20 18:41:48,861 INFO L134 CoverageAnalysis]: Checked inductivity of 57 backedges. 32 proven. 10 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-09-20 18:41:48,861 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [166279174] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:48,862 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:48,862 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 25, 26] total 59 [2024-09-20 18:41:48,862 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [201137762] [2024-09-20 18:41:48,862 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:48,862 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 59 states [2024-09-20 18:41:48,862 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:48,863 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 59 interpolants. [2024-09-20 18:41:48,863 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=519, Invalid=2903, Unknown=0, NotChecked=0, Total=3422 [2024-09-20 18:41:48,863 INFO L87 Difference]: Start difference. First operand 934 states and 1222 transitions. Second operand has 59 states, 59 states have (on average 1.9491525423728813) internal successors, (115), 59 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:52,154 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:52,155 INFO L93 Difference]: Finished difference Result 1706 states and 2261 transitions. [2024-09-20 18:41:52,155 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 64 states. [2024-09-20 18:41:52,155 INFO L78 Accepts]: Start accepts. Automaton has has 59 states, 59 states have (on average 1.9491525423728813) internal successors, (115), 59 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 55 [2024-09-20 18:41:52,155 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:52,160 INFO L225 Difference]: With dead ends: 1706 [2024-09-20 18:41:52,160 INFO L226 Difference]: Without dead ends: 1569 [2024-09-20 18:41:52,161 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 167 GetRequests, 68 SyntacticMatches, 0 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3225 ImplicationChecksByTransitivity, 2.6s TimeCoverageRelationStatistics Valid=1851, Invalid=8249, Unknown=0, NotChecked=0, Total=10100 [2024-09-20 18:41:52,162 INFO L434 NwaCegarLoop]: 38 mSDtfsCounter, 845 mSDsluCounter, 607 mSDsCounter, 0 mSdLazyCounter, 1366 mSolverCounterSat, 103 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 845 SdHoareTripleChecker+Valid, 645 SdHoareTripleChecker+Invalid, 1469 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 103 IncrementalHoareTripleChecker+Valid, 1366 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:52,162 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [845 Valid, 645 Invalid, 1469 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [103 Valid, 1366 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2024-09-20 18:41:52,162 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1569 states. [2024-09-20 18:41:52,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1569 to 906. [2024-09-20 18:41:52,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 906 states, 901 states have (on average 1.3152053274139845) internal successors, (1185), 901 states have internal predecessors, (1185), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:52,784 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 906 states to 906 states and 1189 transitions. [2024-09-20 18:41:52,786 INFO L78 Accepts]: Start accepts. Automaton has 906 states and 1189 transitions. Word has length 55 [2024-09-20 18:41:52,786 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:52,786 INFO L474 AbstractCegarLoop]: Abstraction has 906 states and 1189 transitions. [2024-09-20 18:41:52,787 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 59 states, 59 states have (on average 1.9491525423728813) internal successors, (115), 59 states have internal predecessors, (115), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:52,787 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:52,787 INFO L276 IsEmpty]: Start isEmpty. Operand 906 states and 1189 transitions. [2024-09-20 18:41:52,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2024-09-20 18:41:52,788 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:52,788 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:52,801 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (17)] Ended with exit code 0 [2024-09-20 18:41:52,989 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17,17 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:52,989 INFO L399 AbstractCegarLoop]: === Iteration 19 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:52,989 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:52,989 INFO L85 PathProgramCache]: Analyzing trace with hash -885254672, now seen corresponding path program 3 times [2024-09-20 18:41:52,989 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:52,989 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1019766788] [2024-09-20 18:41:52,989 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:52,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:53,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:53,367 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:53,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:53,369 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 0 proven. 8 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-20 18:41:53,369 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:53,369 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1019766788] [2024-09-20 18:41:53,369 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1019766788] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:53,369 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1677615429] [2024-09-20 18:41:53,369 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-20 18:41:53,369 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:53,369 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:53,370 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:53,371 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Waiting until timeout for monitored process [2024-09-20 18:41:53,437 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 3 check-sat command(s) [2024-09-20 18:41:53,437 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:41:53,438 INFO L262 TraceCheckSpWp]: Trace formula consists of 194 conjuncts, 24 conjuncts are in the unsatisfiable core [2024-09-20 18:41:53,439 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:53,562 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-20 18:41:53,564 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 0 proven. 17 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2024-09-20 18:41:53,564 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:53,704 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-20 18:41:53,705 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 49 treesize of output 31 [2024-09-20 18:41:53,728 INFO L134 CoverageAnalysis]: Checked inductivity of 59 backedges. 1 proven. 7 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-20 18:41:53,728 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1677615429] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:53,728 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:53,728 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [10, 12, 9] total 21 [2024-09-20 18:41:53,728 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [44327849] [2024-09-20 18:41:53,729 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:53,729 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 21 states [2024-09-20 18:41:53,729 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:53,729 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 21 interpolants. [2024-09-20 18:41:53,729 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=343, Unknown=0, NotChecked=0, Total=420 [2024-09-20 18:41:53,730 INFO L87 Difference]: Start difference. First operand 906 states and 1189 transitions. Second operand has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:54,820 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:41:54,820 INFO L93 Difference]: Finished difference Result 1290 states and 1726 transitions. [2024-09-20 18:41:54,821 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2024-09-20 18:41:54,821 INFO L78 Accepts]: Start accepts. Automaton has has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 56 [2024-09-20 18:41:54,821 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:41:54,825 INFO L225 Difference]: With dead ends: 1290 [2024-09-20 18:41:54,825 INFO L226 Difference]: Without dead ends: 1285 [2024-09-20 18:41:54,826 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 125 GetRequests, 104 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 126 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=97, Invalid=409, Unknown=0, NotChecked=0, Total=506 [2024-09-20 18:41:54,826 INFO L434 NwaCegarLoop]: 33 mSDtfsCounter, 84 mSDsluCounter, 304 mSDsCounter, 0 mSdLazyCounter, 290 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 84 SdHoareTripleChecker+Valid, 337 SdHoareTripleChecker+Invalid, 295 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 290 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-20 18:41:54,826 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [84 Valid, 337 Invalid, 295 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 290 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-20 18:41:54,827 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1285 states. [2024-09-20 18:41:55,394 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1285 to 798. [2024-09-20 18:41:55,396 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 798 states, 793 states have (on average 1.305170239596469) internal successors, (1035), 793 states have internal predecessors, (1035), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:55,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 798 states to 798 states and 1039 transitions. [2024-09-20 18:41:55,398 INFO L78 Accepts]: Start accepts. Automaton has 798 states and 1039 transitions. Word has length 56 [2024-09-20 18:41:55,399 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:41:55,399 INFO L474 AbstractCegarLoop]: Abstraction has 798 states and 1039 transitions. [2024-09-20 18:41:55,399 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 21 states, 21 states have (on average 3.4761904761904763) internal successors, (73), 21 states have internal predecessors, (73), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:41:55,399 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:55,399 INFO L276 IsEmpty]: Start isEmpty. Operand 798 states and 1039 transitions. [2024-09-20 18:41:55,400 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-20 18:41:55,400 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:41:55,401 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:41:55,413 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (18)] Forceful destruction successful, exit code 0 [2024-09-20 18:41:55,601 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,18 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:55,601 INFO L399 AbstractCegarLoop]: === Iteration 20 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:41:55,602 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:41:55,602 INFO L85 PathProgramCache]: Analyzing trace with hash 1141037310, now seen corresponding path program 4 times [2024-09-20 18:41:55,602 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:41:55,602 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1105013611] [2024-09-20 18:41:55,602 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:41:55,602 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:41:55,653 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:56,066 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:41:56,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:41:56,068 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 14 proven. 11 refuted. 0 times theorem prover too weak. 61 trivial. 0 not checked. [2024-09-20 18:41:56,068 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:41:56,068 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1105013611] [2024-09-20 18:41:56,068 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1105013611] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:41:56,068 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1080711115] [2024-09-20 18:41:56,068 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-20 18:41:56,068 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:41:56,068 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:41:56,069 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:41:56,070 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Waiting until timeout for monitored process [2024-09-20 18:41:56,144 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-20 18:41:56,144 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:41:56,146 INFO L262 TraceCheckSpWp]: Trace formula consists of 285 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-20 18:41:56,147 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:41:56,687 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:56,687 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 152 treesize of output 146 [2024-09-20 18:41:56,695 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:41:56,695 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 80 treesize of output 52 [2024-09-20 18:41:56,991 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 19 proven. 17 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2024-09-20 18:41:56,991 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:41:57,598 INFO L349 Elim1Store]: treesize reduction 58, result has 1.7 percent of original size [2024-09-20 18:41:57,598 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 4 select indices, 4 select index equivalence classes, 0 disjoint index pairs (out of 6 index pairs), introduced 4 new quantified variables, introduced 6 case distinctions, treesize of input 188 treesize of output 1 [2024-09-20 18:41:57,601 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 22 proven. 14 refuted. 0 times theorem prover too weak. 50 trivial. 0 not checked. [2024-09-20 18:41:57,601 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1080711115] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:41:57,601 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:41:57,601 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 15, 13] total 31 [2024-09-20 18:41:57,601 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1865627502] [2024-09-20 18:41:57,601 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:41:57,602 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 31 states [2024-09-20 18:41:57,602 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:41:57,602 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 31 interpolants. [2024-09-20 18:41:57,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=187, Invalid=743, Unknown=0, NotChecked=0, Total=930 [2024-09-20 18:41:57,602 INFO L87 Difference]: Start difference. First operand 798 states and 1039 transitions. Second operand has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:02,021 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 4.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [0] [2024-09-20 18:42:03,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:42:03,472 INFO L93 Difference]: Finished difference Result 1627 states and 2117 transitions. [2024-09-20 18:42:03,473 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2024-09-20 18:42:03,473 INFO L78 Accepts]: Start accepts. Automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-20 18:42:03,473 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:42:03,476 INFO L225 Difference]: With dead ends: 1627 [2024-09-20 18:42:03,476 INFO L226 Difference]: Without dead ends: 1001 [2024-09-20 18:42:03,477 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 172 GetRequests, 116 SyntacticMatches, 0 SemanticMatches, 56 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 761 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=700, Invalid=2606, Unknown=0, NotChecked=0, Total=3306 [2024-09-20 18:42:03,478 INFO L434 NwaCegarLoop]: 27 mSDtfsCounter, 350 mSDsluCounter, 204 mSDsCounter, 0 mSdLazyCounter, 349 mSolverCounterSat, 77 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 350 SdHoareTripleChecker+Valid, 231 SdHoareTripleChecker+Invalid, 427 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 77 IncrementalHoareTripleChecker+Valid, 349 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.3s IncrementalHoareTripleChecker+Time [2024-09-20 18:42:03,478 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [350 Valid, 231 Invalid, 427 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [77 Valid, 349 Invalid, 1 Unknown, 0 Unchecked, 4.3s Time] [2024-09-20 18:42:03,478 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1001 states. [2024-09-20 18:42:03,927 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1001 to 597. [2024-09-20 18:42:03,928 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 597 states, 592 states have (on average 1.2635135135135136) internal successors, (748), 592 states have internal predecessors, (748), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:03,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 597 states to 597 states and 752 transitions. [2024-09-20 18:42:03,930 INFO L78 Accepts]: Start accepts. Automaton has 597 states and 752 transitions. Word has length 66 [2024-09-20 18:42:03,930 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:42:03,930 INFO L474 AbstractCegarLoop]: Abstraction has 597 states and 752 transitions. [2024-09-20 18:42:03,930 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 31 states, 31 states have (on average 2.903225806451613) internal successors, (90), 31 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:03,931 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:42:03,931 INFO L276 IsEmpty]: Start isEmpty. Operand 597 states and 752 transitions. [2024-09-20 18:42:03,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-20 18:42:03,932 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:42:03,932 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:42:03,944 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (19)] Forceful destruction successful, exit code 0 [2024-09-20 18:42:04,132 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19,19 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:42:04,132 INFO L399 AbstractCegarLoop]: === Iteration 21 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:42:04,133 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:42:04,133 INFO L85 PathProgramCache]: Analyzing trace with hash 828990910, now seen corresponding path program 5 times [2024-09-20 18:42:04,133 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:42:04,133 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [620704491] [2024-09-20 18:42:04,133 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:42:04,133 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:42:04,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:42:05,164 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:42:05,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:42:05,166 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 38 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2024-09-20 18:42:05,166 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:42:05,166 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [620704491] [2024-09-20 18:42:05,166 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [620704491] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:42:05,166 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1682412307] [2024-09-20 18:42:05,166 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-20 18:42:05,166 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:42:05,166 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:42:05,167 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:42:05,168 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Waiting until timeout for monitored process [2024-09-20 18:42:05,485 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 6 check-sat command(s) [2024-09-20 18:42:05,485 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:42:05,487 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 68 conjuncts are in the unsatisfiable core [2024-09-20 18:42:05,489 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:42:05,530 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 48 treesize of output 35 [2024-09-20 18:42:05,534 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 1 [2024-09-20 18:42:05,996 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:42:05,996 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 1 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 30 treesize of output 18 [2024-09-20 18:42:05,997 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-20 18:42:06,009 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 52 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2024-09-20 18:42:06,009 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:42:06,708 INFO L349 Elim1Store]: treesize reduction 6, result has 40.0 percent of original size [2024-09-20 18:42:06,708 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 134 treesize of output 106 [2024-09-20 18:42:06,852 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 42 proven. 17 refuted. 0 times theorem prover too weak. 27 trivial. 0 not checked. [2024-09-20 18:42:06,852 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1682412307] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:42:06,852 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:42:06,852 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 21, 19] total 51 [2024-09-20 18:42:06,852 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1645361894] [2024-09-20 18:42:06,852 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:42:06,852 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 51 states [2024-09-20 18:42:06,853 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:42:06,853 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 51 interpolants. [2024-09-20 18:42:06,853 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=438, Invalid=2112, Unknown=0, NotChecked=0, Total=2550 [2024-09-20 18:42:06,853 INFO L87 Difference]: Start difference. First operand 597 states and 752 transitions. Second operand has 51 states, 51 states have (on average 2.607843137254902) internal successors, (133), 51 states have internal predecessors, (133), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:15,404 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:42:15,404 INFO L93 Difference]: Finished difference Result 3262 states and 4292 transitions. [2024-09-20 18:42:15,405 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 129 states. [2024-09-20 18:42:15,405 INFO L78 Accepts]: Start accepts. Automaton has has 51 states, 51 states have (on average 2.607843137254902) internal successors, (133), 51 states have internal predecessors, (133), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-20 18:42:15,405 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:42:15,413 INFO L225 Difference]: With dead ends: 3262 [2024-09-20 18:42:15,413 INFO L226 Difference]: Without dead ends: 2834 [2024-09-20 18:42:15,415 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 263 GetRequests, 108 SyntacticMatches, 0 SemanticMatches, 155 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 9362 ImplicationChecksByTransitivity, 6.1s TimeCoverageRelationStatistics Valid=4057, Invalid=20435, Unknown=0, NotChecked=0, Total=24492 [2024-09-20 18:42:15,415 INFO L434 NwaCegarLoop]: 43 mSDtfsCounter, 620 mSDsluCounter, 795 mSDsCounter, 0 mSdLazyCounter, 1615 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 620 SdHoareTripleChecker+Valid, 838 SdHoareTripleChecker+Invalid, 1680 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 1615 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-09-20 18:42:15,415 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [620 Valid, 838 Invalid, 1680 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 1615 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-09-20 18:42:15,416 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2834 states. [2024-09-20 18:42:16,647 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2834 to 1400. [2024-09-20 18:42:16,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1400 states, 1395 states have (on average 1.2967741935483872) internal successors, (1809), 1395 states have internal predecessors, (1809), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:16,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1400 states to 1400 states and 1813 transitions. [2024-09-20 18:42:16,652 INFO L78 Accepts]: Start accepts. Automaton has 1400 states and 1813 transitions. Word has length 66 [2024-09-20 18:42:16,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:42:16,652 INFO L474 AbstractCegarLoop]: Abstraction has 1400 states and 1813 transitions. [2024-09-20 18:42:16,652 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 51 states, 51 states have (on average 2.607843137254902) internal successors, (133), 51 states have internal predecessors, (133), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:16,652 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:42:16,653 INFO L276 IsEmpty]: Start isEmpty. Operand 1400 states and 1813 transitions. [2024-09-20 18:42:16,654 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-20 18:42:16,654 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:42:16,655 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:42:16,668 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (20)] Ended with exit code 0 [2024-09-20 18:42:16,856 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable20 [2024-09-20 18:42:16,856 INFO L399 AbstractCegarLoop]: === Iteration 22 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:42:16,856 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:42:16,856 INFO L85 PathProgramCache]: Analyzing trace with hash -289774206, now seen corresponding path program 6 times [2024-09-20 18:42:16,856 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:42:16,856 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [336173521] [2024-09-20 18:42:16,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:42:16,856 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:42:16,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:42:18,047 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:42:18,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:42:18,050 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 48 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2024-09-20 18:42:18,050 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:42:18,050 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [336173521] [2024-09-20 18:42:18,050 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [336173521] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:42:18,050 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2119738182] [2024-09-20 18:42:18,050 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-09-20 18:42:18,050 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:42:18,050 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:42:18,051 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:42:18,052 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Waiting until timeout for monitored process [2024-09-20 18:42:18,216 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 6 check-sat command(s) [2024-09-20 18:42:18,216 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:42:18,217 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-20 18:42:18,219 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:42:18,696 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 52 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-20 18:42:18,696 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:42:18,992 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:42:18,993 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 70 treesize of output 57 [2024-09-20 18:42:19,169 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 17 proven. 43 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-20 18:42:19,170 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2119738182] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:42:19,170 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:42:19,170 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [21, 16, 15] total 48 [2024-09-20 18:42:19,170 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1376610978] [2024-09-20 18:42:19,170 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:42:19,170 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 48 states [2024-09-20 18:42:19,170 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:42:19,171 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 48 interpolants. [2024-09-20 18:42:19,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=293, Invalid=1963, Unknown=0, NotChecked=0, Total=2256 [2024-09-20 18:42:19,172 INFO L87 Difference]: Start difference. First operand 1400 states and 1813 transitions. Second operand has 48 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 48 states have internal predecessors, (143), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:22,665 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:42:22,665 INFO L93 Difference]: Finished difference Result 3221 states and 4159 transitions. [2024-09-20 18:42:22,666 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2024-09-20 18:42:22,666 INFO L78 Accepts]: Start accepts. Automaton has has 48 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 48 states have internal predecessors, (143), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-20 18:42:22,666 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:42:22,672 INFO L225 Difference]: With dead ends: 3221 [2024-09-20 18:42:22,673 INFO L226 Difference]: Without dead ends: 1979 [2024-09-20 18:42:22,674 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 196 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 82 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1981 ImplicationChecksByTransitivity, 1.7s TimeCoverageRelationStatistics Valid=935, Invalid=6037, Unknown=0, NotChecked=0, Total=6972 [2024-09-20 18:42:22,675 INFO L434 NwaCegarLoop]: 41 mSDtfsCounter, 226 mSDsluCounter, 741 mSDsCounter, 0 mSdLazyCounter, 1615 mSolverCounterSat, 65 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 226 SdHoareTripleChecker+Valid, 782 SdHoareTripleChecker+Invalid, 1680 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 65 IncrementalHoareTripleChecker+Valid, 1615 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2024-09-20 18:42:22,675 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [226 Valid, 782 Invalid, 1680 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [65 Valid, 1615 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2024-09-20 18:42:22,676 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1979 states. [2024-09-20 18:42:23,995 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1979 to 1482. [2024-09-20 18:42:23,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1482 states, 1477 states have (on average 1.2538930264048747) internal successors, (1852), 1477 states have internal predecessors, (1852), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:23,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1482 states to 1482 states and 1856 transitions. [2024-09-20 18:42:24,000 INFO L78 Accepts]: Start accepts. Automaton has 1482 states and 1856 transitions. Word has length 66 [2024-09-20 18:42:24,000 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:42:24,000 INFO L474 AbstractCegarLoop]: Abstraction has 1482 states and 1856 transitions. [2024-09-20 18:42:24,001 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 48 states, 48 states have (on average 2.9791666666666665) internal successors, (143), 48 states have internal predecessors, (143), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:24,001 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:42:24,001 INFO L276 IsEmpty]: Start isEmpty. Operand 1482 states and 1856 transitions. [2024-09-20 18:42:24,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-20 18:42:24,003 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:42:24,003 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:42:24,020 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (21)] Ended with exit code 0 [2024-09-20 18:42:24,203 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable21 [2024-09-20 18:42:24,204 INFO L399 AbstractCegarLoop]: === Iteration 23 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:42:24,204 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:42:24,204 INFO L85 PathProgramCache]: Analyzing trace with hash 571791422, now seen corresponding path program 7 times [2024-09-20 18:42:24,204 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:42:24,204 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [502453090] [2024-09-20 18:42:24,205 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:42:24,205 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:42:24,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:42:25,213 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:42:25,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:42:25,215 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 38 refuted. 0 times theorem prover too weak. 28 trivial. 0 not checked. [2024-09-20 18:42:25,215 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:42:25,215 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [502453090] [2024-09-20 18:42:25,216 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [502453090] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:42:25,216 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2008375473] [2024-09-20 18:42:25,216 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-09-20 18:42:25,216 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:42:25,216 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:42:25,217 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:42:25,218 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Waiting until timeout for monitored process [2024-09-20 18:42:25,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:42:25,310 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 46 conjuncts are in the unsatisfiable core [2024-09-20 18:42:25,311 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:42:25,543 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 12 [2024-09-20 18:42:25,545 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-20 18:42:25,552 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 20 proven. 45 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-20 18:42:25,552 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:42:25,804 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:42:25,804 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 26 treesize of output 24 [2024-09-20 18:42:25,814 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:42:25,814 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 55 treesize of output 42 [2024-09-20 18:42:25,950 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 26 proven. 30 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-20 18:42:25,950 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2008375473] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:42:25,950 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:42:25,950 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 15, 14] total 38 [2024-09-20 18:42:25,950 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2068113823] [2024-09-20 18:42:25,950 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:42:25,951 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 38 states [2024-09-20 18:42:25,951 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:42:25,951 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 38 interpolants. [2024-09-20 18:42:25,951 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=208, Invalid=1198, Unknown=0, NotChecked=0, Total=1406 [2024-09-20 18:42:25,952 INFO L87 Difference]: Start difference. First operand 1482 states and 1856 transitions. Second operand has 38 states, 38 states have (on average 3.210526315789474) internal successors, (122), 38 states have internal predecessors, (122), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:28,799 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:42:28,800 INFO L93 Difference]: Finished difference Result 3078 states and 3847 transitions. [2024-09-20 18:42:28,800 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2024-09-20 18:42:28,800 INFO L78 Accepts]: Start accepts. Automaton has has 38 states, 38 states have (on average 3.210526315789474) internal successors, (122), 38 states have internal predecessors, (122), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-20 18:42:28,800 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:42:28,806 INFO L225 Difference]: With dead ends: 3078 [2024-09-20 18:42:28,806 INFO L226 Difference]: Without dead ends: 1806 [2024-09-20 18:42:28,808 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 191 GetRequests, 121 SyntacticMatches, 0 SemanticMatches, 70 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1436 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=728, Invalid=4384, Unknown=0, NotChecked=0, Total=5112 [2024-09-20 18:42:28,808 INFO L434 NwaCegarLoop]: 38 mSDtfsCounter, 220 mSDsluCounter, 547 mSDsCounter, 0 mSdLazyCounter, 1179 mSolverCounterSat, 39 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 220 SdHoareTripleChecker+Valid, 585 SdHoareTripleChecker+Invalid, 1218 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 39 IncrementalHoareTripleChecker+Valid, 1179 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-20 18:42:28,809 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [220 Valid, 585 Invalid, 1218 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [39 Valid, 1179 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-20 18:42:28,809 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1806 states. [2024-09-20 18:42:30,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1806 to 1573. [2024-09-20 18:42:30,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1573 states, 1568 states have (on average 1.219387755102041) internal successors, (1912), 1568 states have internal predecessors, (1912), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:30,213 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1573 states to 1573 states and 1916 transitions. [2024-09-20 18:42:30,215 INFO L78 Accepts]: Start accepts. Automaton has 1573 states and 1916 transitions. Word has length 66 [2024-09-20 18:42:30,216 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:42:30,216 INFO L474 AbstractCegarLoop]: Abstraction has 1573 states and 1916 transitions. [2024-09-20 18:42:30,216 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 38 states, 38 states have (on average 3.210526315789474) internal successors, (122), 38 states have internal predecessors, (122), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:30,216 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:42:30,216 INFO L276 IsEmpty]: Start isEmpty. Operand 1573 states and 1916 transitions. [2024-09-20 18:42:30,218 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-20 18:42:30,218 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:42:30,218 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:42:30,230 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (22)] Ended with exit code 0 [2024-09-20 18:42:30,418 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22,22 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:42:30,418 INFO L399 AbstractCegarLoop]: === Iteration 24 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:42:30,419 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:42:30,419 INFO L85 PathProgramCache]: Analyzing trace with hash 378012418, now seen corresponding path program 8 times [2024-09-20 18:42:30,419 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:42:30,419 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1098596291] [2024-09-20 18:42:30,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:42:30,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:42:30,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:42:31,509 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:42:31,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:42:31,511 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 48 refuted. 0 times theorem prover too weak. 25 trivial. 0 not checked. [2024-09-20 18:42:31,511 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:42:31,511 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1098596291] [2024-09-20 18:42:31,511 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1098596291] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:42:31,511 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [473558605] [2024-09-20 18:42:31,511 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-20 18:42:31,511 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:42:31,511 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:42:31,512 INFO L229 MonitoredProcess]: Starting monitored process 23 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:42:31,513 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Waiting until timeout for monitored process [2024-09-20 18:42:31,589 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-20 18:42:31,589 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:42:31,591 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 61 conjuncts are in the unsatisfiable core [2024-09-20 18:42:31,592 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:42:31,980 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 12 [2024-09-20 18:42:31,982 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-20 18:42:31,999 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 13 proven. 62 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2024-09-20 18:42:32,000 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:42:32,344 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:42:32,344 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 28 treesize of output 24 [2024-09-20 18:42:32,651 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 21 proven. 44 refuted. 0 times theorem prover too weak. 21 trivial. 0 not checked. [2024-09-20 18:42:32,652 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [473558605] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:42:32,652 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:42:32,652 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [20, 20, 17] total 47 [2024-09-20 18:42:32,652 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [247657055] [2024-09-20 18:42:32,652 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:42:32,652 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 47 states [2024-09-20 18:42:32,652 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:42:32,653 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 47 interpolants. [2024-09-20 18:42:32,653 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=289, Invalid=1873, Unknown=0, NotChecked=0, Total=2162 [2024-09-20 18:42:32,653 INFO L87 Difference]: Start difference. First operand 1573 states and 1916 transitions. Second operand has 47 states, 47 states have (on average 2.9361702127659575) internal successors, (138), 47 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:35,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:42:35,906 INFO L93 Difference]: Finished difference Result 1935 states and 2345 transitions. [2024-09-20 18:42:35,906 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 50 states. [2024-09-20 18:42:35,906 INFO L78 Accepts]: Start accepts. Automaton has has 47 states, 47 states have (on average 2.9361702127659575) internal successors, (138), 47 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-20 18:42:35,906 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:42:35,921 INFO L225 Difference]: With dead ends: 1935 [2024-09-20 18:42:35,922 INFO L226 Difference]: Without dead ends: 1664 [2024-09-20 18:42:35,922 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 189 GetRequests, 114 SyntacticMatches, 0 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1711 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=817, Invalid=5035, Unknown=0, NotChecked=0, Total=5852 [2024-09-20 18:42:35,923 INFO L434 NwaCegarLoop]: 32 mSDtfsCounter, 293 mSDsluCounter, 568 mSDsCounter, 0 mSdLazyCounter, 1144 mSolverCounterSat, 108 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 293 SdHoareTripleChecker+Valid, 600 SdHoareTripleChecker+Invalid, 1252 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 108 IncrementalHoareTripleChecker+Valid, 1144 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-20 18:42:35,923 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [293 Valid, 600 Invalid, 1252 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [108 Valid, 1144 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-20 18:42:35,924 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1664 states. [2024-09-20 18:42:37,290 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1664 to 1528. [2024-09-20 18:42:37,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1528 states, 1523 states have (on average 1.2147078135259357) internal successors, (1850), 1523 states have internal predecessors, (1850), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:37,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1528 states to 1528 states and 1854 transitions. [2024-09-20 18:42:37,294 INFO L78 Accepts]: Start accepts. Automaton has 1528 states and 1854 transitions. Word has length 66 [2024-09-20 18:42:37,294 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:42:37,295 INFO L474 AbstractCegarLoop]: Abstraction has 1528 states and 1854 transitions. [2024-09-20 18:42:37,295 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 47 states, 47 states have (on average 2.9361702127659575) internal successors, (138), 47 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:42:37,295 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:42:37,295 INFO L276 IsEmpty]: Start isEmpty. Operand 1528 states and 1854 transitions. [2024-09-20 18:42:37,297 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 67 [2024-09-20 18:42:37,297 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:42:37,297 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:42:37,309 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (23)] Forceful destruction successful, exit code 0 [2024-09-20 18:42:37,497 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable23 [2024-09-20 18:42:37,497 INFO L399 AbstractCegarLoop]: === Iteration 25 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:42:37,498 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:42:37,498 INFO L85 PathProgramCache]: Analyzing trace with hash -1621380802, now seen corresponding path program 9 times [2024-09-20 18:42:37,498 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:42:37,498 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [348892270] [2024-09-20 18:42:37,498 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:42:37,498 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:42:37,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:42:38,328 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:42:38,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:42:38,331 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 19 proven. 33 refuted. 0 times theorem prover too weak. 34 trivial. 0 not checked. [2024-09-20 18:42:38,331 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:42:38,331 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [348892270] [2024-09-20 18:42:38,331 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [348892270] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:42:38,331 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2037031594] [2024-09-20 18:42:38,331 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-20 18:42:38,331 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:42:38,331 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:42:38,333 INFO L229 MonitoredProcess]: Starting monitored process 24 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:42:38,334 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Waiting until timeout for monitored process [2024-09-20 18:42:38,509 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 6 check-sat command(s) [2024-09-20 18:42:38,510 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:42:38,511 INFO L262 TraceCheckSpWp]: Trace formula consists of 275 conjuncts, 48 conjuncts are in the unsatisfiable core [2024-09-20 18:42:38,513 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:42:38,557 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 48 treesize of output 35 [2024-09-20 18:42:38,561 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 1 [2024-09-20 18:42:38,898 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 8 [2024-09-20 18:42:38,910 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 24 proven. 31 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2024-09-20 18:42:38,910 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:42:47,386 INFO L134 CoverageAnalysis]: Checked inductivity of 86 backedges. 24 proven. 26 refuted. 0 times theorem prover too weak. 36 trivial. 0 not checked. [2024-09-20 18:42:47,386 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2037031594] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:42:47,386 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:42:47,386 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [18, 15, 15] total 44 [2024-09-20 18:42:47,386 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [287873824] [2024-09-20 18:42:47,387 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:42:47,387 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 44 states [2024-09-20 18:42:47,387 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:42:47,387 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 44 interpolants. [2024-09-20 18:42:47,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=357, Invalid=1533, Unknown=2, NotChecked=0, Total=1892 [2024-09-20 18:42:47,388 INFO L87 Difference]: Start difference. First operand 1528 states and 1854 transitions. Second operand has 44 states, 44 states have (on average 2.75) internal successors, (121), 44 states have internal predecessors, (121), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:00,355 WARN L293 SmtUtils]: Spent 12.07s on a formula simplification. DAG size of input: 66 DAG size of output: 53 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-20 18:43:12,507 WARN L293 SmtUtils]: Spent 12.07s on a formula simplification. DAG size of input: 62 DAG size of output: 49 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate) [2024-09-20 18:43:14,116 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:43:14,117 INFO L93 Difference]: Finished difference Result 2757 states and 3328 transitions. [2024-09-20 18:43:14,117 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2024-09-20 18:43:14,117 INFO L78 Accepts]: Start accepts. Automaton has has 44 states, 44 states have (on average 2.75) internal successors, (121), 44 states have internal predecessors, (121), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 66 [2024-09-20 18:43:14,117 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:43:14,123 INFO L225 Difference]: With dead ends: 2757 [2024-09-20 18:43:14,123 INFO L226 Difference]: Without dead ends: 1467 [2024-09-20 18:43:14,125 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 184 GetRequests, 117 SyntacticMatches, 0 SemanticMatches, 67 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1400 ImplicationChecksByTransitivity, 33.4s TimeCoverageRelationStatistics Valid=856, Invalid=3834, Unknown=2, NotChecked=0, Total=4692 [2024-09-20 18:43:14,125 INFO L434 NwaCegarLoop]: 28 mSDtfsCounter, 232 mSDsluCounter, 461 mSDsCounter, 0 mSdLazyCounter, 780 mSolverCounterSat, 63 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 232 SdHoareTripleChecker+Valid, 489 SdHoareTripleChecker+Invalid, 843 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 63 IncrementalHoareTripleChecker+Valid, 780 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-20 18:43:14,126 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [232 Valid, 489 Invalid, 843 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [63 Valid, 780 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-20 18:43:14,126 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1467 states. [2024-09-20 18:43:15,193 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1467 to 1111. [2024-09-20 18:43:15,194 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1111 states, 1106 states have (on average 1.1518987341772151) internal successors, (1274), 1106 states have internal predecessors, (1274), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:15,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1111 states to 1111 states and 1278 transitions. [2024-09-20 18:43:15,197 INFO L78 Accepts]: Start accepts. Automaton has 1111 states and 1278 transitions. Word has length 66 [2024-09-20 18:43:15,198 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:43:15,198 INFO L474 AbstractCegarLoop]: Abstraction has 1111 states and 1278 transitions. [2024-09-20 18:43:15,198 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 44 states, 44 states have (on average 2.75) internal successors, (121), 44 states have internal predecessors, (121), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:15,198 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:43:15,198 INFO L276 IsEmpty]: Start isEmpty. Operand 1111 states and 1278 transitions. [2024-09-20 18:43:15,199 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2024-09-20 18:43:15,199 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:43:15,200 INFO L216 NwaCegarLoop]: trace histogram [5, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:43:15,212 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (24)] Ended with exit code 0 [2024-09-20 18:43:15,400 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 24 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable24 [2024-09-20 18:43:15,400 INFO L399 AbstractCegarLoop]: === Iteration 26 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:43:15,400 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:43:15,401 INFO L85 PathProgramCache]: Analyzing trace with hash 1849335033, now seen corresponding path program 10 times [2024-09-20 18:43:15,401 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:43:15,401 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1425682701] [2024-09-20 18:43:15,401 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:43:15,401 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:43:15,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:43:15,596 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:43:15,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:43:15,598 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 0 proven. 33 refuted. 0 times theorem prover too weak. 59 trivial. 0 not checked. [2024-09-20 18:43:15,598 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:43:15,598 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1425682701] [2024-09-20 18:43:15,598 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1425682701] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:43:15,598 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1218810347] [2024-09-20 18:43:15,598 INFO L93 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2024-09-20 18:43:15,599 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:43:15,599 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:43:15,600 INFO L229 MonitoredProcess]: Starting monitored process 25 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:43:15,601 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Waiting until timeout for monitored process [2024-09-20 18:43:15,695 INFO L228 tOrderPrioritization]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 0 check-sat command(s) [2024-09-20 18:43:15,695 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:43:15,702 INFO L262 TraceCheckSpWp]: Trace formula consists of 282 conjuncts, 44 conjuncts are in the unsatisfiable core [2024-09-20 18:43:15,704 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:43:16,053 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 19 treesize of output 11 [2024-09-20 18:43:16,054 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 15 treesize of output 7 [2024-09-20 18:43:16,065 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 20 proven. 50 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2024-09-20 18:43:16,065 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:43:16,301 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:43:16,301 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 68 treesize of output 55 [2024-09-20 18:43:16,311 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:43:16,311 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 2 select indices, 2 select index equivalence classes, 0 disjoint index pairs (out of 1 index pairs), introduced 2 new quantified variables, introduced 1 case distinctions, treesize of input 45 treesize of output 35 [2024-09-20 18:43:16,410 INFO L134 CoverageAnalysis]: Checked inductivity of 92 backedges. 21 proven. 30 refuted. 0 times theorem prover too weak. 41 trivial. 0 not checked. [2024-09-20 18:43:16,410 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1218810347] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:43:16,410 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:43:16,410 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 14, 11] total 29 [2024-09-20 18:43:16,410 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [438871522] [2024-09-20 18:43:16,410 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:43:16,411 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 29 states [2024-09-20 18:43:16,411 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:43:16,411 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 29 interpolants. [2024-09-20 18:43:16,411 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=102, Invalid=710, Unknown=0, NotChecked=0, Total=812 [2024-09-20 18:43:16,412 INFO L87 Difference]: Start difference. First operand 1111 states and 1278 transitions. Second operand has 29 states, 29 states have (on average 4.137931034482759) internal successors, (120), 29 states have internal predecessors, (120), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:18,929 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:43:18,929 INFO L93 Difference]: Finished difference Result 1987 states and 2315 transitions. [2024-09-20 18:43:18,929 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2024-09-20 18:43:18,929 INFO L78 Accepts]: Start accepts. Automaton has has 29 states, 29 states have (on average 4.137931034482759) internal successors, (120), 29 states have internal predecessors, (120), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 68 [2024-09-20 18:43:18,930 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:43:18,935 INFO L225 Difference]: With dead ends: 1987 [2024-09-20 18:43:18,936 INFO L226 Difference]: Without dead ends: 1737 [2024-09-20 18:43:18,936 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 173 GetRequests, 121 SyntacticMatches, 1 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 527 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=374, Invalid=2382, Unknown=0, NotChecked=0, Total=2756 [2024-09-20 18:43:18,937 INFO L434 NwaCegarLoop]: 36 mSDtfsCounter, 370 mSDsluCounter, 587 mSDsCounter, 0 mSdLazyCounter, 1010 mSolverCounterSat, 11 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 370 SdHoareTripleChecker+Valid, 623 SdHoareTripleChecker+Invalid, 1021 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 11 IncrementalHoareTripleChecker+Valid, 1010 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-20 18:43:18,937 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [370 Valid, 623 Invalid, 1021 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [11 Valid, 1010 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-20 18:43:18,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1737 states. [2024-09-20 18:43:20,017 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1737 to 1120. [2024-09-20 18:43:20,018 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1120 states, 1115 states have (on average 1.1542600896860986) internal successors, (1287), 1115 states have internal predecessors, (1287), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:20,019 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1120 states to 1120 states and 1291 transitions. [2024-09-20 18:43:20,022 INFO L78 Accepts]: Start accepts. Automaton has 1120 states and 1291 transitions. Word has length 68 [2024-09-20 18:43:20,022 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:43:20,022 INFO L474 AbstractCegarLoop]: Abstraction has 1120 states and 1291 transitions. [2024-09-20 18:43:20,022 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 29 states, 29 states have (on average 4.137931034482759) internal successors, (120), 29 states have internal predecessors, (120), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:20,022 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:43:20,023 INFO L276 IsEmpty]: Start isEmpty. Operand 1120 states and 1291 transitions. [2024-09-20 18:43:20,024 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 76 [2024-09-20 18:43:20,024 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:43:20,024 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:43:20,042 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (25)] Forceful destruction successful, exit code 0 [2024-09-20 18:43:20,224 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 25 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable25 [2024-09-20 18:43:20,225 INFO L399 AbstractCegarLoop]: === Iteration 27 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:43:20,225 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:43:20,225 INFO L85 PathProgramCache]: Analyzing trace with hash 128915325, now seen corresponding path program 11 times [2024-09-20 18:43:20,225 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:43:20,225 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1855935816] [2024-09-20 18:43:20,225 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:43:20,226 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:43:20,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:43:20,391 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:43:20,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:43:20,393 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 39 proven. 27 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2024-09-20 18:43:20,393 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:43:20,393 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1855935816] [2024-09-20 18:43:20,393 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1855935816] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:43:20,393 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [456264010] [2024-09-20 18:43:20,393 INFO L93 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2024-09-20 18:43:20,394 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:43:20,394 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:43:20,395 INFO L229 MonitoredProcess]: Starting monitored process 26 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:43:20,397 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Waiting until timeout for monitored process [2024-09-20 18:43:21,331 INFO L228 tOrderPrioritization]: Assert order INSIDE_LOOP_FIRST1 issued 9 check-sat command(s) [2024-09-20 18:43:21,331 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:43:21,333 INFO L262 TraceCheckSpWp]: Trace formula consists of 307 conjuncts, 17 conjuncts are in the unsatisfiable core [2024-09-20 18:43:21,334 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:43:21,395 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 39 proven. 27 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2024-09-20 18:43:21,396 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:43:21,494 INFO L134 CoverageAnalysis]: Checked inductivity of 130 backedges. 39 proven. 27 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2024-09-20 18:43:21,495 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [456264010] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:43:21,495 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:43:21,495 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8, 8] total 18 [2024-09-20 18:43:21,495 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [641431667] [2024-09-20 18:43:21,495 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:43:21,495 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 18 states [2024-09-20 18:43:21,495 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:43:21,495 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 18 interpolants. [2024-09-20 18:43:21,496 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=72, Invalid=234, Unknown=0, NotChecked=0, Total=306 [2024-09-20 18:43:21,496 INFO L87 Difference]: Start difference. First operand 1120 states and 1291 transitions. Second operand has 18 states, 18 states have (on average 5.0) internal successors, (90), 18 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:22,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:43:22,454 INFO L93 Difference]: Finished difference Result 1478 states and 1679 transitions. [2024-09-20 18:43:22,455 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-09-20 18:43:22,455 INFO L78 Accepts]: Start accepts. Automaton has has 18 states, 18 states have (on average 5.0) internal successors, (90), 18 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 75 [2024-09-20 18:43:22,455 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:43:22,459 INFO L225 Difference]: With dead ends: 1478 [2024-09-20 18:43:22,459 INFO L226 Difference]: Without dead ends: 928 [2024-09-20 18:43:22,460 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 162 GetRequests, 146 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 74 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=72, Invalid=234, Unknown=0, NotChecked=0, Total=306 [2024-09-20 18:43:22,460 INFO L434 NwaCegarLoop]: 31 mSDtfsCounter, 0 mSDsluCounter, 234 mSDsCounter, 0 mSdLazyCounter, 181 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 265 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 181 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2024-09-20 18:43:22,460 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 265 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 181 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2024-09-20 18:43:22,461 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 928 states. [2024-09-20 18:43:23,322 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 928 to 928. [2024-09-20 18:43:23,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 928 states, 923 states have (on average 1.14192849404117) internal successors, (1054), 923 states have internal predecessors, (1054), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:23,324 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 928 states to 928 states and 1058 transitions. [2024-09-20 18:43:23,326 INFO L78 Accepts]: Start accepts. Automaton has 928 states and 1058 transitions. Word has length 75 [2024-09-20 18:43:23,326 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:43:23,327 INFO L474 AbstractCegarLoop]: Abstraction has 928 states and 1058 transitions. [2024-09-20 18:43:23,327 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 18 states, 18 states have (on average 5.0) internal successors, (90), 18 states have internal predecessors, (90), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:23,327 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:43:23,327 INFO L276 IsEmpty]: Start isEmpty. Operand 928 states and 1058 transitions. [2024-09-20 18:43:23,331 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 77 [2024-09-20 18:43:23,331 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:43:23,331 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:43:23,348 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (26)] Forceful destruction successful, exit code 0 [2024-09-20 18:43:23,532 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 26 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable26 [2024-09-20 18:43:23,532 INFO L399 AbstractCegarLoop]: === Iteration 28 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:43:23,532 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:43:23,532 INFO L85 PathProgramCache]: Analyzing trace with hash 846171212, now seen corresponding path program 12 times [2024-09-20 18:43:23,533 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:43:23,533 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [748786630] [2024-09-20 18:43:23,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:43:23,533 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:43:23,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:43:24,227 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:43:24,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:43:24,229 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 62 proven. 31 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-20 18:43:24,229 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:43:24,229 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [748786630] [2024-09-20 18:43:24,229 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [748786630] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:43:24,230 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1346303287] [2024-09-20 18:43:24,230 INFO L93 rtionOrderModulation]: Changing assertion order to MIX_INSIDE_OUTSIDE [2024-09-20 18:43:24,230 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:43:24,230 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:43:24,231 INFO L229 MonitoredProcess]: Starting monitored process 27 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:43:24,231 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Waiting until timeout for monitored process [2024-09-20 18:43:24,360 INFO L228 tOrderPrioritization]: Assert order MIX_INSIDE_OUTSIDE issued 5 check-sat command(s) [2024-09-20 18:43:24,360 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:43:24,361 INFO L262 TraceCheckSpWp]: Trace formula consists of 240 conjuncts, 40 conjuncts are in the unsatisfiable core [2024-09-20 18:43:24,363 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:43:24,914 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 44 proven. 59 refuted. 0 times theorem prover too weak. 30 trivial. 0 not checked. [2024-09-20 18:43:24,914 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:43:25,469 INFO L134 CoverageAnalysis]: Checked inductivity of 133 backedges. 44 proven. 50 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2024-09-20 18:43:25,470 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1346303287] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:43:25,470 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:43:25,470 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [16, 19, 16] total 42 [2024-09-20 18:43:25,470 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [136612039] [2024-09-20 18:43:25,470 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:43:25,470 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 42 states [2024-09-20 18:43:25,470 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:43:25,470 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 42 interpolants. [2024-09-20 18:43:25,471 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=270, Invalid=1452, Unknown=0, NotChecked=0, Total=1722 [2024-09-20 18:43:25,471 INFO L87 Difference]: Start difference. First operand 928 states and 1058 transitions. Second operand has 42 states, 42 states have (on average 3.2857142857142856) internal successors, (138), 42 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:28,176 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:43:28,176 INFO L93 Difference]: Finished difference Result 1306 states and 1480 transitions. [2024-09-20 18:43:28,177 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 53 states. [2024-09-20 18:43:28,177 INFO L78 Accepts]: Start accepts. Automaton has has 42 states, 42 states have (on average 3.2857142857142856) internal successors, (138), 42 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 76 [2024-09-20 18:43:28,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:43:28,182 INFO L225 Difference]: With dead ends: 1306 [2024-09-20 18:43:28,182 INFO L226 Difference]: Without dead ends: 1032 [2024-09-20 18:43:28,182 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 204 GetRequests, 132 SyntacticMatches, 0 SemanticMatches, 72 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1606 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=783, Invalid=4619, Unknown=0, NotChecked=0, Total=5402 [2024-09-20 18:43:28,183 INFO L434 NwaCegarLoop]: 31 mSDtfsCounter, 209 mSDsluCounter, 537 mSDsCounter, 0 mSdLazyCounter, 825 mSolverCounterSat, 36 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 209 SdHoareTripleChecker+Valid, 568 SdHoareTripleChecker+Invalid, 861 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 36 IncrementalHoareTripleChecker+Valid, 825 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2024-09-20 18:43:28,183 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [209 Valid, 568 Invalid, 861 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [36 Valid, 825 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2024-09-20 18:43:28,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1032 states. [2024-09-20 18:43:28,988 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1032 to 798. [2024-09-20 18:43:28,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 798 states, 793 states have (on average 1.1424968474148802) internal successors, (906), 793 states have internal predecessors, (906), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:28,989 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 798 states to 798 states and 910 transitions. [2024-09-20 18:43:28,992 INFO L78 Accepts]: Start accepts. Automaton has 798 states and 910 transitions. Word has length 76 [2024-09-20 18:43:28,992 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:43:28,992 INFO L474 AbstractCegarLoop]: Abstraction has 798 states and 910 transitions. [2024-09-20 18:43:28,992 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 42 states, 42 states have (on average 3.2857142857142856) internal successors, (138), 42 states have internal predecessors, (138), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:28,992 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:43:28,992 INFO L276 IsEmpty]: Start isEmpty. Operand 798 states and 910 transitions. [2024-09-20 18:43:28,993 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2024-09-20 18:43:28,993 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:43:28,993 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:43:29,006 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (27)] Forceful destruction successful, exit code 0 [2024-09-20 18:43:29,193 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable27,27 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:43:29,194 INFO L399 AbstractCegarLoop]: === Iteration 29 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:43:29,194 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:43:29,194 INFO L85 PathProgramCache]: Analyzing trace with hash -984218334, now seen corresponding path program 13 times [2024-09-20 18:43:29,194 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:43:29,194 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1206618306] [2024-09-20 18:43:29,194 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:43:29,194 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:43:29,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:43:29,615 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:43:29,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:43:29,617 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 0 proven. 36 refuted. 0 times theorem prover too weak. 100 trivial. 0 not checked. [2024-09-20 18:43:29,617 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:43:29,617 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1206618306] [2024-09-20 18:43:29,617 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1206618306] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:43:29,617 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1992780624] [2024-09-20 18:43:29,617 INFO L93 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2024-09-20 18:43:29,618 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:43:29,618 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:43:29,619 INFO L229 MonitoredProcess]: Starting monitored process 28 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:43:29,620 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Waiting until timeout for monitored process [2024-09-20 18:43:29,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:43:29,723 INFO L262 TraceCheckSpWp]: Trace formula consists of 314 conjuncts, 44 conjuncts are in the unsatisfiable core [2024-09-20 18:43:29,724 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:43:30,041 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 20 treesize of output 8 [2024-09-20 18:43:30,043 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 0 proven. 110 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-20 18:43:30,043 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:43:30,463 INFO L349 Elim1Store]: treesize reduction 5, result has 50.0 percent of original size [2024-09-20 18:43:30,464 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 3 select indices, 3 select index equivalence classes, 0 disjoint index pairs (out of 3 index pairs), introduced 3 new quantified variables, introduced 3 case distinctions, treesize of input 49 treesize of output 31 [2024-09-20 18:43:30,569 INFO L134 CoverageAnalysis]: Checked inductivity of 136 backedges. 39 proven. 57 refuted. 0 times theorem prover too weak. 40 trivial. 0 not checked. [2024-09-20 18:43:30,571 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1992780624] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:43:30,571 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:43:30,571 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 19, 15] total 39 [2024-09-20 18:43:30,572 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [502093017] [2024-09-20 18:43:30,572 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:43:30,573 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 39 states [2024-09-20 18:43:30,573 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:43:30,573 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 39 interpolants. [2024-09-20 18:43:30,574 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=220, Invalid=1262, Unknown=0, NotChecked=0, Total=1482 [2024-09-20 18:43:30,574 INFO L87 Difference]: Start difference. First operand 798 states and 910 transitions. Second operand has 39 states, 39 states have (on average 3.769230769230769) internal successors, (147), 39 states have internal predecessors, (147), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:32,946 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:43:32,946 INFO L93 Difference]: Finished difference Result 2303 states and 2696 transitions. [2024-09-20 18:43:32,946 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 22 states. [2024-09-20 18:43:32,946 INFO L78 Accepts]: Start accepts. Automaton has has 39 states, 39 states have (on average 3.769230769230769) internal successors, (147), 39 states have internal predecessors, (147), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 77 [2024-09-20 18:43:32,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:43:32,952 INFO L225 Difference]: With dead ends: 2303 [2024-09-20 18:43:32,952 INFO L226 Difference]: Without dead ends: 1608 [2024-09-20 18:43:32,953 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 181 GetRequests, 130 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 706 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=381, Invalid=2375, Unknown=0, NotChecked=0, Total=2756 [2024-09-20 18:43:32,953 INFO L434 NwaCegarLoop]: 49 mSDtfsCounter, 194 mSDsluCounter, 758 mSDsCounter, 0 mSdLazyCounter, 806 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 194 SdHoareTripleChecker+Valid, 807 SdHoareTripleChecker+Invalid, 825 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 806 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2024-09-20 18:43:32,953 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [194 Valid, 807 Invalid, 825 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 806 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2024-09-20 18:43:32,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1608 states. [2024-09-20 18:43:34,058 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1608 to 1053. [2024-09-20 18:43:34,059 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1053 states, 1048 states have (on average 1.133587786259542) internal successors, (1188), 1048 states have internal predecessors, (1188), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:34,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1053 states to 1053 states and 1192 transitions. [2024-09-20 18:43:34,062 INFO L78 Accepts]: Start accepts. Automaton has 1053 states and 1192 transitions. Word has length 77 [2024-09-20 18:43:34,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:43:34,063 INFO L474 AbstractCegarLoop]: Abstraction has 1053 states and 1192 transitions. [2024-09-20 18:43:34,063 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 39 states, 39 states have (on average 3.769230769230769) internal successors, (147), 39 states have internal predecessors, (147), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:34,063 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:43:34,063 INFO L276 IsEmpty]: Start isEmpty. Operand 1053 states and 1192 transitions. [2024-09-20 18:43:34,064 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2024-09-20 18:43:34,064 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:43:34,064 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 5, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:43:34,077 INFO L552 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (28)] Ended with exit code 0 [2024-09-20 18:43:34,264 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 28 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable28 [2024-09-20 18:43:34,265 INFO L399 AbstractCegarLoop]: === Iteration 30 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:43:34,265 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:43:34,265 INFO L85 PathProgramCache]: Analyzing trace with hash -1743097550, now seen corresponding path program 14 times [2024-09-20 18:43:34,265 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:43:34,265 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1306332264] [2024-09-20 18:43:34,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:43:34,265 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:43:34,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:43:34,595 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:43:34,596 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:43:34,598 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 0 proven. 132 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-20 18:43:34,598 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:43:34,598 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1306332264] [2024-09-20 18:43:34,598 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1306332264] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:43:34,598 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [30050119] [2024-09-20 18:43:34,598 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2024-09-20 18:43:34,598 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:43:34,598 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:43:34,600 INFO L229 MonitoredProcess]: Starting monitored process 29 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:43:34,601 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Waiting until timeout for monitored process [2024-09-20 18:43:34,703 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2024-09-20 18:43:34,703 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:43:34,704 INFO L262 TraceCheckSpWp]: Trace formula consists of 343 conjuncts, 39 conjuncts are in the unsatisfiable core [2024-09-20 18:43:34,706 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:43:34,891 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 0 proven. 144 refuted. 0 times theorem prover too weak. 39 trivial. 0 not checked. [2024-09-20 18:43:34,891 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:43:35,151 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 0 proven. 132 refuted. 0 times theorem prover too weak. 51 trivial. 0 not checked. [2024-09-20 18:43:35,151 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleZ3 [30050119] provided 0 perfect and 2 imperfect interpolant sequences [2024-09-20 18:43:35,151 INFO L185 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2024-09-20 18:43:35,151 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [12, 15, 12] total 28 [2024-09-20 18:43:35,151 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [974655665] [2024-09-20 18:43:35,151 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2024-09-20 18:43:35,151 INFO L551 AbstractCegarLoop]: INTERPOLANT automaton has 28 states [2024-09-20 18:43:35,151 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-09-20 18:43:35,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 28 interpolants. [2024-09-20 18:43:35,152 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=77, Invalid=679, Unknown=0, NotChecked=0, Total=756 [2024-09-20 18:43:35,152 INFO L87 Difference]: Start difference. First operand 1053 states and 1192 transitions. Second operand has 28 states, 28 states have (on average 5.214285714285714) internal successors, (146), 26 states have internal predecessors, (146), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:38,840 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-09-20 18:43:38,840 INFO L93 Difference]: Finished difference Result 2107 states and 2440 transitions. [2024-09-20 18:43:38,840 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 56 states. [2024-09-20 18:43:38,840 INFO L78 Accepts]: Start accepts. Automaton has has 28 states, 28 states have (on average 5.214285714285714) internal successors, (146), 26 states have internal predecessors, (146), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 87 [2024-09-20 18:43:38,840 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2024-09-20 18:43:38,846 INFO L225 Difference]: With dead ends: 2107 [2024-09-20 18:43:38,846 INFO L226 Difference]: Without dead ends: 2102 [2024-09-20 18:43:38,847 INFO L433 NwaCegarLoop]: 0 DeclaredPredicates, 229 GetRequests, 159 SyntacticMatches, 2 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1188 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=388, Invalid=4442, Unknown=0, NotChecked=0, Total=4830 [2024-09-20 18:43:38,847 INFO L434 NwaCegarLoop]: 175 mSDtfsCounter, 423 mSDsluCounter, 3016 mSDsCounter, 0 mSdLazyCounter, 2519 mSolverCounterSat, 29 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 423 SdHoareTripleChecker+Valid, 3191 SdHoareTripleChecker+Invalid, 2548 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 29 IncrementalHoareTripleChecker+Valid, 2519 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2024-09-20 18:43:38,848 INFO L435 NwaCegarLoop]: SdHoareTripleChecker [423 Valid, 3191 Invalid, 2548 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [29 Valid, 2519 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2024-09-20 18:43:38,848 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2102 states. [2024-09-20 18:43:40,362 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2102 to 1321. [2024-09-20 18:43:40,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1321 states, 1316 states have (on average 1.134498480243161) internal successors, (1493), 1316 states have internal predecessors, (1493), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:40,364 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1321 states to 1321 states and 1497 transitions. [2024-09-20 18:43:40,367 INFO L78 Accepts]: Start accepts. Automaton has 1321 states and 1497 transitions. Word has length 87 [2024-09-20 18:43:40,367 INFO L84 Accepts]: Finished accepts. word is rejected. [2024-09-20 18:43:40,368 INFO L474 AbstractCegarLoop]: Abstraction has 1321 states and 1497 transitions. [2024-09-20 18:43:40,368 INFO L475 AbstractCegarLoop]: INTERPOLANT automaton has has 28 states, 28 states have (on average 5.214285714285714) internal successors, (146), 26 states have internal predecessors, (146), 4 states have call successors, (5), 3 states have call predecessors, (5), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2024-09-20 18:43:40,368 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:43:40,368 INFO L276 IsEmpty]: Start isEmpty. Operand 1321 states and 1497 transitions. [2024-09-20 18:43:40,369 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 88 [2024-09-20 18:43:40,369 INFO L208 NwaCegarLoop]: Found error trace [2024-09-20 18:43:40,370 INFO L216 NwaCegarLoop]: trace histogram [6, 6, 6, 6, 5, 4, 4, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-09-20 18:43:40,383 INFO L540 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (29)] Forceful destruction successful, exit code 0 [2024-09-20 18:43:40,570 WARN L456 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29,29 /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:43:40,570 INFO L399 AbstractCegarLoop]: === Iteration 31 === Targeting __VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [__VERIFIER_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2024-09-20 18:43:40,570 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2024-09-20 18:43:40,571 INFO L85 PathProgramCache]: Analyzing trace with hash 1965063732, now seen corresponding path program 15 times [2024-09-20 18:43:40,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-09-20 18:43:40,571 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [797298401] [2024-09-20 18:43:40,571 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-09-20 18:43:40,571 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-09-20 18:43:40,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:43:41,680 INFO L381 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 0 [2024-09-20 18:43:41,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-09-20 18:43:41,682 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 35 proven. 110 refuted. 0 times theorem prover too weak. 38 trivial. 0 not checked. [2024-09-20 18:43:41,682 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-09-20 18:43:41,682 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [797298401] [2024-09-20 18:43:41,682 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [797298401] provided 0 perfect and 1 imperfect interpolant sequences [2024-09-20 18:43:41,682 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1565211101] [2024-09-20 18:43:41,683 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2024-09-20 18:43:41,683 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2024-09-20 18:43:41,683 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/certificate-witnesses-artifact/automizer/z3 [2024-09-20 18:43:41,684 INFO L229 MonitoredProcess]: Starting monitored process 30 with /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2024-09-20 18:43:41,684 INFO L327 MonitoredProcess]: [MP /storage/repos/certificate-witnesses-artifact/automizer/z3 -smt2 -in SMTLIB2_COMPLIANT=true (30)] Waiting until timeout for monitored process [2024-09-20 18:43:41,965 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST2 issued 7 check-sat command(s) [2024-09-20 18:43:41,965 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2024-09-20 18:43:41,969 INFO L262 TraceCheckSpWp]: Trace formula consists of 319 conjuncts, 145 conjuncts are in the unsatisfiable core [2024-09-20 18:43:41,971 INFO L285 TraceCheckSpWp]: Computing forward predicates... [2024-09-20 18:43:42,097 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 1 stores, 1 select indices, 1 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 1 new quantified variables, introduced 0 case distinctions, treesize of input 56 treesize of output 43 [2024-09-20 18:43:42,102 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 1, 1 stores, 0 select indices, 0 select index equivalence classes, 0 disjoint index pairs (out of 0 index pairs), introduced 0 new quantified variables, introduced 0 case distinctions, treesize of input 16 treesize of output 1 [2024-09-20 18:43:45,143 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-20 18:43:45,144 INFO L190 IndexEqualityManager]: detected not equals via solver [2024-09-20 18:43:45,145 INFO L173 IndexEqualityManager]: detected equality via solver [2024-09-20 18:43:45,147 INFO L349 Elim1Store]: treesize reduction 0, result has 100.0 percent of original size [2024-09-20 18:43:45,147 INFO L378 Elim1Store]: Elim1 eliminated variable of array dimension 2, 0 stores, 6 select indices, 6 select index equivalence classes, 10 disjoint index pairs (out of 15 index pairs), introduced 6 new quantified variables, introduced 15 case distinctions, treesize of input 45 treesize of output 22 [2024-09-20 18:43:45,184 INFO L134 CoverageAnalysis]: Checked inductivity of 183 backedges. 68 proven. 89 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2024-09-20 18:43:45,184 INFO L327 TraceCheckSpWp]: Computing backward predicates... [2024-09-20 18:44:10,792 WARN L293 SmtUtils]: Spent 16.62s on a formula simplification that was a NOOP. DAG size: 71 (called from [L 391] de.uni_freiburg.informatik.ultimate.lib.modelcheckerutils.smt.predicates.PredicateUnifier.getOrConstructPredicate)